Privacy Policy

---

OneAIWorld Privacy Policy

Last Updated: May 28, 2025

Information We Collect

How We Use Your Information

We use the personal information we collect for various purposes consistent with our obligations and your expectations, including to:

• Provide and Maintain the Services: We use your information to create and manage your account, authenticate you when you log in, and deliver the features and services you request. This includes processing your inputs and generating outputs through our AI models and generally enabling you to use our website and AI tools.
• Improve and Personalize Your Experience: Information about you and your usage helps us understand user preferences, customize your experience (for example, by remembering your settings or showing content relevant to your interests), and develop new features. We may analyze how users interact with our Services to make improvements and ensure our AI models and platform are functioning effectively.
• Respond to Inquiries and Provide Support: We use contact information (like your email or phone number) to respond when you reach out with questions, requests, or support needs. This includes sending confirmations, answering your inquiries, and providing customer service.
• Send Administrative Communications: We may send you important information about the Services, such as changes to our terms or this Privacy Policy, security or fraud alerts, account status updates, or other notices. These communications are primarily transactional or relationship messages and not promotional in nature.
• Send Marketing Communications (with Consent): If you have agreed or as permitted by law, we may send you newsletters or promotions about new features, content, or special offers we think you'd like. You can opt out of marketing messages at any time as described in Your Rights and Choices below. We will not send you promotional communications if you have opted out or if it is unlawful to do so.
• Conduct Research and Analytics: We may use information (often in aggregated or de-identified form) to understand user demographics, interests, and usage patterns. This helps us refine our AI models' performance, troubleshoot issues, and generally improve the quality and reliability of our Services.
• Ensure Security and Prevent Fraud: Your information is also used to maintain the security and integrity of our platform. For example, we may monitor usage and interactions to detect and prevent fraudulent activity, abuse, cheating, or violations of our Terms of Use or Code of Conduct. We also use data to debug and fix errors, and to protect against other malicious or unauthorized activity.
• Comply with Legal Obligations: In certain cases we must process personal information to comply with applicable laws, regulations, subpoenas or legal processes. For instance, we might retain transaction records for financial reporting or respond to valid requests from law enforcement.
• Enforce Our Terms and Policies: We may use your data as necessary to enforce our Terms of Use, Code of Conduct, and other agreements, and to prevent misuse of the Services. This includes using information to investigate or address violations, and to cooperate with legal or regulatory inquiries when required.

We will retain your personal information only for as long as necessary to fulfill the above purposes or as required by law. See Data Retention below for more details on our retention practices.

AI Services and Data Usage

Legal Basis for Processing

We only collect and process your personal information when we have a valid legal reason to do so. Depending on the context, our legal bases include:

• Consent: We process certain information based on your consent. For example, if you sign up to receive marketing emails or if we ask for your permission to collect sensitive information or enable certain cookies, we rely on your consent. You have the right to withdraw your consent at any time.
• Contractual Necessity: We process personal data as needed to fulfill our contract with you -- namely, to provide the Services you have requested. When you create an account and agree to our Terms of Use, a contract is formed. We need to process your data (such as account details, and user content) to provide the core features of our platform, including delivering AI outputs you request. If you subscribe to a paid service, we process your payment and account data to complete the transaction and provide the paid features.
• Legal Obligation: In some cases, we are legally required to process certain data. For instance, we may need to retain transaction records for tax and accounting purposes or disclose information in response to a court order. We will only process and share the minimum amount of data necessary to comply with our legal obligations.
• Legitimate Interests: We process information as needed for our legitimate business interests, provided those interests are not overridden by your data-protection rights. This includes using data to secure and improve our Services, prevent fraud, understand how users interact with our platform, develop new products or features, and promote our Services to interested users. When we rely on legitimate interests, we carefully consider and balance any potential impact on your rights. For example, we may analyze usage data to optimize user experience (a legitimate interest) but we do so in a way that does not unduly impact your privacy (such as by aggregating data and providing opt-outs for certain tracking).

We may process the same information under more than one legal basis depending on the activity. For example, we might process your email address both to fulfill a contract (e.g. creating your account) and under legitimate interest (sending you service-related updates). Regardless of the basis, we are committed to protecting your personal information at all times.

How We Share Your Information

We do not disclose or share personal information we collect about you with third parties except as described in this Privacy Policy. We may share information in the following circumstances and with the following parties:

• With Your Consent or At Your Direction: We will share your information with third parties if you specifically consent to or request such sharing. For example, if you link your OneAIWorld account with another service or choose to publish content to a third-party platform, we will share data as needed to fulfill your request.
• Service Providers and Contractors: We share personal information with trusted third-party companies that perform services on our behalf. These include service providers such as cloud hosting and server infrastructure providers, data storage services, AI model API providers (see below), analytics providers, email service providers, payment processors, customer support tools, and other IT or security providers. These parties process data under our instructions to help us operate and improve the Services, and they are not permitted to use your data for their own unrelated purposes.
• Affiliates and Business Partners: We may share information with our affiliate companies (entities that are under common ownership or control with OneAIWorld) as needed to operate our platform and provide the Services to you. Any such affiliates will handle your information in accordance with this Policy. We may also share limited information with business partners or joint ventures in connection with offering integrated services or co-sponsored features, but only with appropriate protections and, where required, with your consent.
• Legal Compliance and Protection: We will disclose personal information to government or law enforcement officials, regulators, courts, or other third parties when we believe in good faith that such disclosure is necessary to (i) comply with a legal obligation or valid legal process (such as a subpoena, court order, or search warrant); (ii) enforce our Terms of Use or other agreements; (iii) respond to claims or allegations against OneAIWorld; (iv) protect the rights, property, or personal safety of OneAIWorld, our users, or the public; or (v) detect, prevent, or address fraud, security, or technical issues.
• Corporate Transactions: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or other business transaction, your information may be transferred to a successor or affiliate as part of that transaction. We will ensure that any such entity is bound to respect your personal data in a manner consistent with this Privacy Policy. If a change in ownership occurs, we will provide notice (for example, via the website or email) and let you know of any choices you may have regarding your personal information.
• Other Users and Public Sharing: Only when you intentionally share content or interact in public areas of our Service (such as posting in a community forum, commenting on a public thread, or contributing to a public gallery), certain information associated with you may be visible to others. For example, if your user profile name and picture are displayed alongside content you post, other users on the platform will see that. We allow you to control what information you share publicly through your account settings and the nature of your participation. Please be mindful that any information you choose to make public on our platform (including in AI "gallery" showcases or similar features) can be seen and used by others and may be indexed by search engines.

We do not sell your personal information to third parties for monetary consideration. We also do not share your personal information with unaffiliated third parties for their own marketing or advertising purposes without your opt-in consent. In other words, unless you explicitly allow it, we will not disclose your personal data to outside companies for them to market their products to you.

Third-Party Service Providers and Partners

We rely on certain third-party companies and partners to assist us in providing and supporting our Services. We want you to understand who these third parties are and how we safeguard your information in these contexts:

Categories of Third-Party Processors: Our third-party service providers ("processors") include, for example: cloud hosting providers and data center services (which store our databases and run our applications), content delivery networks (which help deliver our website content quickly around the world), payment processors (to securely handle credit card transactions and subscriptions), email and communications platforms (to send verification emails, newsletters, or support messages), analytics and crash reporting services (to help us understand usage and fix issues), and AI model API providers (to power the generative AI features of our platform). We may also work with advertising networks or social media partners to promote our Services, though any sharing for those purposes would be done in accordance with this Policy and with your consent where required.

Obligations and Safeguards: Whenever we share your data with a service provider or partner, it is on the basis of a contract or comparable arrangement that requires them to use your data only to provide services to us and to handle your data with a high level of confidentiality and security. These third parties (and any sub-processors they employ) must implement appropriate technical and organizational measures to protect personal information, and they are not permitted to use your data for their own independent purposes. We carefully vet our service providers and choose reputable companies with strong privacy and security track records. If a provider is located in a country that does not have the same level of data protection laws as your jurisdiction, we will ensure an adequate level of protection by implementing legal transfer mechanisms.

Third-Party AI Model Providers:

A core feature of OneAIWorld is access to advanced AI models for text and image generation. To deliver these features, we integrate with external providers such as OpenAI, Meta, Stability AI, Google (e.g., the Gemini model), DeepSeek, Qwen, FLUX, and others. These companies power the AI algorithms that generate content based on your inputs. When you use an AI feature (for example, asking a question to a language model or creating an image with a diffusion model), the necessary data (your prompt and context) is sent securely to the third-party model provider's system, which processes the data and returns the generated output to us.

We take steps to ensure that your personal data is handled responsibly in these AI interactions. First, we only share the information that is needed to generate your result (typically the text of your prompt and any required parameters) and, where possible, we anonymize or exclude direct identifiers from these prompts. Second, we partner with model providers that have privacy commitments consistent with our own. For example, many of our AI providers have policies stating they will not use customer-provided data to train their models or for any purpose other than generating the requested output. We rely on and enforce those commitments --- the data you send for AI processing should not be stored by the provider beyond the processing of your request, except for allowable transient caching or abuse monitoring. Third, we contractually require that these AI providers protect the confidentiality and security of your data. They must implement safeguards and are subject to strict obligations (and liabilities) under their agreements with us. In the event any AI provider would like to use your data for improving their services (beyond your individual session), they would need to do so only with appropriate legal basis and typically only in an aggregated or de-identified form. If this ever changes or if we consider using a provider that handles data differently, we will update this Policy and provide you with any required notice or choices.

Disclosure about AI Limitations: Please be aware that while we do our best to partner with responsible AI providers, we do not control those third-party companies. If an AI provider ever suffered a data breach or failed to honor its privacy commitments, we would take appropriate action on our end (such as suspending the integration and informing affected users as required). However, as with any cloud service integration, there is always some inherent risk in transmitting data to an external system. By using our AI features, you understand that your input is being processed by a third-party AI model on our behalf. We continuously monitor our third-party processors for compliance and will adjust our practices if needed to ensure your information remains protected.

International Data Transfers

OneAIWorld is based in the United States, and we may process and store your personal information on servers located in the U.S. and other countries. If you are accessing our Services from outside the United States, be aware that your information may be transferred to, stored in, and processed in a country that is different from your home jurisdiction. The data protection and privacy laws in those countries might not be as comprehensive or equivalent to those in the country where you initially provided the information.

However, we value your privacy and take steps to ensure that international data transfers are protected in line with applicable legal requirements. Where required by law, we implement appropriate safeguards for cross-border data transfers. These may include measures such as standard data protection clauses (contractual commitments approved by regulators), relying on a destination country's adequacy decision (if authorities have deemed the country as providing sufficient privacy protection), or other legally recognized mechanisms. Our goal is to ensure that your personal information receives a high level of protection wherever it is processed.

By using the Services or providing us with information, you acknowledge that your personal data may be transferred to and processed in countries outside of your own. In all cases, we will handle your personal information as described in this Privacy Policy. If you have questions about our international data transfer practices, you can contact us using the information below.

Data Retention

We retain personal information for only as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, or as required by law. The exact duration we keep your data will depend on the type of information and the reason we collected it. For example:

• Account Information: We keep your account profile information (such as your name, email, and credentials) for as long as your account is active. If you choose to delete your account, we will delete or anonymize this information within a reasonable period after your request, except for information we are required to retain for legal or legitimate business purposes.
• Usage Data: We may retain logs of your visits, interactions, and usage of the Services for a shorter period, primarily for analytics and security purposes. Typically, usage data that is not linked to your identity may be kept longer in aggregate form (without personal identifiers) to help us improve the Service.
• AI Interaction Data: As noted in AI Services and Data Usage, prompts and outputs are generally not stored long-term in a way that is identifiable to you. Such data might be held briefly (e.g., for a few weeks or less) for monitoring and debug purposes and then deleted or anonymized.
• Communication Records: If you contact us (for example, via support email), we may keep records of that correspondence for a period of time in order to manage our relationship and improve our customer service.
• Legal and Transaction Records: We will retain certain information if necessary for legal compliance or legitimate business interests. For instance, after you delete your account or after we fulfill a deletion request, we might need to keep some data to resolve disputes, enforce our agreements, or comply with record-keeping requirements. Likewise, transactional records (like proof of purchase or payment records) may be kept for accounting/tax purposes or as required by financial regulations.

When we no longer have a legitimate need or legal obligation to keep your personal information, we will securely dispose of it. This may involve erasing it from our systems or anonymizing it so that it can no longer be associated with you.

If you request that we delete your personal data, we will make reasonable efforts to honor your request. Note that residual copies of your information might not be immediately removed from our backup systems for technical reasons, but we will ensure that your data is not readily accessible or processed for any further purposes beyond backup retention and will delete or overwrite such data in the normal backup cycle.

Data Security

We employ a range of technical and organizational measures to safeguard your personal information against unauthorized access, alteration, disclosure, or destruction. These security measures are designed to protect data during both transmission and storage. For example, we use industry-standard encryption protocols (SSL/TLS) to protect data transmitted between your device and our servers. Our databases are protected by encryption, firewalls, access controls, and other best-practice security technologies to prevent unauthorized access. We also limit internal access to personal information: only employees, contractors, and agents who need the data to perform their duties have permission to access it, and they are bound by strict confidentiality obligations.

We continuously work to update and improve our security practices to meet or exceed industry standards. We also have procedures in place to deal with any suspected data breach, including notifying users and regulators as required by law.

However, please note that no method of transmitting information over the internet or storing data is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. You share and transmit information at your own risk. It is important that you also play a role in keeping your information safe. We encourage you to choose a strong, unique password for your OneAIWorld account and to keep your login credentials confidential. If you suspect any unauthorized access to or use of your account, please notify us immediately.

Your Rights and Choices

Your Choices (Cookies and "Do Not Track"):

In addition to the formal rights above, you have several privacy choices that you can exercise directly:

• Cookies & Tracking Technologies: As mentioned, you can control or limit how cookies and similar technologies are used. Most web browsers allow you to refuse new cookies, disable existing cookies, or alert you when new cookies are set. Please refer to your browser's help documentation for instructions on how to manage cookies. You can also typically find options in your device's settings to reset mobile identifiers or opt out of targeted advertising on mobile. Keep in mind that if you disable or delete cookies, some features of our Services may not function properly (for example, you might need to re-enter your login information or your preferences may not be saved). We do not currently respond to "Do Not Track" signals from web browsers, because there is not yet an industry consensus on how to interpret them. Instead, we offer the cookie and preference options described here.
• Analytics and Advertising Opt-Out: We use third-party analytics services (like Google Analytics) to understand how our site is used. These services may use cookies or scripts to collect usage information. If you wish, you can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, or opt out of certain other analytics or advertising tracking by using industry opt-out tools (such as the Network Advertising Initiative's or Digital Advertising Alliance's opt-out pages). For any personalized advertising that may occur through our site (for example, ads powered by Google AdSense or similar partners), you can manage your ad preferences via the advertising settings provided by those third parties. If required by law, we will seek your consent before using or allowing certain cookies that facilitate advertising.

Remember, our goal is to be transparent and give you control. If you have any questions or need assistance with managing your privacy preferences, please contact us and we will be happy to help.

Children's Privacy

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will post the revised Privacy Policy on our website and update the "Effective Date" at the top. The updated Policy will become effective as of the published effective date.

If we make any material changes to how we collect or use your personal information, we will take additional steps to notify you. This may include posting a prominent notice on our website or, if appropriate, sending you a direct notification (such as an email to the address associated with your account). We encourage you to review this Privacy Policy periodically to stay informed about our data practices and the ways you can protect your privacy.

Your continued use of the Services after any changes to this Privacy Policy have become effective will constitute acceptance of those changes, to the extent permitted by law. If you do not agree with any updates or modifications, you should stop using the Services and, if you wish, deactivate your account.