Privacy Policy

Last updated: October 21, 2026

1. Scope and Who We Are

This Privacy Policy explains how HANSORA AI ("Hansora," "we," "us," or "our"), operating from Armenia, collects, uses, shares, and retains information when you use hansora.co, Hansora's AI generation services, and Hansora integrations or MCP tools used through services such as ChatGPT or Claude (together, the "Platform"). HANSORA AI is responsible for the processing described in this Policy.

2. Information We Collect

• Account and profile information. Your email address, name, profile image, authentication provider, account identifier, language preference, credit balance, subscription status, and similar account details.
• Connection and authorization information. When you connect Hansora to ChatGPT, Claude, or another compatible client, we process the authorization request, approved scopes, client identity, and authentication tokens needed to verify and operate the connection. Hansora does not receive your ChatGPT or Claude password.
• Prompts and media. Prompts, instructions, images, videos, audio, documents, media URLs, and other files or references that you intentionally submit to a Hansora tool.
• Generation information. Selected model, settings, generation status, cost, timestamps, generated images, videos or audio, and the technical identifiers required to submit and retrieve a generation.
• Payments and credits. Purchased package or plan, amount, currency, transaction status, subscription status, credit changes, and payment-provider transaction identifiers. Payment providers process full card or wallet credentials; Hansora does not store full payment card numbers.
• Usage, device, and security information. Pages and tools used, feature events, approximate IP address, browser or device information, session and visitor identifiers, error records, and security or anti-abuse signals.
• Communications. Information you send through support forms, email, surveys, or other communications with us.

Hansora tools receive only the prompts, files, references, and other information that you or the connected AI client send to those tools. Hansora does not request or reconstruct your full ChatGPT or Claude conversation history.

3. How We Use Information

• Create and manage your account, authenticate connections, and provide the features you request.
• Quote, submit, process, deliver, and store AI generations and generation history.
• Apply credits, manage subscriptions, process payments, and issue eligible generation-failure credit refunds.
• Provide support and send service, security, billing, or account communications.
• Measure performance, diagnose errors, improve reliability, and understand product usage.
• Prevent fraud, abuse, unauthorized access, and violations of our Terms of Use.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We do not use your private uploaded media to advertise or promote Hansora without separate permission.

4. Legal Bases

Where applicable law requires a legal basis, we process information to perform our contract with you, comply with legal obligations, pursue legitimate interests such as security and service improvement, and, where required, based on your consent. You may withdraw consent for optional processing at any time without affecting processing that occurred before withdrawal.

5. How We Share Information

We share information only as needed to provide and protect the Platform, complete transactions, or comply with law. Categories of recipients include:

• Infrastructure, storage, and authentication providers, including Netlify and Supabase.
• Connected AI clients, such as OpenAI or Anthropic, when you choose to use Hansora through their services. Those services also process your chat and connection information under their own policies.
• AI generation and media-processing providers, including Kie.ai and reAPI and, depending on the model or tool selected, providers such as Google, BytePlus ModelArk, ElevenLabs, or other model operators needed to perform the requested generation.
• Content-safety providers, including OpenAI's moderation service, which checks the text of a generation request for prohibited content before anything is generated.
• Payment providers, including Dodo Payments and YooMoney, which process payment information under their own privacy policies.
• Professional advisers and authorities when reasonably necessary to protect rights, investigate fraud or security incidents, comply with law, or respond to lawful requests.
• A successor organization in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to appropriate confidentiality protections.

Prompts and media sent to a generation provider may be processed in the country where that provider operates and may be retained by that provider according to its applicable terms and policies.

6. Media Storage and Public Links

To let selected models and connected AI clients retrieve media, some uploaded or generated files may be made available through an unlisted public HTTPS object URL. Anyone who obtains such a URL may be able to access the file. Do not submit confidential, highly sensitive, or regulated information to Hansora. Generated results may remain available in your generation history until they are deleted under the retention rules below.

7. Cookies, Local Storage, and Analytics

We use cookies and similar browser storage for authentication, security, language and interface preferences, connection state, and credit or session continuity. With consent where required, we also use analytics and advertising services, including Google and Meta technologies, to measure visits and campaign performance. You can accept or reject optional analytics through the preference notice presented on the Platform and can also use browser controls to remove stored data.

8. Data Retention

• Account, profile, subscription, and generation history: retained while your account is active. Following a verified account-deletion request, we delete or de-identify this information within 30 days unless a longer period is required for security, fraud prevention, disputes, or law.
• Uploaded media and generated results stored by Hansora: retained while needed to provide your generation history and downloads, and removed within 30 days after a verified deletion request. Copies already sent to an AI provider are subject to that provider's retention process.
• OAuth and connected-client authorization records: retained while the connection is active and removed or de-identified within 30 days after revocation, except limited security records.
• Operational, analytics, and security logs: normally retained for up to 12 months. Records associated with an active fraud, abuse, or security investigation may be retained until the investigation and related claims are resolved.
• Support communications: normally retained for up to 24 months after the last communication.
• Payment, credit-ledger, tax, and accounting records: retained for up to seven years, or longer when applicable law requires it.
• Backups: deleted through ordinary backup rotation, normally within 90 additional days after deletion from active systems.

9. Your Choices and Rights

Depending on your location, you may have rights to access, correct, export, object to or restrict processing of, or delete personal information, and to withdraw consent or complain to a data-protection authority. You can also:

• Disconnect or revoke Hansora in the settings of ChatGPT, Claude, or another connected client. Revocation stops future tool access but does not automatically delete information already processed by Hansora.
• Unsubscribe from non-essential communications.
• Request account, media, or generation-history deletion by contacting us from the email associated with your account.

We may ask you to verify your identity before completing a request. We will respond within the period required by applicable law.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No storage or transmission system is completely secure, so we cannot guarantee absolute security. You are responsible for protecting your account credentials and for promptly notifying us of suspected unauthorized access.

11. International Data Transfers

Hansora operates from Armenia and uses service providers in multiple countries. Your information may therefore be processed outside your country of residence. Where required, we use legally recognized transfer mechanisms and contractual or organizational safeguards.

12. Children

The Platform is not directed to children under 13. A person under the age of legal majority where they live may use the Platform only with permission from a parent or legal guardian. If we learn that we collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it.

13. Changes to This Policy

We may update this Policy to reflect changes to our services, providers, or legal obligations. We will post the updated version here, change the "Last updated" date, and provide additional notice when required by law.

14. Contact

For privacy questions or requests, contact HANSORA AI at hansora.ai.bot@gmail.com or use our contact page. For the terms governing the Platform, see our Terms of Use.