Privacy Policy

Last updated: March 8, 2026

1. Information We Collect and How

Soulit (the "Service") collects the following personal information to provide its services.

Required Information

  • Email address
  • Nickname
  • Social login information (Google account identifier)

Automatically Collected Information

  • Usage records (access logs, feature usage history)
  • Device information (browser type, OS)

Collection Methods

  • Directly entered by users during registration
  • Automatically collected through social login (Google) integration
  • Automatically generated and collected during service usage
2. Purpose of Information Use

Collected personal information is used for the following purposes:

  • User identification and authentication
  • Service provision and operation (AI character chat, image generation, etc.)
  • Credit payment and transaction management
  • Service improvement and statistical analysis
  • Customer inquiry and complaint handling
  • Delivering necessary notices such as terms of service updates
3. AI Conversation Data Processing
  1. Conversations between users and AI characters are stored on our servers for service provision and conversation history management.
  2. Conversation data may be used in anonymized form for service quality improvement analysis.
  3. Users may delete their conversation history at any time.
  4. Character settings entered during AI character creation (name, personality, description, etc.) are stored for service provision.
4. Disclosure to Third Parties

We do not disclose personal information to third parties without user consent, except in the following cases:

RecipientPurposeInformation Shared
Lemon Squeezy (payment processor)Credit payment processingEmail, payment information
NOWPayments (cryptocurrency payment processing)Minimal information for payment processingPayment information
Google (social login)User authenticationAccount identifier, email

Personal information may also be disclosed when required by law or requested by investigative authorities.

5. Data Retention and Deletion
  1. Personal information is destroyed without delay once the purpose of collection has been fulfilled. However, when retention is required by applicable law, the information is securely stored for the required period before destruction.
  2. Retention periods:
    • Records of contracts or withdrawal of offers: 5 years (E-Commerce Act)
    • Records of payment and supply of goods: 5 years (E-Commerce Act)
    • Records of consumer complaints or dispute resolution: 3 years (E-Commerce Act)
    • Access logs: 3 months (Protection of Communications Secrets Act)
  3. Deletion methods: Electronic personal information is deleted using irreversible methods; paper documents are shredded.
6. Your Rights

Users may exercise the following rights:

  • Request to view personal information
  • Request to correct or delete personal information
  • Request to suspend processing of personal information
  • Delete account (available directly from the profile page)

These requests can be made through your profile settings or by contacting customer@soulit.app.

7. Security Measures

We implement the following measures to ensure the security of personal information:

  • Encrypted storage of passwords and authentication tokens
  • Data transmission encryption via SSL/TLS
  • Minimized access rights to personal information
  • Regular security audits
8. Use of Cookies
  1. The Service uses cookies for user authentication and service provision.
  2. Users may refuse cookies through browser settings; however, some Service features may be limited.
9. Analytics & Operational Monitoring

To understand how the Service is used and to improve content quality, we collect anonymous usage data. We do not use cookies or persistent identifiers for this purpose.

  • Vercel Analytics — anonymous page-view, visitor, and country/device statistics. Cookie-free, IP-hashed daily.
  • Vercel Speed Insights — anonymous Core Web Vitals measurements (LCP, INP, CLS) for performance monitoring.
  • PostHog — anonymous behavioral analytics (clicks, scroll depth, conversion funnels). Configured with memory-only persistence — no cookies or local storage. When you sign in, PostHog links your prior anonymous events to your account ID for product analysis.
  • Telegram operational alerts — internal admin notifications for sign-ups, payments, and key activities. Not shared with third parties.

All third-party processors above operate under their own privacy policies. You can opt out of all analytics by enabling Do Not Track in your browser; we honor that signal.

10. Changes to This Privacy Policy

This Privacy Policy may be updated in response to changes in laws, policies, or services. Any changes will be announced through in-Service notices.

For privacy-related inquiries, please contact us at customer@soulit.app.

Terms of Service | Refund Policy