Privacy Policy
ChatFortAI ("we", "us", "our") operates the website https://chatfortai.ai and the chat application at https://chat.chatfortai.ai and https://chatfortai-chat.duckdns.org (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using the Service you agree to the practices described below. If you do not agree, please do not use the Service.
1. Who We Are
ChatFortAI is operated by Matthew Lopez, based in Denver, Colorado, United States.
Contact: contact@chatfortai.ai
2. Information We Collect
2.1 Information You Provide
- Account information: name, email address, and password (hashed) when you register.
- Chat content: messages, prompts, files, and other inputs you submit to the Service.
- Files you upload or import: including content you choose to import from Google Drive via the Google Drive integration described in Section 4.
- Support communications: if you contact us, we retain the message and your email address.
2.2 Information Collected Automatically
- Log and usage data: IP address, browser type, pages visited, timestamps, and performance metrics.
- Cookies and similar technologies: used for authentication and session management. You can disable cookies in your browser, but parts of the Service will not function.
2.3 Information We Do NOT Collect
- We do not knowingly collect information from children under 13.
- We do not sell personal information.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service;
- Authenticate you and secure your account;
- Generate AI responses to your prompts by sending them to third-party model providers (see Section 5);
- Monitor performance, diagnose issues, and prevent abuse;
- Communicate with you about the Service;
- Comply with legal obligations.
4. Google User Data (Google Drive Integration)
The Service offers an optional integration with Google Drive that lets you attach files from your Drive to a chat. This integration follows the Google API Services User Data Policy, including the Limited Use requirements.
4.1 Scopes Requested
We request the https://www.googleapis.com/auth/drive.file scope. This scope grants access only to files you explicitly select through the Google Picker. We cannot see, list, or access any other files in your Drive.
4.2 How We Use Google User Data
- When you pick a file, the file's contents are downloaded to your active chat session so the AI model can reference the file to answer your prompt.
- The file contents are transmitted to the AI model provider you have selected (see Section 5) for the sole purpose of generating the AI response you requested.
- We do not use Google user data to serve advertising.
- We do not use Google user data to train or improve generalized AI/ML models.
- We do not share Google user data with third parties other than the AI model provider required to fulfill your request, and our infrastructure subprocessors listed in Section 5.
- Access tokens issued by Google are held only in your browser session for the duration of the Picker flow; we do not store Google refresh tokens server-side.
4.3 Limited Use Affirmation
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4.4 Revoking Access
You can revoke ChatFortAI's access to your Google account at any time from your Google Account permissions page: https://myaccount.google.com/permissions.
5. Third-Party Service Providers
We rely on the following processors to operate the Service. Each receives only the data necessary to perform its function:
| Provider | Purpose | Data Shared |
|---|---|---|
| AI model providers (Groq, OpenRouter, OpenAI, Anthropic) | Generating responses to your prompts | Prompts, chat messages, attached file contents |
| Hostinger | Server hosting (VPS infrastructure) | All service data at rest and in transit |
| Caddy / Let's Encrypt | Web server and TLS | Request metadata |
| Resend | Transactional email | Recipient email, email body |
| Langfuse (self-hosted) | Observability of AI requests | Prompts, model responses, latency metrics |
| Google LLC | Google Drive Picker & Drive API | OAuth tokens, file metadata, file contents you pick |
| DuckDNS | Dynamic DNS | Public IP address |
AI model providers may have their own retention and processing policies. We recommend reviewing the privacy policy of the provider you select before sending sensitive content.
6. Data Retention
- Account data: retained for as long as your account is active. Deleted within 30 days of account deletion.
- Chat history: retained until you delete it, or until your account is deleted.
- Uploaded and imported files: retained until you delete the chat containing them, or until your account is deleted.
- Logs: retained for up to 90 days for security and diagnostic purposes.
- Google Drive file contents: retained as part of the chat they were imported into, following the same retention rules as uploaded files.
7. Security
We protect your data using TLS encryption in transit, access controls on our infrastructure, and routine security updates. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
8. Your Rights
Depending on where you live, you may have rights to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Delete your account and associated data;
- Export your chat history;
- Object to or restrict certain processing;
- Withdraw consent (including revoking Google Drive access — see Section 4.4).
To exercise any of these rights, email contact@chatfortai.ai. We will respond within 30 days.
9. International Users
The Service is operated from the United States. If you use the Service from outside the U.S., you consent to the transfer and processing of your data in the United States, which may have different data protection laws than your country of residence.
10. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, email contact@chatfortai.ai and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced via the Service or by email. Continued use after changes take effect constitutes acceptance of the updated policy.
12. Contact
Questions or requests regarding this Privacy Policy:
ChatFortAI
Attn: Privacy
contact@chatfortai.ai
Denver, Colorado, United States