Privacy Policy

Last Updated: March 12, 2026

1. Who We Are

Natal AI ("we," "us") operates the service available at https://www.natal-ai.com.

2. Data We Collect and Why

Data	Purpose	Legal Basis	Retention
Account data (email, display name)	Account creation, authentication, service delivery	Performance of contract	Duration of account + 30 days
Payment data (billing details, transaction records — processed by Stripe)	Payment processing, tax compliance	Performance of contract, legal obligation	As required by tax law
Chat content (your messages, AI responses)	AI service delivery	Performance of contract	Duration of use
Usage data (pages visited, features used, session duration)	Service improvement, troubleshooting	Legitimate interest	26 months, then anonymized
Technical data (IP address, browser type, OS)	Security, fraud prevention	Legitimate interest	12 months

We do not intentionally collect sensitive personal data. Do not submit sensitive information in chat messages.

3. Who We Share Data With

Provider	Purpose	Location
Stripe	Payment processing	US (EU-US Data Privacy Framework)
Google (Gemini AI)	AI response generation	US (Standard Contractual Clauses)
Vercel	Infrastructure	US (Standard Contractual Clauses)

We do not sell your personal data. We share data with service providers only as necessary to operate the Service. We may disclose data when required by law.

4. International Transfers

Some providers are located outside the EEA. We ensure adequate protection through Standard Contractual Clauses (Art. 46(2)(c) GDPR) or adequacy decisions.

5. Your Rights

You may request to: access your data, correct inaccuracies, delete your data, restrict processing, receive your data in a portable format, or object to processing. To exercise any right, contact us through the contact form on our website.

If you believe your rights have been violated, you may lodge a complaint with your local data protection authority.

6. Cookies

We use strictly necessary cookies for authentication and security (no consent required). Non-essential cookies (analytics, preferences) are used only with your consent where required by law. You can manage cookie preferences through the cookie consent banner or the Cookie Preferences link in our footer.

7. Children

The Service is not intended for users under 16. We do not knowingly collect data from children.

8. Changes

We may update this policy at any time. Material changes will be communicated via email or a notice on the Service. The "Last Updated" date reflects the most recent revision.