Privacy Policy
Last updated: June 2026
Graphy AI ("we", "us", or "our") provides an AI platform for chat, image, video, voice, and document tools at graphyai.pk (the "Service"). This Privacy Policy explains what information we collect when you use the Service, including when you sign in with a third-party account such as Google, how we use and protect that information, and the choices and rights you have over it. By creating an account or using the Service, you agree to the practices described below.
1. Information We Collect
We collect information you provide directly, such as your name, email address, and password (when you register with email) when you create an account. If you upload content — prompts, images, documents, or audio — we process that content to provide the requested feature. We also automatically collect usage data such as AI requests made, tokens/credits consumed, feature usage patterns, device and browser type, IP address, and timestamps, which we use to operate, secure, and improve the Service.
2. Information We Receive From Google Sign-In
If you choose to sign in or register using "Continue with Google," we receive basic profile information from your Google account through Google's OAuth service: your name, email address, and profile picture URL. We use this information solely to create and authenticate your Graphy AI account, pre-fill your display name and avatar, and communicate with you about your account. We do not request access to your Gmail, Google Drive, Google Calendar, or any other Google service beyond your basic profile — only the standard "email," "profile," and "openid" scopes. We do not share this information with third parties for advertising, and we do not use it to train AI models. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
3. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services; authenticate your account and prevent fraud or abuse; process transactions and manage your credit/subscription balance; send service communications (such as password resets or billing receipts); and ensure the security of our platform. We do not sell your personal information to third parties, and we do not use your account data or AI conversations to train our own models.
4. Data Storage & Security
Your data is stored securely in our cloud database (Supabase/PostgreSQL) and object storage. We use industry-standard encryption for data in transit (HTTPS/TLS) and at rest. Passwords are hashed with bcrypt and never stored in plaintext; if you sign in via Google, no password is stored for your account at all since authentication is handled by Google. Access to production data is restricted to authorized personnel who need it to operate the Service.
5. AI Conversations & Generated Content
Prompts and conversations you submit are processed through our backend and, where required to fulfill your request, sent to the relevant AI model provider (for example OpenAI, Anthropic, Google, or other providers configured in the platform). Please review each provider's own privacy policy for how they handle data sent to their APIs. We do not use your conversations, uploads, or generated content to train our own models, and we do not sell this content to third parties.
6. Data Retention & Deletion
We retain your account information and content for as long as your account is active, or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You can permanently delete your account at any time from Settings → Account → Delete Account, which immediately and permanently removes your profile, conversations, generated images, voice records, and other associated data from our servers. You may also request deletion by emailing support@graphyai.pk.
7. Cookies & Session Data
We use essential cookies to maintain your login session and authenticate your account (via NextAuth). We do not use third-party tracking or advertising cookies.
8. Third-Party Services
We rely on a small number of trusted service providers to operate the platform: Google (Sign-In authentication), Stripe (payment processing), Supabase (database and storage hosting), and Vercel (application hosting), along with the AI model providers described above. Each of these services processes data under its own privacy policy and security practices, and we only share the minimum data necessary for each service to perform its function.
9. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@graphyai.pk and we will delete it.
10. Your Rights
You have the right to access, update, or delete your personal information at any time through your account settings, including revoking Google Sign-In access at any time via your Google Account's "Third-party apps & services" settings. You may also contact us at support@graphyai.pk to exercise these rights or ask questions about how your data is handled.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service.
12. Contact
If you have questions about this Privacy Policy or how your data is handled, please contact us at support@graphyai.pk.