Date of Revision: 29 October 2025

Privacy Policy of ExtaticAi LTD

ExtaticAi LTD ("Extatic Ai", "we", "us" or "our") is the Controller for the processing implemented through this website accessible at https://extatic.ai/ and/or any affiliated website to which visitors or users may be redirected (the "Services"). ExtaticAi LTD is duly incorporated in the Republic of Cyprus.

The Services are an online chat application that uses artificial intelligence algorithms to generate virtual and fictional characters (the "AI Companions"), with whom you as a user of the Services ("you") can chat and exchange messages. The Services also include, but are not necessarily limited to, other media such as images, videos and voice notes. Parts of the Services may require you to create a user account and/or become a paid subscriber.

This Privacy Policy details how Extatic Ai collects, uses, discloses and handles your Personal Data for the Services and, as applicable, your rights under the European Union’s General Data Protection Regulation 2016/679 ("GDPR") and other applicable data protection laws ("Applicable Data Protection Law").

By using the Services, you agree that you have read and understood our Privacy Policy.

1. Definitions

All capitalized terms not otherwise defined in this Privacy Policy or in the GDPR shall have the following meaning:

"Content": the information that you provide in order to register as a User and/or in the course of using our Services. Such information includes your Personal Data, inputs in the course of conversations with AI Companions, and outputs in response to same. "Consent": any freely given, specific, informed and unambiguous indication of your wishes by which you signify agreement to the processing of Personal Data relating to you. "Controller": ExtaticAi LTD, which determines the purposes and means of the Processing of Personal Data. "Personal Data": any information relating to an identified or identifiable natural person, directly or indirectly. "Processing": any operation performed on Personal Data, such as collection, storage, use, or deletion. "Subscription": an arrangement between ExtaticAi LTD and you to enable you to use the Services. "User", "you", and "your": collectively, a person that has visited or is using the Services. "Visitor": anyone browsing the Services without a valid Subscription.

2. Purposes of Personal Data Processing

As we are committed to respecting your privacy, the Services will always be provided in accordance with a lawful basis for processing. If you do not or cannot provide us with the required data, we may not be able to provide the Services to you.

Below are the main categories of processing purposes:

Account creation: We process your email address, encrypted password, nickname, gender, name (if provided), signup details, and optional phone number. Legal basis: Consent; necessity for the performance of a contract; compliance with legal obligations.

Account management: We process technical and account-related data such as IP, sign-in history, token balance, and geolocation. Legal basis: legitimate interest in maintaining user accounts and security.

Provision of the Services: We process user prompts, content preferences, AI Companion interactions, images, voice notes, and related content. Legal basis: Consent; necessity for the performance of a contract.

Support of the Services: We process data you provide via contact forms or email, including device information, browser type, and related content for debugging or support purposes. Legal basis: legitimate interest in providing technical support.

De-identification and anonymization of data: We may de-identify or anonymize exchanges with AI Companions to improve and develop our Services, ensure quality, and perform research. Legal basis: legitimate interest in improving our Services.

Improvement and development of our Services and AI models: We may use anonymized interactions to train AI models, develop new features, or improve moderation systems. Legal basis: legitimate interest in improving our technology.

Quality assurance (QA) and statistical analysis: We may analyze de-identified data to verify that our content generation tools are functioning properly. Legal basis: legitimate interest in maintaining quality standards.

Debugging and technical analysis: We monitor system use to detect errors, anomalies, or security vulnerabilities. Log files are automatically deleted after 30 days. Legal basis: legitimate interest in ensuring security and reliability.

Payment processing: Payment data (name, email, card details, transaction metadata) are processed by third-party providers (such as payment gateways, banks, and crypto payment platforms) to facilitate purchases and refunds. Legal basis: necessity for the performance of a contract; legitimate interest in optimizing payment operations.

Direct marketing: We may send newsletters or promotional emails if you have opted in. Legal basis: consent or legitimate interest in promoting our Services.

Analytics and research: We may collect user feedback or conduct surveys to improve our platform. Legal basis: consent.

Safety and moderation: We review content flagged by our moderation systems or reported by users to detect and prevent abuse or illegal activity. Legal basis: compliance with legal obligations; legitimate interest in ensuring a safe platform.

Legal and accounting compliance: We process necessary data for record keeping, tax purposes, responding to legal orders, and defending our rights. Legal basis: compliance with legal obligations; legitimate interest in defending our legal rights.

3. Marketing

We may send you updates, offers, and newsletters about our Services. You can unsubscribe at any time by clicking “Unsubscribe” in our emails or by contacting us at support@extatic.ai. Opting out of marketing will not affect communications about your account or the Services.

4. Third-Party Marketing

We will obtain your express consent before sharing your Personal Data with third parties for marketing purposes. You can withdraw such consent at any time by adjusting your preferences or using the unsubscribe link in any marketing email.

5. Sharing Your Personal Data

We may share your data with:

• Payment processors and hosting providers (EU/US-based)
• Email and affiliate marketing tools
• Professional advisors such as lawyers and accountants
• Legal or regulatory authorities where required by law
• Our employees when necessary to provide Services

If ExtaticAi LTD merges with or is acquired by another company, your Personal Data may be transferred as part of the transaction. In all cases, it will remain subject to this Privacy Policy.

6. Retention Period

We retain your Personal Data for as long as necessary to provide the Services or comply with legal requirements.

After your account is closed:

• Account-related data are typically retained for 3–5 years
• Financial and transactional data are retained for 7 years for tax compliance
• Marketing data are kept until you withdraw consent or for two years after your last interaction

We may extend retention where required by law or to resolve legal disputes.

7. Personal Data of Minors

Extatic Ai does not knowingly collect or process Personal Data from individuals under 18 years of age (or the applicable age of majority). If we learn that a user is underage, we will promptly delete their data and restrict access.

8. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of such third parties. We encourage you to read their respective privacy policies.

9. Your Rights Under the GDPR

You have the following rights regarding your Personal Data:

• Access: Request a copy of your data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data in specific circumstances
• Restriction: Ask us to limit processing in certain cases
• Portability: Request a copy of your data in a machine-readable format
• Withdrawal of consent: Withdraw consent at any time without affecting prior processing
• Objection: Object to processing based on legitimate interest, including for direct marketing

To exercise these rights, please contact us at support@extatic.ai. We will respond within one month unless the request is complex or numerous, in which case we will inform you of any delay.

10. International Data Transfers

If we transfer Personal Data outside the European Union or Cyprus, we will ensure appropriate safeguards in line with the GDPR, such as standard contractual clauses.

11. Contacting Us and Complaints

If you have concerns about how we process your Personal Data, please contact us first so we can resolve the issue.

Privacy Team Email: support@extatic.ai Mailing Address: ExtaticAi LTD, Republic of Cyprus

You also have the right to lodge a complaint with your national data protection authority.

12. Data Security

We apply appropriate technical and organizational measures to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or in applicable law. The latest version will always be available at https://extatic.ai/legal-information. If changes are significant, we will notify you by email or through the Services. By continuing to use our Services after updates become effective, you accept the revised Privacy Policy.

Contact: ExtaticAi LTD Email: support@extatic.ai Website: https://extatic.ai