Privacy Policy

This Privacy Policy explains how we collect, use, share, and protect personal information when you use Cosmic AI on the web, iOS, and Android. By using Cosmic AI you agree to this Policy.

1. Who We Are

Cosmic AI is operated by Bindu Intelligence LLC, a Delaware company. Cosmic AI is an AI aggregation platform that routes your requests to third-party AI models. You must be at least 13 to use Cosmic AI, and if you are under 18 you must have a parent or guardian's consent (see our Children's Privacy & Age Policy).

2. Information We Collect

• Account data: name, email address, and profile picture from Google, Apple, or X (Twitter) sign-in.
• Chat & input data: text prompts, uploaded files (PDFs, images, CSVs), images you generate, and voice recordings used to produce AI responses.
• Long-term memory:facts and preferences we extract from your use (e.g., "prefers Python") stored in a semantic memory database to personalize your experience. You can view and delete these.
• Transaction data: subscription plan, credit balance, invoices, and purchase history. Payment card details are handled by our processors (Polar, our merchant of record, on web; Apple/Google on mobile) — we do not store full card numbers.
• Technical data: IP address (for security, rate-limiting, and approximate geolocation — country / region / city — to detect unusual sign-ins), device and browser information, session/device records, and diagnostic/crash logs (via Arize Phoenix).
• Cookies & similar technologies: see our Cookie Policy.

3. How We Use Your Information

• Provide the service, including Smart Routing of queries to appropriate AI models.
• Maintain your personalized memory, projects, and history.
• Operate your wallet, subscriptions, and credit deductions, and process payments.
• Secure the service — fraud prevention, abuse detection, rate-limiting, and account-security alerts.
• Improve quality and features. We review aggregate usage, your 👍/👎 feedback, and — on a limited basis — some conversations and outputs, so we can debug, evaluate models, and improve the service.
• Communicate with you about your account, security, and (with your consent where required) marketing.
• Comply with law and enforce our Terms.

4. AI Model Training — What We Do NOT Do

We do not use your prompts, files, or voice recordings to train AI models. Feedback you give and some outputs may be reviewed by authorized staff to improve quality and features, but this review is not model training. Where a third-party provider offers a no-training / zero-retention setting, we use it; however, providers operate under their own policies, described below.

5. How We Share Information

We share information only as needed to run the service:

• AI providers. To answer your requests we transmit your prompts and related content to third-party providers, including OpenAI, Anthropic, Google (Gemini), DeepSeek, and Suno, among others. Their use of data is governed by their own terms and privacy policies.
• Service providers / subprocessors that host and support the platform, for example: Polar (payments, as merchant of record), Apple / Google (mobile purchases and sign-in), X (sign-in), and infrastructure, storage, email, and monitoring vendors (e.g., Arize Phoenix). A current list is available on request.
• Analytics. With your consent, we use Google Analytics to measure anonymous, aggregate usage of our public website pages only — your logged-in workspace (chats, files, settings) is never tracked. See our Cookie Policy for details and how to withdraw consent.
• Legal & safety. To comply with law, respond to lawful requests, protect rights and safety, or report illegal content (e.g., CSAM to NCMEC as required by US law).
• Business transfers. In a merger, acquisition, or asset sale, subject to this Policy.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under US state privacy laws.

Google API data (Limited Use). Cosmic AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

IP geolocation. We derive approximate location (country, region, city) from your IP using the DB-IP Lite database — IP geolocation by DB-IP, licensed under CC BY 4.0.

6. Voice Data

If you use voice features, we process your voice recording to transcribe and answer your request. We do not use voice recordings to create voiceprints or biometric identifiers, and we do not sell or profile you based on them. Recordings are retained only as long as needed to provide and troubleshoot the feature. (Residents of states with biometric laws, such as Illinois, may have additional rights — contact us.)

7. Data Retention

We keep personal information only as long as needed for the purposes above:

• Account data — for the life of your account.
• Chats, files, generated images, and memory — until you delete them or delete your account.
• Transaction records — as required for tax/accounting law (typically several years).
• Security logs — for a limited period for fraud prevention and security.

When you delete your account, we permanently purge personal data, chat history, and semantic memories from our databases, except records we must retain by law. Backups are overwritten on a rolling schedule.

8. Your Choices and Rights

• In-app controls. You can edit your profile, delete individual chats or memory facts, manage devices and sessions, and delete your entire account in Settings.
• US state privacy rights (California/CPRA, Virginia, Colorado, Connecticut, Utah, Texas, and others). Depending on where you live, you may have the right to: know/access the personal information we hold, correct it, delete it, obtain a portable copy, and opt out of sale/sharing or targeted advertising and certain profiling. We do not sell or share personal information, but you may still exercise the other rights. To make a request, email [email protected]. We will verify your request and respond within the time required by law, and we will not discriminate against you for exercising these rights. You may use an authorized agent, and you may appeal a denial by replying to our response.
• "Do Not Sell or Share My Personal Information." We do not sell or share your personal information; no opt-out is necessary, but you may still contact us with questions.
• Marketing. You can unsubscribe from marketing emails at any time; we will still send essential account and security messages.

9. Security

We use a defense-in-depth approach, including: encryption in transit (TLS) and at rest, VPC-internal services, strict access controls and IP allowlisting for administrative access, two-factor authentication, session/device management, and monitoring. No method of transmission or storage is 100% secure, but we work to protect your information and will notify you of a breach as required by law.

10. International Users

We operate in the United States, and your information is processed there. If you access Cosmic AI from outside the US, you consent to processing in the US, which may have different data-protection laws than your country. (We are not currently targeting the EU/UK; if that changes we will add GDPR/UK-GDPR terms.)

11. Children

Cosmic AI is for users 13 and older, and users under 18 must have a parent or guardian's consent. We do not knowingly collect personal information from children under 13; if we learn we have, we will delete it. For users aged 13–17, a parent or guardian may contact us to review, delete, or stop further collection of their child's information. See the Children's Privacy & Age Policy.

12. Changes to This Policy

We may update this Policy. We will post the new "Last Updated" date and, for material changes, provide additional notice. Continued use after the effective date means you accept the update.

13. Contact Us

For privacy questions or to exercise your rights:
Bindu Intelligence LLC · Bindu Intelligence LLC, Delaware, USA · [email protected]