Chat18GPT

GDPR Compliant

Privacy Policy

Last updated: May 2026

This Privacy Policy explains how Chat18GPT ("we", "our", "us") collects, uses, stores, and protects your personal data when you use our Service. We are committed to compliance with the General Data Protection Regulation (GDPR) and French data-protection law (loi Informatique et Libertes).

1. Data Controller

The data controller is Chat18GPT, an individual operator. Contact for all data-protection matters: support@chat18gpt.com.

EU GDPR Representative contact: support@chat18gpt.com.

2. Age Verification - Data We Do NOT Collect

Chat18GPT currently uses a session-scoped 18+ self-certification age gate. We do not receive, store, or process personal identification data (document scans, biometric data, national ID numbers) for age checks. The age gate stores only a session-scoped confirmation that adult access was acknowledged. Stronger age verification may be added where required by law, processors, or platform policy.

3. Data We Collect

  • Account data: Email address, display name (if provided), account creation date.
  • Content data: Chat messages, story prompts and outputs, media generation prompts and metadata, image files, and video files stored to your account history.
  • Technical logs: IP address, browser type, request timestamps, and error logs for security, fraud prevention, and service reliability.
  • Payment data: We do not store card data or payment-verification identity documents. Payment processing is handled by PayRam and its on-ramp providers. We receive the invoice status and transaction details needed to deliver the purchase.
  • Cookie data: See Section 11 (Cookies).

4. Legal Basis for Processing (GDPR Article 6)

  • Contract performance (Art. 6(1)(b)): Account management, content storage, payment processing, and delivering the features you subscribe to.
  • Legitimate interests (Art. 6(1)(f)): Security monitoring, fraud prevention, abuse detection, and service-reliability logging.
  • Legal obligation (Art. 6(1)(c)): Retaining records required by applicable law, responding to law-enforcement requests, and reporting illegal content where required.
  • Consent (Art. 6(1)(a)): Analytics cookies and any optional marketing communications (you can withdraw consent at any time).

5. How We Use Your Data

We use your data to operate the Service (account management, authentication, content storage, feature delivery), process payments, enforce our Terms and content policies, detect and prevent abuse, and where required, comply with French and EU legal obligations.

6. Data Sharing

We do not sell personal data. We share data only with:

  • - Authentication and database infrastructure provider: Hosting of user accounts and data (EU-region hosting available).
  • - AI generation infrastructure provider: Prompts are transmitted to generate content; no personal data is sold.
  • - Payment providers: PayRam and available on-ramp providers process transactions and may perform customer identity verification; card data and verification documents are not stored by us.
  • - Authorities: Where legally required by applicable law or court order.

7. Data Retention

  • Account and content data: Retained while your account is active.
  • After account deletion: Personal data is anonymised or deleted within 30 days, except where retention is legally required.
  • Security logs: Retained for up to 12 months for fraud and abuse investigation.
  • Payment records: Retained for 10 years as required by French accounting law.

8. Your Rights (GDPR Articles 15-22)

You have the following rights regarding your personal data:

  • Right of access (Art. 15): Request a copy of all data we hold about you.
  • Right to rectification (Art. 16): Request correction of inaccurate data.
  • Right to erasure (Art. 17): Request deletion of your account and personal data. Use the account deletion tool or contact support.
  • Right to data portability (Art. 20): Download a machine-readable export of your data from your account settings.
  • Right to restriction (Art. 18): Request that we limit processing of your data in certain circumstances.
  • Right to object (Art. 21): Object to processing based on legitimate interests.
  • Right to withdraw consent: Withdraw consent for analytics cookies at any time via the cookie settings.

To exercise any of these rights, contact support@chat18gpt.com. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertes) at www.cnil.fr.

9. Data Security

We apply appropriate technical and organisational measures: HTTPS encryption in transit, access controls, and secure infrastructure providers. No online service can guarantee absolute security. In the event of a data breach affecting your rights, we will notify you and the CNIL as required by GDPR Article 33/34.

10. International Transfers

Some third-party providers (AI generation, infrastructure) may process data outside the EU/EEA. We ensure such transfers are covered by appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

11. Cookies

We use the following cookies:

  • Necessary (no consent required): Session authentication cookie, age-verification session cookie (httpOnly, session-scoped, cleared on browser close), and security tokens.
  • Analytics (consent required): Google Analytics (GA4) to understand aggregate usage patterns. Only loaded after you accept analytics cookies via the cookie banner. You can withdraw consent at any time.

No advertising or tracking cookies are used.

12. Policy Updates

We may update this Privacy Policy. Material changes will be communicated on the platform. Continued use after changes constitutes acceptance of the revised Policy.

13. Contact

For privacy or data-protection questions: support@chat18gpt.com.

We use analytics cookies to understand how you use the platform and to improve it. Necessary cookies (session, security) are always active. Learn more.