Privacy Policy

Note: This legal document is provided in English for legal validity.

Last updated: 7 August 2026

Welcome to YayPoly! (the "Service"), operated by Alexiuz AS ("we," "us," or "our"). We are committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly. This Privacy Policy outlines how we collect, use, store, and disclose your information when you use our website, yaypoly.com, and our AI bot services.

1. Information We Collect

a. Personal Information

When you create an account or use our Service, we may collect the following personal information:

  • Contact Information: Email address, name, and physical addresses.
  • Profile Information: Usernames, profile pictures, and any information you include in your "About" section.
  • Communication Data: Conversation history with the AI bot, YayPoly!
  • Other Personal Details: Any additional information you choose to provide.

b. Non-Personal Information

  • IP Addresses: We collect your IP address when you interact with our Service.
  • Usage Data: Browser type, operating system, referral URLs, and pages visited.

2. How We Use Your Information

  • Provide and Maintain the Service: To operate and improve our Service, including the AI bot interactions.
  • Communication: To send updates, notifications, and respond to inquiries.
  • Personalization: To customize your experience and provide content relevant to you.
  • Security: To monitor and protect the integrity and security of our Service.

    • 3. Sharing Your Information

    • With AI API Providers
    • Your gameplay text is sent to third-party AI providers to generate responses, images, and voice audio. The providers we currently use are Google (Gemini), Anthropic (Claude), xAI (Grok), OpenAI (audio processing), and ElevenLabs (voice synthesis). You may choose which text model to use within your account or game settings. This list changes as models are added or retired, and we update it here when it does.
    • Third-Party Service Providers
    • We may share your information with third-party vendors who assist us in operating the Service, subject to confidentiality obligations.
    • Legal Requirements
    • We may disclose your information if required by law or in response to legal processes.

    4. Your Choices and Rights

    • Access and Update Your Information
    • You can view and update your personal information through your user profile at any time.
    • Delete Conversation History
    • You have the option to delete your conversation history with the AI bot from your account and our database.

    Delete Your Account

    • You may delete your account, which will remove all personal data associated with you from our systems.

    5. Data Security

    We implement industry-standard security measures to protect your information. However, no method of transmission over the internet or electronic storage is 100% secure.

    5A. Your Rights Under the GDPR

    Alexiuz AS is the data controller for the personal data described in this policy. We are established in Norway, and we process personal data in accordance with Regulation (EU) 2016/679 (the GDPR) as incorporated into Norwegian law through the Personal Data Act (personopplysningsloven).

    5A.1 Legal bases for processing

    • Performance of a contract (Art. 6(1)(b)): operating your account, running the game, processing your turns, and handling credit purchases and refunds.
    • Legitimate interests (Art. 6(1)(f)): keeping the Service secure, preventing abuse and fraud, operating our content guard systems, and maintaining the wellbeing protocol described in Section 2B of our Terms. We balance these interests against your rights and you may object as set out below.
    • Legal obligation (Art. 6(1)(c)): retaining transaction records, and any reporting obligations that apply to us as an operator of an AI service.
    • Consent (Art. 6(1)(a)): non-essential cookies and any optional communications. You may withdraw consent at any time without affecting processing carried out before withdrawal.

    5A.2 Your rights

    Subject to the conditions in the GDPR, you have the right to:

    • Access the personal data we hold about you, and receive a copy of it.
    • Have inaccurate data corrected, and incomplete data completed.
    • Have your data erased ("right to be forgotten"), including by deleting your account.
    • Restrict processing of your data in certain circumstances.
    • Receive your data in a portable, machine-readable format, and have it transmitted to another controller where technically feasible.
    • Object to processing carried out on the basis of our legitimate interests.
    • Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects concerning you.

    To exercise any of these rights, contact us at [email protected]. We will respond within one month, extendable by two further months for complex requests, and we will tell you if an extension applies.

    5A.3 Automated processing in the Service

    Two automated systems assess the text you submit: a content guard, which may block a turn that breaches our rules, and the wellbeing protocol described in Section 2B of our Terms, which may replace a turn with crisis support information. Neither produces a legal or similarly significant effect within the meaning of Article 22, and neither results in an automatic account ban on its own. Repeated guard violations may be reviewed by a person before any account action is taken, and you may contact us to contest any such decision.

    5A.4 International transfers

    Our AI providers are established outside the EEA, principally in the United States. Where we transfer personal data to them, we rely on the European Commission's Standard Contractual Clauses or an applicable adequacy decision. You may request further information about these safeguards at [email protected].

    5A.5 Retention

    • Account data: kept while your account is active, and deleted when you delete your account.
    • Game and conversation history: kept while your account is active, or until you delete it yourself.
    • Content guard logs: kept for up to 24 months to detect repeated abuse.
    • Wellbeing referral records: kept for up to 24 months to operate and audit the protocol and to meet reporting obligations that apply to us. These records are held separately from moderation data and are never used for moderation, timeouts, or bans.
    • Transaction records: kept for as long as Norwegian bookkeeping law requires.

    5A.6 Complaints

    If you believe we have handled your personal data unlawfully, you may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no), or with the supervisory authority in your country of residence.

    6. Children's Privacy

    • The Service is not intended for children. You must be at least 16 years old to create an account, or older where your country sets a higher minimum age for consenting to data processing. See Section 2C of our Terms of Service.
    • We do not knowingly collect personal data from anyone below the applicable minimum age. If we become aware that we have, we will close the account and delete the data.
    • If you believe a child has provided us with personal data, contact us at [email protected] and we will act on it.

    7. Changes to This Privacy Policy

    • We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page.

    8. Contact Us

    • If you have any questions or concerns about this Privacy Policy, please contact us at:
    • Email: [email protected]
    • Address: Gamlegrensa 8A, 3747 Skien, Norway

    By using YayPoly!, you agree to the collection and use of information in accordance with this Privacy Policy.

2026 © YayPoly!