Privacy Policy

Last updated: March 8, 2026

At PanelPeeps, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

1.1 Information You Provide

When you use PanelPeeps, we collect information that you voluntarily provide:

• Account Information: Email address for authentication and account creation
• Persona Data: Demographic characteristics, behavioral attributes, and custom descriptions you enter when creating AI personas
• Conversation Content: Messages you send to AI personas and the responses generated
• Payment Information: Payment details processed securely through Stripe (we do not store full credit card numbers)

1.2 Automatically Collected Information

We automatically collect certain information when you use our service:

• Usage Data: Pages viewed, features used, actions taken, time spent on the platform
• Device Information: Browser type, operating system, device type, IP address (hashed for privacy)
• Analytics Data: Page views, referral sources, session duration, and user interaction patterns
• Cookies and Tracking: Session cookies for authentication and functional cookies for service delivery

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Create and store your personas, enable conversations, maintain conversation history
• Process Payments: Handle subscription billing and payment verification through Stripe
• Improve AI Responses: Analyze conversation patterns to enhance persona realism and response quality
• Platform Analytics: Understand how users interact with features to improve the product
• Authentication: Verify your identity and maintain secure access to your account
• Communication: Send important service updates, security alerts, and subscription notifications
• Support: Respond to your questions and provide customer assistance

3. Third-Party Services and Data Sharing

We share your information with the following third-party service providers:

3.1 Stripe (Payment Processing)

We use Stripe to process subscription payments. When you subscribe, Stripe collects your payment information directly. Stripe's use of your personal information is governed by their Privacy Policy. We receive only transaction confirmation and subscription status from Stripe—we never see your full credit card numbers.

3.2 OpenAI (AI Model Provider)

AI persona responses are generated using OpenAI's language models. When you interact with a persona, your messages and the persona's profile data are sent to OpenAI's API to generate responses. OpenAI's data practices are governed by their Privacy Policy. As of our last update, OpenAI does not use API data to train their models, but you should review their current policy for the latest information.

3.3 Database Hosting (Neon/PostgreSQL)

Your account data, personas, and conversation history are stored in a PostgreSQL database hosted by Neon. Data is stored securely with encryption at rest and in transit.

3.4 Application Hosting (Render)

Our web application is hosted on Render's cloud infrastructure. Render processes web traffic and maintains server logs containing IP addresses and access patterns.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide the service. Specifically:

• Account Data: Retained until you delete your account
• Personas and Conversations: Retained indefinitely unless you delete them or close your account
• Analytics Data: Aggregated usage data retained for 24 months
• Payment Records: Transaction history retained for 7 years for accounting and compliance purposes
• Server Logs: Access logs retained for 90 days

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit using TLS/SSL and at rest in our database
• Authentication: Secure JWT-based authentication with bcrypt password hashing
• Access Controls: Limited employee access to production data on a need-to-know basis
• Payment Security: PCI-compliant payment processing through Stripe

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your information.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to provide and improve our service:

• Authentication Cookies: Required for login and session management (JWT tokens stored in HTTP-only cookies)
• Analytics Cookies: Track page views, feature usage, and user behavior patterns
• Visitor ID: A randomly generated ID stored in local storage to track unique visitors across sessions

You can disable cookies in your browser settings, but this may limit functionality of the service.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You can access your account data, personas, and conversations at any time through the PanelPeeps dashboard. You may request a copy of your data by contacting us at support@polsia.app.

7.2 Deletion

You can delete individual personas and conversations from your dashboard. To delete your entire account and all associated data, contact us at support@polsia.app. Account deletion is permanent and cannot be undone.

7.3 Correction

You can update your email address and modify persona profiles directly through the application. For other corrections, contact us at support@polsia.app.

7.4 Opt-Out

You may opt out of non-essential communications by updating your account preferences or contacting us. You cannot opt out of essential service communications (e.g., security alerts, billing notifications).

7.5 Do Not Sell

We do not sell your personal information to third parties. We only share data with service providers necessary to operate the platform (Stripe, OpenAI, hosting providers).

8. Children's Privacy

PanelPeeps is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. By using PanelPeeps, you consent to the transfer of your information to the United States and other countries where our service providers operate.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about the personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, so opt-out does not apply
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, email us at support@polsia.app with "CCPA Request" in the subject line.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on contract performance (to provide the service), legitimate interests (to improve the product), and consent (for analytics)
• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for optional processing

To exercise these rights or lodge a complaint with a supervisory authority, contact us at support@polsia.app.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we will provide notice through the service or by email.

Your continued use of PanelPeeps after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@polsia.app
Company: PanelPeeps

14. Summary of Key Points

What we collect: Email, personas, conversations, payment info (via Stripe), usage analytics
How we use it: Provide service, process payments, improve AI, platform analytics
Who we share with: Stripe (payments), OpenAI (AI responses), hosting providers
Your rights: Access, delete, correct, export your data
We do not sell your data.