pl / en

Privacy policy

Version of 2026-10-30

1. Introduction

Regenesis is a service where you talk to AI personas built from public statements. A persona is a program, not a person. This policy covers the regenesis.chat and regenesis.now websites, the waitlist and the app.

The data controller is 8 Bits Space OÜ (Estonia). For privacy matters, write to privacy@regenesis.chat.

2. What we collect

  • Waitlist: your email address, who you want to clone, the language and address of the page, the consent version and the date you signed up. We store no IP address or browser data with it.
  • Website visits: your IP address and technical browser data, which Cloudflare sees when it serves the site and checks you are not a bot.
  • Account: your email address, account id, sign-up date and last visit.
  • Relationship memory with each persona: how to address you, the language you talk in, topics, facts you share about yourself, shared jokes, open threads, promises, the last mood, topics the persona should avoid, short notes, the last 8 chat messages and the days you talked.
  • Usage counters: how many messages and video calls you have each day with each persona and how many seconds the calls lasted.
  • Persona access: which personas are available to you.
  • Video calls: the sound from your microphone, the transcript, the exchange with the language model, timing and diagnostics, plus a report and a recording of the call. Only you see your camera picture: it stays on your device and we never send it anywhere.
  • Payments: the Stripe customer and subscription ids, plan, billing period, subscription status, period end date and the accepted terms version. Stripe stores your name, billing address and, for a business purchase, the company name and tax or EU VAT number. We never see full card details.

3. How we use data and on what basis

  • Waitlist: a message about early access to the beta at a lower price. The basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • Account, relationship memory, calls and persona access: signing in with an email code, linking conversations to you and keeping them continuous. The basis is the contract, meaning your use of the app (Art. 6(1)(b) GDPR).
  • Usage counters, running the site and bot protection: limits and protection against abuse. The basis is our legitimate interest (Art. 6(1)(f) GDPR).
  • Payments: entering into and performing the contract (Art. 6(1)(b) GDPR) and accounting and tax duties (Art. 6(1)(c) GDPR).

We do not sell your data or use it for advertising.

4. Who we share data with

  • Cloudflare: runs the site, the connection to our server and the bot protection (Turnstile) and stores the waitlist in the EU. It sees your IP address and technical browser data.
  • Anam: runs the video calls. It receives the sound from your microphone, the conversation text and your IP address and keeps a report, a transcript and a recording of each call. It receives a signed pseudonymous id, not your email. Under Anam's policy, conversation content is not used to train models. Anam uses its own sub-processors, listed at trust.anam.ai.
  • DeepSeek: receives your chat and video call messages together with the relationship memory and writes the persona's replies. It does not receive your email address.
  • Supabase (Frankfurt, EU): accounts, relationship memory and counters. It also keeps sign-in logs with your IP address for a short time.
  • OVH (Frankfurt, EU): the server the personas run on. Server logs contain neither your email nor message content.
  • Qdrant: the persona's knowledge search. It receives your message as numbers (vectors), not text.
  • Resend: sends the sign-in code emails. It sees your email address and the content of the code email.
  • Stripe (Stripe Payments Europe, Limited, Ireland): handles payments, invoices and the subscription panel. It sees your email, billing details, card details and payment history. For fraud prevention and regulatory duties it also processes data as a separate controller under its own privacy policy (stripe.com/privacy).

We also disclose data when the law requires it.

5. Your rights

You can ask for access to your data, correction, erasure, restriction of processing and portability, and you can object. You can also withdraw consent at any time, which does not affect earlier processing. Write to privacy@regenesis.chat from the address the request concerns. Requests are free of charge.

You can also complain to the supervisory authority in the country where you live (in Poland the President of the Personal Data Protection Office, uodo.gov.pl) or in Estonia, where we are based (Andmekaitse Inspektsioon, aki.ee).

6. How long we keep data

  • Waitlist: until you withdraw consent or we close the list.
  • Account, relationship memory and counters: while you have an account. After it is deleted we remove them from our database within 30 days.
  • Sign-in logs at Supabase: up to 7 days.
  • Call recordings at Anam: up to 30 days.
  • Call reports and transcripts at Anam: until we delete them. We delete them at your request and after your account is deleted. Anam may keep technical session data longer, without conversation content.
  • DeepSeek: under that company's retention rules.
  • Invoices and payment records: as long as accounting and tax law requires (for example 7 years in Estonia), also after the account is deleted.

7. Security

Connections to the site and the app are encrypted. You sign in with an email code, so we store no passwords. Personas and models do not receive your email address and Anam sees only a signed pseudonymous id. No protection can give a full guarantee.

8. Transfers outside the EEA

  • DeepSeek: the transfer outside the EEA relies on your explicit consent (Art. 49(1)(a) GDPR), which you give by signing in. It carries the risk that public authorities in the recipient's country gain access to this data.
  • Anam: calls run on servers in the EU (Spain) or the US, under standard contractual clauses.
  • Stripe: may transfer data to Stripe, Inc. in the US under the EU-US Data Privacy Framework or standard contractual clauses.

9. Children

You must be at least 16 to use the app. If we learn that we hold data from someone younger, we will delete it.

10. Changes

When we change this text, its version and date above change. We will tell you about material changes by email or in the app.

11. Cookies

The regenesis.chat and regenesis.now websites set no cookies and store nothing in your browser. The bot check runs in a Cloudflare frame.

The app uses only necessary cookies: ntc_lang (language, one year), ntc_theme (theme, one year) and sb-…-auth-token (sign-in session, until you sign out). It also saves pages on your device for offline use.

We use no analytics or advertising cookies.

12. Contact

For all privacy matters, write to privacy@regenesis.chat.

Back