Privacy Policy

Account Information. When you register or sign in via Manus OAuth, we receive your name, email address, and a unique user identifier from the authentication provider. We store this information to create and manage your account.

Usage Data. We collect information about how you interact with the Platform, including which modules you use (WP OS, App Studio, Copilot Layer), the natural language prompts you submit, provisioning requests, activity logs, and feature usage patterns. This data is used to operate and improve the service.

Billing and Credits. We process credit purchases and subscription payments through AI Studio Pay (pay.aicopilotx.com). We store Stripe customer identifiers and transaction references but do not store full card numbers, CVV codes, or other sensitive payment details on our servers.

Communications. If you participate in the Backlink Network or submit an interest form, we collect your name, email address, business name, industry, city, and tier preference. We use this information to send follow-up emails and manage your partnership status.

Technical Data. We automatically collect IP addresses, browser type, device information, and session identifiers for security, fraud prevention, and analytics purposes.

AI-Generated Content. Prompts and outputs generated through WP OS, App Studio, and the Copilot Layer are stored in our database to power your dashboard and enable iterative refinement. We do not use your prompts to train our underlying AI models without your explicit consent.

We use the information we collect to:

• Provide, operate, and maintain the Platform and its three modules
• Process credit purchases, subscription plans, and Backlink Network tier upgrades
• Send transactional emails including follow-up outreach, weekly digest reports, and system notifications
• Detect and flag prospect replies and send admin notification emails
• Run scheduled background jobs (nudge reminders, E2E health checks, digest emails)
• Enforce our Terms of Service and protect against abuse
• Analyze aggregate usage patterns to improve the Platform
• Comply with applicable laws and respond to legal requests

We use session cookies to maintain your authenticated state after sign-in. These cookies are HTTP-only, signed with a secure secret, and expire when your session ends or after 30 days of inactivity.

We use Umami Analytics, a privacy-respecting analytics tool, to collect anonymized page view and interaction data. Umami does not use cookies and does not collect personally identifiable information. No data is shared with advertising networks.

We do not use third-party advertising cookies, cross-site tracking pixels, or behavioral retargeting technologies.

We do not sell, rent, or trade your personal information. We share data only in the following circumstances:

• Service Providers. We use Resend for transactional email delivery, AWS S3 for file storage, TiDB for database hosting, and Cloudflare for DNS and security. These providers process data on our behalf under data processing agreements.
• AI Studio Pay. When you initiate a payment, you are redirected to pay.aicopilotx.com. Their privacy policy governs data collected during checkout.
• Manus OAuth. Authentication is handled by Manus. The data received from Manus is limited to your name, email, and user ID.
• Legal Compliance. We may disclose information if required by law, court order, or to protect the rights, property, or safety of GotAIx, our users, or the public.

We retain your account information and usage data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

Activity logs and AI-generated content (WP sites, apps, copilot agents) are retained for the lifetime of your account and deleted upon account closure.

Backlink Network interest records are retained for up to 2 years for outreach and partnership management purposes.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest for sensitive fields, HTTP-only signed session cookies, and role-based access controls. All administrative procedures require elevated authentication.

Despite these measures, no system is completely secure. We encourage you to use a strong, unique password and to sign out of shared devices.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated personal data
• Restrict or object to certain processing activities
• Data portability — receive a copy of your data in a machine-readable format
• Withdraw consent for optional communications at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

The Platform is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

GotAIx operates globally. Your data may be processed and stored in the United States and other countries where our service providers maintain infrastructure. By using the Platform, you consent to the transfer of your information to these locations. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

We may update this Privacy Policy from time to time. When we make material changes, we will update the Effective Date at the top of this page and, where appropriate, notify you by email or through an in-platform notice. Your continued use of the Platform after changes become effective constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: