Privacy Policy

This Privacy Policy (the “Privacy Policy” or “Policy”) explains how РЕГНЕКСТ ЕООД / REGNEXT EOOD / Ltd. (“Sauci AI”, “REGNEXT”, “we”, “us”, or “our”) collects, uses, discloses, and protects information relating to users of our services.

• Company Name: РЕГНЕКСТ ЕООД / REGNEXT EOOD / Ltd.
• Company Number (UIC): 208608387
• Registered Address: Str. George Washington 13, Sofia 1000, Bulgaria

For purposes of EU / UK data protection law (e.g. GDPR), REGNEXT EOOD acts as the data controller for personal data processed in connection with Sauci AI, unless stated otherwise.

1. Scope of this Policy

This Policy applies to:

• our websites, including the Sauci AI web platform (the “Website”);
• any web or mobile applications, dashboards, or browser-based interfaces we provide;
• APIs and integrations we offer;
• any other online or offline products and services that link to this Policy
  (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with it, you should not use the Services. This Policy should be read together with our Terms of Service.

2. Age Restriction – 18+ Only

Sauci AI is an adult-only platform that may display explicit or NSFW (Not Safe For Work) content.

• You must be at least 18 years old to use the Services.
• By using the Services, you confirm that you are 18 or older and that viewing adult content is legal in your country and region.
• We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a minor, please contact us and we will take steps to delete such information.

3. Information We Collect

The types of information we collect depend on how you use the Services. Some information is collected directly from you; other information is collected automatically.

3.1 Information You Provide to Us

We may collect the following categories of information that you provide directly:

1. Account Information
   • Email address or login identifier
   • Username, display name
   • Password (stored in hashed form)
   • Country or region (if provided)
      
2. Profile & Preference Information
   Because Sauci AI is an NSFW / adult platform, you may optionally share or generate information about your:
   • gender, pronouns, and preferred way of being addressed;
   • character and fantasy preferences (e.g., kinks, personality types, story genres);
   • other preferences related to your use of AI characters and content.
      
3. These details can, in some cases, reveal special categories of personal data under GDPR (e.g., sexual life or sexual orientation). We only process such information with your explicit consent, which you give by choosing to provide or generate this information and by using the Services for this purpose.
    
4. Content and Generations
   When you use Sauci AI, you may input or receive:
   • text prompts, chat messages, instructions;
   • AI-generated responses, chats, stories, images, or videos;
   • custom characters, including their names, descriptions, personalities, and backstories;
   • uploaded files or media (if this feature is available).
      
5. We may store this content as part of providing the Services, improving safety and quality, and for the other purposes described in this Policy.
    
6. Payment and Billing Information
   If you purchase tokens, subscriptions, or other paid features, we and/or our payment processors collect:
   • billing name
   • billing address (where applicable)
   • partial payment card details or other payment method details (handled by the payment processor)
   • transaction history (what you purchased, when, amount, currency).
      
7. Payment card information is processed by third-party payment providers and is generally not stored in our own systems, other than limited details for record-keeping (e.g., last 4 digits, card type) where needed.
    
8. Communications and Support
   If you contact us (e.g., via email or in-app support forms), we collect:
   • your name and contact details
   • the content of your message and any attachments
   • metadata such as date, time, and communication channel used.
      
9. Surveys, Feedback, and Promotions
   If you participate in surveys, beta programs, or promotions, we may collect:
   • responses to survey questions
   • feedback or reviews
   • any information you choose to provide.

3.2 Information We Collect Automatically

When you use the Services, we automatically collect certain information, including:

1. Device and Usage Information
   • IP address
   • browser type and version
   • operating system and device type
   • language settings
   • the pages or screens you view, links you click, and the date/time and duration of your visits
   • referrer URL (how you landed on our site).
      
2. Log Data
    
   • server logs (e.g., requests, error logs)
   • login and logout timestamps
   • account activity, such as token usage, feature use, and security events (e.g., password changes, failed login attempts).
      
3. Cookies and Similar Technologies
   We use cookies and similar technologies (such as local storage, pixels, and tags) to:
   • keep you logged in;
   • remember your preferences;
   • measure performance and usage;
   • support security and fraud prevention;
   • show or manage marketing messages where permitted.
      
4. More detail is provided in Section 6 (Cookies & Tracking) and/or in a separate Cookie Policy.

3.3 Information from Third Parties

We may receive information about you from third parties, such as:

• Payment providers, who confirm payment status or fraud checks;
• Analytics providers, who provide aggregated or pseudonymous statistics about usage;
• Login / Identity providers (if enabled), such as OAuth or single sign-on services, which may share basic profile and account data with us when you choose to use them.

We treat any such information in accordance with this Policy and applicable law.

3.4 Age Verification Data

To comply with international age-assurance regulations, Sauci AI may collect limited information necessary to verify a user’s eligibility to access age-restricted features.

Depending on your jurisdiction, this may include:

• declared date of birth
• non-identifying verification signals
• third-party age-assurance confirmation (where legally required)
• behavioral and system-level age-indicators
• confirmation tokens or verification results

Sauci AI does not require or store government-issued IDs unless explicitly mandated by law in a specific jurisdiction. When third-party verification services are used, age verification is performed without transmitting unnecessary personal data to Sauci AI.

Age verification data:

• is encrypted at rest and in transit
• is stored only for the minimum period necessary
• is not shared with advertisers or external parties
• is processed solely for compliance with age-restriction laws
• is handled under GDPR, UK GDPR, CCPA, and other relevant privacy frameworks

Users who do not meet the required age thresholds or who fail verification checks may be denied access or have their accounts restricted according to local laws.

4. How We Use Your Information (Purposes & Legal Bases)

We process personal data only when we have a lawful basis to do so under applicable data protection laws (such as the GDPR). The main purposes and legal bases are:

4.1 To Provide and Operate the Services

• Creating and managing your account
• Providing AI chat, image, and video generation
• Managing tokens, subscriptions, and transactions
• Processing your prompts, messages, characters, and generations
• Providing customer support and technical assistance

Legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR) where necessary to operate and improve the platform

4.2 To Personalize Your Experience

• Remembering your preferences and settings
• Recommending features, characters, or content that may match your interests
• Tailoring content to your preferred style and boundaries

Legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR)
• Your consent where required (Art. 6(1)(a) GDPR)

4.3 To Process NSFW and Sensitive Data

Some of the data you choose to provide (e.g., preferences related to sexual content, fantasies, or relationships) may qualify as special category data (sexual life or sexual orientation).

We only process this type of data for the purpose of providing you with the adult / NSFW features of Sauci AI if:

• you are at least 18 years old; and
• you explicitly choose to provide or generate this content and use the Services for that purpose.

Legal bases:

• Explicit consent (Art. 9(2)(a) GDPR) for special category data
• Performance of a contract (Art. 6(1)(b) GDPR) for standard personal data

You may withdraw your consent at any time by changing your settings where available or by contacting us. Note that withdrawal does not affect processing already carried out before withdrawal, and may limit the Services we can provide.

4.4 To Improve and Develop the Services

• Training, testing, and tuning models and algorithms
• Analyzing usage patterns to improve product design
• Debugging and enhancing performance and reliability
• Enhancing safety and moderation systems

Where possible, we use aggregated, pseudonymized, or anonymized data for these purposes.

Legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR) to improve and secure our Services
• Consent where required by law (e.g. for certain analytics cookies)

If you prefer that your data not be used to improve models where technically possible, you can contact us, and we will explain what options are available.

4.5 To Communicate with You

• Sending you service-related communications (e.g., account notices, security alerts, updates to our Terms or Policies)
• Responding to your requests, questions, and feedback
• Sending you marketing or promotional messages where permitted

Legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR)
• Legal obligations (Art. 6(1)(c) GDPR) for certain notices
• Consent or legitimate interests (Art. 6(1)(a) or (f) GDPR) for marketing, depending on local requirements

You can opt out of marketing emails at any time by using the unsubscribe link in the email or contacting us.

4.6 To Ensure Safety, Security, and Legal Compliance

• Detecting, preventing, and investigating abuse, fraud, and illegal activities
• Enforcing our Terms of Service and acceptable use rules
• Protecting our rights, property, and the safety of users and the public
• Responding to legal requests (e.g., court orders, law enforcement requests)
• Meeting accounting, tax, and other regulatory obligations

Legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR)
• Legal obligations (Art. 6(1)(c) GDPR)

5. AI Training, Moderation and NSFW Content

5.1 Use of Data for AI Training and Improvement

To maintain and improve the quality of Sauci AI, we may use:

• chat logs, prompts, and responses
• character definitions and interactions
• feedback (e.g., thumbs up/down, reports, or comments)

for:

• training and fine-tuning our models;
• developing new features;
• evaluating safety mechanisms and filters;
• analyzing trends and performance.

Where possible, we apply techniques such as aggregation, pseudonymization, or anonymization. However, AI training may still involve learning patterns from your prompts and generations.

If you do not want your data to be used for model improvement where technically feasible, you can contact us, and we will inform you of any opt-out possibilities.

5.2 Content Moderation and Safety

Because Sauci AI can generate NSFW and sensitive content, we use a combination of automated systems and human processes to:

• detect and block illegal or unacceptable content (e.g., content involving minors, non-consensual acts, extreme violence, etc.);
• enforce age restrictions and content rules;
• prevent misuse such as harassment, hate, or criminal activity.

This may involve:

• automated scanning of text, images, or videos;
• logging and reviewing flagged content;
• restricting certain prompts or outputs.

Where required by law (e.g., when detecting content involving minors or explicit threats), we may report content and related information to relevant authorities.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

1. Strictly Necessary Cookies
   • Required to operate the Website
   • Enable basic functions like page navigation, login, and account security
   • Without these cookies, the Services cannot function properly.
      
2. Preference Cookies
    
   • Remember your language, theme, and other settings
   • Improve your user experience.
      
3. Performance and Analytics Cookies
    
   • Help us understand how users interact with the Services
   • Allow us to improve performance and usability
   • Typically set by us or third-party analytics providers.
      
4. Marketing and Advertising Cookies (if used)
    
   • Help us measure and improve marketing campaigns
   • May be used to show you relevant content or offers on other sites or platforms.

Where required by law (e.g., in the EU/EEA), we will:

• show you a cookie banner when you first visit;
• request your consent for non-essential cookies;
• allow you to change or withdraw your consent at any time.

Further details can be provided in a separate Cookie Policy.
 

7. How We Share Your Information

We do not sell your personal data in the sense of traditional data brokers. However, we may share your data with the following categories of recipients, where consistent with this Policy and applicable law:

1. Service Providers / Processors
   We use carefully selected third parties to help us operate and improve the Services, such as:
   • hosting and cloud infrastructure providers
   • payment processors
   • security, monitoring, and logging services
   • email and communication providers
   • analytics and crash reporting tools
      
2. These providers only process your data on our instructions and are bound by contractual data protection and confidentiality obligations.
    
3. Affiliates and Group Companies
   Where relevant, we may share information with our affiliated entities for internal administration and to deliver the Services.
    
4. Legal and Regulatory Requirements
   We may disclose information:
   • if required by law, regulation, or legal process;
   • in response to valid requests from law enforcement, courts, or regulators;
   • to protect the rights, property, or safety of Sauci AI, our users, or the public.
      
5. Business Transfers
   If we are involved in a merger, acquisition, restructuring, bankruptcy, or sale of assets, your information may be transferred as part of that transaction, subject to appropriate safeguards and your rights under applicable law.
    
6. With Your Consent or At Your Direction
   We may share information with third parties when you explicitly request or consent to such sharing (for example, integrating with another service or making a Character public, if that feature exists).

8. International Data Transfers

Our Services may involve the transfer of your personal data to countries outside the European Economic Area (EEA) or your country of residence, including to countries that may not provide the same level of data protection.

Where we transfer personal data outside the EEA/UK:

• we will do so in compliance with applicable data protection law;
• we will use appropriate safeguards, such as:
  • European Commission–approved Standard Contractual Clauses (SCCs), or
  • other legally recognized transfer mechanisms.

You can contact us for more information on international transfers and the safeguards we use.

9. Data Security

We take the protection of your information seriously and implement reasonable technical and organizational measures to protect your personal data against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction.

These measures may include:

• encryption of data in transit (e.g., TLS/HTTPS) and at rest where appropriate;
• access controls, authentication, and role-based permissions;
• monitoring, logging, and regular security reviews;
• secure development practices and vulnerability management.
   

However, no system is completely secure. We cannot guarantee absolute security of your data. You are responsible for:

• keeping your password and account details confidential;
• notifying us promptly if you suspect unauthorized access to your account.

10. Data Retention

We retain personal data for as long as necessary to:

• provide the Services to you;
• comply with our legal obligations;
• resolve disputes;
• enforce our agreements;
• maintain business and accounting records.

In general:

• Account information is kept for the life of your account and for a limited period afterwards (e.g., backups, legal obligations).
• Content and generations may be retained while your account is active and for a period after account closure, unless you request deletion and it is technically feasible and legally permissible.
• Payment and transaction records are kept for the period required by tax and accounting laws.
• Log data is kept for a limited time for security, debugging, and analytics, unless needed longer for investigations or legal reasons.

When we no longer need personal data, we will delete or anonymize it where reasonably possible.
 

11. Your Rights (Especially Under GDPR)

Depending on your location and subject to applicable law, you may have some or all of the following rights regarding your personal data:

1. Right of Access
   The right to obtain confirmation whether we process your personal data and, if so, to receive a copy of it and certain information about how it is processed.
    
2. Right to Rectification
   The right to request correction of inaccurate or incomplete personal data.
    
3. Right to Erasure (“Right to be Forgotten”)
   The right to request deletion of your personal data in certain circumstances, for example where it is no longer needed, or you withdraw consent and there is no other legal basis.
    
4. Right to Restriction of Processing
   The right to request that we limit processing of your personal data in certain situations (e.g., while we verify accuracy or evaluate an objection).
    
5. Right to Data Portability
   The right to receive personal data you provided to us in a structured, commonly used, machine-readable format, and to transmit it to another controller where technically feasible.
    
6. Right to Object
   The right to object to our processing of your personal data when it is based on legitimate interests or for direct marketing. We will then stop such processing unless we have compelling legitimate grounds or legal reasons not to.
    
7. Right to Withdraw Consent
   Where we rely on consent to process your personal data (including special category NSFW data and certain analytics/marketing), you can withdraw your consent at any time. This does not affect prior processing based on consent.
    
8. Right to Lodge a Complaint
   You have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work, or the place of the alleged infringement. For REGNEXT EOOD, the relevant authority in Bulgaria is the Commission for Personal Data Protection.

To exercise any of your rights, please contact us using the details in Section 14. We may need to verify your identity before fulfilling your request.

If you live outside the EU/EEA, you may have similar or additional rights under your local laws (for example, California residents may have specific rights under state law). We will respond to requests in accordance with applicable law.

12. Automated Decision-Making and Profiling

We may use automated tools and AI models to:

• personalize content and character suggestions;
• filter or block certain NSFW or illegal content;
• detect potentially abusive or high-risk behavior.

These systems are primarily used to:

• protect users and the platform;
• provide a better and safer experience.

We do not use automated decision-making that produces legal effects or similarly significant effects on you without appropriate human involvement, as defined in GDPR, unless required by law and with appropriate safeguards.

If you have questions about our use of automated systems or wish to object, please contact us.

13. Third-Party Websites and Services

Our Services may contain links to third-party websites, services, or applications that are not owned or controlled by us.

• We are not responsible for the privacy practices or content of any third-party websites or services.
• Your use of such third-party services is subject to their own terms and privacy policies, not this Policy.

We encourage you to review the privacy policies of any third parties you interact with.

14. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time.

When we do:

• we will post the updated Policy on the Website;
• we will update the “Last updated” date at the top;
• if changes are significant or required by law, we may provide additional notice (e.g., by email or an in-app message) and, where required, seek your consent.

Your continued use of the Services after the updated Policy becomes effective means you accept the changes. If you do not agree, you should stop using the Services and may request to close your account.

15. Contact Us

If you have any questions about this Privacy Policy, our data practices, or your rights, you can contact us at:

РЕГНЕКСТ ЕООД / REGNEXT EOOD / Ltd.
Str. George Washington 13
Sofia 1000

Bulgaria

Email (general & support): support@sauci.ai
Email (privacy / data protection): info@sauci.ai