Privacy Policy

Last updated: November 5, 2026

The data controller is , operator of Modellaris. Privacy questions: .

1. What we collect

Account: email, name (if provided), a password hash (we never store the password itself), plan, sign-up and last sign-in dates.
Content: messages, uploaded files, generated images, audio and files, your settings and About me card.
Technical data: usage records (model, cost, request time), the session cookie, browser type.
Payments: card details are processed by the payment provider; we only receive the payment status and the last digits of the card.

2. Why

to run the service: show your history, send requests to models, track limits;
to take payments and meet legal obligations (accounting, taxes);
to protect the service from abuse and to provide support.

We do not sell your data, do not use it for advertising, and do not train models on your messages.

3. Who receives data

Open models run on our own servers — your messages are not sent anywhere else.
Cloud models: the conversation and attachments are sent to the provider of the selected model in order to generate an answer — through OpenRouter (and on to the specific developer: Anthropic, OpenAI, Google and others) or directly to xAI. They process data under their own policies; some providers may retain requests for a limited time for abuse monitoring.
Web search: search queries written by the model are sent to search services (DuckDuckGo, Wikipedia, Reddit, GitHub and others) without your account data.
Payment provider — to process payments.
Public authorities — only when legally required.

4. Retention

Chats and files — until you delete them or your account. Temporary chats are deleted after 24 hours.
Voice recordings for dictation — not stored; deleted immediately after transcription.
Payment records — as long as the law requires.

5. Your rights

Download your data: Settings → Privacy → “Download my data”.
Delete chats or your whole account: Settings → Privacy / Account.
Correct your data, restrict or object to processing, or withdraw consent — email . We reply within 30 days.
Lodge a complaint with your local data protection authority.

6. Cookies

We use only one essential session cookie (mw_session) to keep you signed in, plus browser local storage for appearance settings. There are no analytics or advertising cookies.

7. Security

Passwords are stored as a strong hash (scrypt), sessions as a hash of the token. Server access is restricted. No system is perfectly secure; if a breach affects your data, we will notify you and the regulator within the time required by law.

8. Children

The service is intended for people aged 18 and over. If you learn that a child has created an account, contact us and we will delete it.

9. Changes

We will notify you of material changes to this policy by email or in the service.