Privacy policy.

Itzi provides an AI workspace, compatible APIs and related tools. Itzi acts as the data controller for account, product and support data. Privacy questions can be sent to contact@itzi.app.

It applies when you browse the website, create an account, use chat or other workspace features, call an Itzi API, purchase usage, or contact support. Third-party websites that you open from Itzi apply their own privacy policies.

• Account data, including your name, email address and authentication records.
• Workspace content, including conversations, prompts, files, generated images, saved settings and support messages.
• Usage and billing records, including model usage, balance movements, Itzi Select plan status, fair-use acceptance, subscription accounting and transaction references. Itzi does not store payment card details.
• Technical and security data, including request metadata, browser information, a random first-party device identifier, IP and network reputation signals, pseudonymized account links, error records and abuse-prevention events.
• Advertising preferences and attribution data while optional measurement is enabled.

We process data to create and secure accounts, deliver requested AI and tool features, maintain conversation history, calculate usage, provide billing and support, prevent abuse, identify probable links between accounts, assess eligibility for promotional welcome credit, and comply with legal obligations. Security signals may automatically place a welcome credit on hold until a real payment is completed. They do not automatically suspend an account. An administrator can review the decision when you contact support. These activities rely on performance of our contract, legitimate interests in operating and protecting Itzi, legal obligations, or your consent where required.

The prompt, relevant conversation context and any files required for a request may be sent to specialized infrastructure and model operators. Routing can vary by model, feature, availability and safety requirements. We share only the data needed to complete the request and do not sell chat content.

Hetzner provides production hosting infrastructure. MaxMind receives the account registration or sign-in IP address used for a risk check to provide network and anonymizer information. Other providers support email delivery, authentication, security checks, payments, customer support, optional advertising measurement and requested product tools. Buy Me a Coffee handles one-time checkout, Monthly Support and legacy subscription management. Reddit advertising measurement is enabled by default and can be disabled in Privacy settings.

Itzi uses essential cookies and browser storage for sessions, security, interface preferences and service continuity. Optional Reddit measurement is enabled by default. You can disable it or change your choice at any time through the Privacy settings link in the website footer or the account menu in the application.

Account and workspace data is kept while your account remains active or until you delete the relevant content. Billing and transaction records may be retained for statutory accounting periods. Pseudonymized IP, network, device and browser security signals are kept for up to 90 days. Welcome-credit check and outcome events, including scores, reason categories, provider status and response time, are also kept for up to 90 days. Compact welcome-credit risk assessments are retained with the account so that grants, payment releases and reviews remain auditable. Raw IP addresses are not retained in these assessments or technical events. Account-link review cases are removed after 365 days without new evidence. The first-party security device cookie lasts up to 180 days. Support records may be kept for up to three years after the request is closed. Some data may remain longer when required to resolve a dispute, prevent fraud or meet a legal obligation.

Depending on the processing, you may also request restriction, object to processing, or withdraw consent. You can export conversation data from Itzi and delete individual content in the application. For any other request, contact contact@itzi.app. You may also lodge a complaint with the CNIL or your local data-protection authority.

Itzi uses encrypted connections, access controls, scoped account authorization, hashed credentials and optional two-factor authentication. Some service providers may process data outside the European Economic Area. Where required, those transfers rely on recognized safeguards such as adequacy decisions or standard contractual clauses.

We do not knowingly provide accounts to children under 16. If you believe a child has provided personal data, contact us so we can review and remove it. Material policy changes will be reflected by a new date and version on this page.

Write to contact@itzi.app with a clear subject such as Privacy request. Signed-in users can also contact us from the Support area in Itzi.