Privacy Policy

Last updated: June 10, 2026

AINUDEZ (the “Company,” “we,” “our,” or “us”) respect your privacy and are committed to protecting it through our compliance with this policy. This policy describes how we collect, process, retain, and disclose personal data about you when providing services to you through our websites, applications, and services that link to this policy (our “Services”) and our practices for using, maintaining, protecting, and disclosing that information.

This policy applies only to information we collect:

• Through the Services.

• In communications, including email, text, chat, and other electronic messages, between you and the Services.

It does not apply to information collected by:

• Us offline or through any other means, including on any other website operated by the Company or any third party that does not link to this policy; or

• Any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Services.

We may provide additional or different privacy policies that are specific to certain features, services, or activities.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this privacy policy. Where we rely on consent for specific processing activities, we will obtain your consent as required by applicable law. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the Services after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children’s and Minors’ Data

Our Services are not intended for, and we do not knowingly collect any personal data from, children under the age of 18. If we learn we have collected or received personal data from a child under 18 years old without verification of parental consent, we will delete that information.

The Personal Data That We Collect or Process

“Personal data” is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, or payment information (for example, account information such as name, and email address, credit card number, or any other identifier we may use to contact you online or offline).

The types and categories of personal data that we collect or process include:

• Account information, including your email address (which may serve as your username), login credentials, and account settings.

• Payment and transaction information, including records of credit purchases, cryptocurrency payments, wallet addresses, blockchain transaction hashes, transaction amounts, timestamps, network information, payment status, confirmation details, and limited payment-related information provided by our third-party cryptocurrency payment processors or other payment service providers. We do not collect or store payment card numbers or payment card security codes.

• Input data for content generation, including text prompts, instructions, preferences, selections, and any reference materials or other content you provide to generate outputs through the Services.

• Media content, including images, videos, and other files you upload, store, or generate through the Services, including reference materials, generated outputs, and content maintained in your private media library.

• Communications and support information, including the contents of emails, support requests, and other messages you send us, which may include your name, contact details, and any other information you choose to provide.

• Usage information, including information about how you interact with the Services, such as features used, generation requests submitted, account activity, and the dates and times of your activity.

• Device and network information, including your IP address, device identifiers, operating system and version, preferred language, hardware identifiers, browser type and settings, and other technical information about the devices you use to access the Services.

• Approximate location information, including general geographic location such as your country, state, province, or city, which we may infer from your IP address or receive from service providers.

• Age confirmation information, including your self-reported confirmation that you are 18 years of age or older and, where required by applicable law, a verification result from our third-party age-verification provider indicating whether you meet the minimum age requirements. We do not collect or store your date of birth or government identification numbers unless required by law, and we do not use age-confirmation information for profiling or targeted advertising.

• Third-party authentication information, if you choose to sign in using a third-party provider such as Google or X, including the information that provider makes available to us, which may include your email address and basic profile information.

If you are a California resident, to access our supplemental California privacy statement, visit the CCPA privacy notice for California Residents.

Some of the information identified above may be considered sensitive data under certain laws. For example, when using the Services you may choose to share information that reveals sexual preferences or fantasies. We do not intentionally solicit this type of information. If you disclose such information, we process it only as necessary to provide the Services, ensure safety and moderation, and comply with applicable law. Where required under applicable law, we will collect and process sensitive personal data only with your consent. If you choose not to provide or allow us to collect certain information, we may not be able to provide you with requested features, services, or information.

We also collect:

• Statistics or aggregated information. We may create statistical, de-identified, or aggregated information that does not directly identify you. For example, we may analyze aggregated usage data to understand how users interact with the Services, such as the number of users who use a particular feature.

• Technical and usage information. We collect technical information about the devices and networks you use to access the Services and information about how you interact with the Services, such as IP address, browser type, device identifiers, operating system, referring pages, dates and times of access, pages or features used, generation activity, and other log and analytics information.

If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data.

How We Collect Your Personal and Other Data

You Provide Information to Us

We collect information you provide when you use the Services, including when you create or update an account, purchase credits, contact us, submit prompts or other inputs, and upload or generate content through the Services.

Automatically Through Our Services

As you use the Services, we automatically collect certain information about your device and your interactions with the Services. This may include your IP address, device identifiers, operating system, browser type, and information about how you use the Services, such as features accessed, generation activity, pages viewed or features accessed, and the dates and times of your activity.

We and our service providers may collect this information using cookies and similar technologies. This information helps us operate, maintain, and improve the Services, including by understanding usage patterns, preventing misuse, and diagnosing technical issues.

The technologies we use for this automatic data collection may include:

• Cookies. A cookie is a small file placed on your device when you interact with the Services. You may refuse to accept or disable cookies through your browser or device settings. However, if you do so, some features of the Services may not function properly. Where required by applicable law (including under the GDPR and ePrivacy Directive), we will obtain your consent before placing non-essential cookies or similar technologies on your device. You may withdraw your consent at any time by adjusting your preferences through the cookie banner or settings tool available on the Services. Essential cookies, which are necessary for the operation of the Services, cannot be disabled.

To the extent that our use of cookies or similar technologies is considered a “sale,” “sharing,” targeted advertising, or profiling under applicable law, you may have the right to opt out of such uses. You may exercise this right by contacting us at privacy@ainudez.com. Please note that some features of the Services may not function properly as a result.

When you use the Services, we may work with third-party service providers that use automated technologies to collect information about your device and interactions with the Services on our behalf. These service providers may include:

• Analytics providers.

• Fraud prevention and security vendors.

• Age and identity verification providers.

These third-party service providers may use automated technologies to collect information about your device and interactions with the Services on our behalf, such as for analytics, security, fraud prevention, and operational support. The information collected may be associated with your personal data.

These service providers are not permitted to use information collected through the Services for their own marketing or advertising purposes, and we do not allow third-party advertising networks to collect data about you on the Services.

From Service Providers and Third Parties

We may receive personal data about you from third parties and combine it with information we collect directly from you. For example, we may receive information from service providers that perform services on our behalf, such as crypto payment processors, email and communications providers, content delivery and hosting providers, age verification providers, customer support providers, and analytics, security, and fraud-prevention services. We may also receive information from third-party authentication providers if you choose to sign in using those services.

How We Use Your Information

We use information that we collect about you or that you provide to us, including personal data, to:

• Provide, operate, and maintain the Services, including processing your inputs and generating outputs you request.

• Process credit purchases and payments.

• Provide you with account-related notices, including updates and changes to the Services.

• Improve and develop the Services, including by analyzing usage patterns and creating aggregated or de-identified data to understand how users interact with the Services.

• Carry out our obligations and enforce our rights arising from any agreements between you and us, including for billing and collection.

• Detect, investigate, and prevent fraudulent, harmful, or unauthorized activity on the Services, including monitoring for violations of our Terms of Service.

• Verify your age and identity where required by law.

• Respond to your inquiries, support requests, and disputes, and provide customer service.

• Respond to lawful requests from public authorities, including to comply with legal obligations or law enforcement requests.

• Report suspected illegal activity or content as required or permitted by applicable law.

• In any other way we may describe when you provide the information.

• For any other purpose with your consent.

The usage information we collect helps us operate, maintain, and improve the Services, including by understanding how users interact with the Services, analyzing usage patterns, and ensuring the performance and security of the Services.

We may use your information to contact you with service-related communications, such as account updates or important notices.

We use location information to determine whether you are accessing the Services from a jurisdiction that requires age verification, to comply with applicable laws and regulations, to detect and prevent fraud, and to enforce our Terms of Service.

Who We Disclose Your Information To

We may disclose aggregated or de-identified information that does not identify any individual without restriction.

We may disclose personal data that we collect or that you provide as described in this privacy policy:

• To our subsidiaries and affiliates.

• To contractors, service providers, and other third parties that perform services on our behalf, and who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.

• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of AINUDEZ’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by AINUDEZ is among the assets transferred.

• To fulfill the purpose for which you provide it.

• For any other purpose disclosed by us when you provide the information.

• With your consent.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.

• To enforce or apply our Terms of Service and other agreements, including for billing and collection purposes.

• If we believe disclosure is necessary or appropriate to protect our rights, property, or safety, or that of our users or others, including for fraud prevention and security purposes.

The categories of personal data we may disclose include:

• Account information

• Payment and transaction information

• Input data for content generation

• Media content

• Communications and support information

• Usage information

• Device and network information

• Approximate location information

• Third-party authentication information

International Data Transfers

We are based in Estonia. As a result, your personal data may be processed, stored, or accessed in countries outside of your country of residence, including jurisdictions that may not provide the same level of data protection as your home country.

If you are located in the European Economic Area (EEA), or Switzerland, your personal data may be transferred to countries outside those regions, including the United States. Where required by applicable law, we implement appropriate safeguards to ensure your personal data receives an adequate level of protection. These safeguards may include the use of Standard Contractual Clauses approved by the European Commission, or the Swiss Addendum to the Standard Contractual Clauses.

If you are located in Canada, please note that personal data transferred outside Canada may be accessible to foreign law enforcement or other authorities under the laws of those jurisdictions.

For more information about these safeguards, please contact us at privacy@ainudez.com.

Your Rights and Choices About Your Information

This section describes mechanisms you can use to control certain uses and disclosures of your information, as well as rights you may have under applicable law depending on where you live.

Advertising, marketing, cookies, and other tracking technologies choices:

• Cookies and Other Tracking Technologies. You can set your browser to refuse all or some cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, some features of the Services may not function properly. Where we rely on your consent for the use of non-essential cookies or similar technologies, you may withdraw that consent at any time by adjusting your preferences through the cookie banner or settings tool available on the Services.

• Promotional Communications. If you receive promotional emails from us and no longer wish to receive them, you may opt out by clicking the “unsubscribe” link in those emails or by contacting us at privacy@ainudez.com. Even if you opt out of promotional communications, we may still send you service-related communications, such as account or transaction-related messages.

Jurisdiction Specific Rights

Your EEA Privacy Rights and Disclosures

If you are located in the European Economic Area (EEA), the following terms apply to you.

Controller

AINUDEZ is the controller and is responsible for your personal data. You can contact us using the contact information at the end of this policy.

Lawful Basis for Processing Personal Data

We will only use your personal data where we have a lawful basis to do so under applicable data protection laws. Most commonly, we rely on the following lawful bases:

• Performance of a contract, where processing is necessary to provide the Services to you or to take steps at your request before entering into a contract.

• Legitimate interests, where processing is necessary for our legitimate interests, such as operating, improving, and securing the Services, on condition that those interests are not overridden by your rights and interests.

• Legal obligation, where processing is necessary to comply with applicable laws or regulatory requirements.

• Consent, where you have provided your consent to specific processing activities, such as receiving promotional communications where required by law. You may withdraw your consent at any time.

We rely on these lawful bases for the following purposes:

Automated Decision Making and Profiling

We do not make decisions based solely on automated processing or profiling that produce legal or similarly significant effects concerning you.

Criminal Offense Data and Special Category Data

We do not actively collect data relating to criminal convictions or offenses. However, we may process and disclose personal data where required to comply with legal obligations, including reporting suspected unlawful content to law enforcement or other appropriate authorities as required by applicable law.

Special Categories of Personal Data

We do not ask you to provide, nor do we require you to disclose, special categories of personal data as defined under applicable law, such as information revealing your racial or ethnic origin, political opinions, health, trade union membership, genetic or biometric data, or your real-world sex life or sexual orientation.

Because the Services allow you to generate content based on your inputs, you may choose to provide prompts, images, or other content that contain or relate to sensitive or adult themes. We process this information only as necessary to provide the Services, including generating outputs, applying safety measures, and enforcing our Terms of Service.

We do not use this information to infer or assign real-world sensitive characteristics about you, and we do not use your inputs or generated content for marketing, profiling, or training third-party or general-purpose AI models.

Your Legal Rights

Under certain circumstances, you have rights under data protection laws concerning your personal data. Your rights may include the following:

• Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

• Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully, or where we are required to erase your personal data to comply with local law. Note, however, that we might not always be able to comply with your erasure request for specific legal reasons that will be notified to you, if applicable, at the time of your request.

• Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information that override your rights and freedoms.

• Request restriction of processing your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (1) if you want us to establish the data’s accuracy; (2) where our use of the data is unlawful, but you do not want us to erase it; (3) where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims; or (4) you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.

• Request the transfer of your personal data to you or a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information that you initially provided consent for us to use or where we used the information to perform a contract with you.

• Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we might not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Exercising Your Legal Rights

If you wish to exercise any of the rights set out above, please contact us at privacy@ainudez.com.

Fees

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to honor your request in these circumstances.

Verification

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information regarding your request to speed up our response.

Responding to Your Request

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will let you know and keep you updated.

Right to Lodge Complaint

If you believe our processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a supervisory authority, including in the EEA member state of your habitual residence, place of work, or the place of the alleged infringement. Because we are established in Estonia, our lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

While you have the right to contact a supervisory authority at any time, we would appreciate the opportunity to address your concerns first.

Your U.S. State Privacy Rights

Depending on your state of residency, you may have certain rights related to your personal data, including:

• Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by state law, depending on your state, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information and it will be included in the response to your access request.

• Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information’s nature and processing purpose.

• Deletion. You may request that we delete personal data about you that we maintain, subject to certain exception under applicable law.

• Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. You may request that we do not use your personal data for these purposes.

Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request.

To exercise any of these rights, please email us at privacy@ainudez.com. To appeal a decision regarding a consumer rights request you may reply to our response email and state the basis for your appeal. We will review your appeal and respond in writing within 45 days, including an explanation of the decision. If your appeal is denied, you may contact your state’s attorney general to lodge a complaint.

Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data “sales” as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.

Nevada provides its residents with a limited right to opt out of certain personal data sales. Residents who wish to exercise their sale opt-out rights may submit a request to this designated address: privacy@ainudez.com. However, please know we do not currently sell data triggering that statute’s opt-out requirements.

If you are a California resident, additional information applies to you. To access our supplemental California privacy statement and learn more about California residents’ privacy rights, visit the CCPA privacy notice for California Residents.

How We Protect Your Personal Data

We use commercially reasonable administrative, technical, and organizational measures designed to protect your personal data from accidental loss and from unauthorized access, use, alteration, and disclosure.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of your personal data. Any transmission of personal data is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.

How We Retain Your Personal Data

We retain the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes for which they were collected, including to provide and maintain the Services, operate our business, comply with legal obligations, resolve disputes, and enforce our agreements, as well as for safety, security, and fraud prevention.

In determining appropriate retention periods, we consider the nature and sensitivity of the personal data, the purposes for which it is processed, and applicable legal and regulatory requirements.

When personal data is no longer required, we will delete, destroy, or de-identify it in accordance with applicable law.

If you are a California resident, visit the CCPA privacy notice for California Residents for more information about the retention periods that apply to the personal data categories we collect.

Changes to Our Privacy Policy

We may update this policy from time to time, and we will provide notice of any such changes to the policy as required by law. The date the privacy policy was last updated is identified at the top of the page. We will notify you of changes to this policy by updating the “last updated” date and posting the updated policy on the Services. We may email or otherwise communicate reminders about this policy, but you should check our Services periodically to see the current policy and any changes we have made to it.

Contact Information

To exercise your rights or ask questions or comment about this privacy policy or our privacy practices, contact us at privacy@ainudez.com.

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal data, our compliance with this policy, and with applicable privacy laws. To discuss our compliance with this policy please contact our privacy officer using the email address listed above.

---