Privacy Policy

Information you give us. Your email address when you register, and your display name if you set one. We do not require your real name, postal address, date of birth or any identity document.

Information collected automatically. IP address, browser and device type, pages viewed and timestamps. This is used for security, abuse prevention, rate limiting and aggregate analytics.

Content you create. The prompts you submit and the stories generated for you are stored so that you can return to them. They are private to your account unless you choose to publish them.

Payment information. Card and wallet details are collected and processed entirely by our payment service providers. We never see or store them. We retain only the transaction reference, amount, currency, date and the credits issued.

• to operate the Service, generate stories and maintain your library;
• to process purchases and issue, track and refund word credits;
• to enforce our Terms of Service, including automated screening of prompts and generated text for prohibited content, and investigation of reports;
• to detect and prevent fraud, abuse and unauthorised access;
• to send transactional email (receipts, security notices, service announcements);
• to comply with legal obligations.

We do not sell personal data, and we do not use your stories to train our own models.

We share the minimum necessary data with the following service providers:

• Supabase — database and authentication (servers in us-east-1)
• Vercel — website hosting and delivery
• OpenRouter / Venice AI — AI text generation. Prompts are transmitted for inference; no account identifiers are attached. NyxAI is an independent service and is not affiliated with, or partnered with, these providers or their underlying model vendors.
• Payment service providers — payment processing and refunds
• Resend — transactional email delivery

We may also disclose data where required by law, or where necessary to investigate a credible report of unlawful content.

We use cookies that are strictly necessary for sign-in and session security, and local storage to remember your age confirmation and interface preferences. We do not use third-party advertising cookies.

• Account data — until you delete your account, or automatically after 2 years of inactivity
• Generated content — until you delete it or delete your account
• Usage logs — 12 months, anonymised
• Transaction records — 7 years, as required by accounting and anti-money-laundering law

You may access, correct, export or delete your personal data. You may delete your account yourself from Settings, or email support@nyx-ai.net from your registered address; the deletion will be completed within seven (7) business days, except for the transaction records described above. We respond to other requests within 30 days.

Data is transmitted over TLS and stored on managed infrastructure with access controls and audit logging. Administrative access is restricted and rate-limited. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority without undue delay.

The Service is for adults aged 18 and over only. We do not knowingly collect personal data from anyone under 18. If we learn that we have, the account and its data are deleted immediately. If you believe a minor has registered, contact support@nyx-ai.net.

Our processors operate outside Hong Kong, principally in the United States. By using the Service you consent to your data being transferred to and processed in those jurisdictions under contractual safeguards with each processor.

We may update this policy; the revised version will be posted here with a new date. Questions and requests: support@nyx-ai.net, Aerial Frontier, Hong Kong SAR.

A Chinese-language version is available at /privacy. In the event of any inconsistency, this English version prevails.