Privacy Policy

Acurel ("Acurel", "we", "us") operates a credit-powered platform of AI development tools. This Privacy Policy explains what personal data we collect when you visit our website, purchase credits, or use our tools, and how we handle that data.

For the purposes of the EU/UK GDPR, Acurel acts as the data controller for account and billing information, and as a data processor for content you submit to our AI tools.

We collect the minimum data needed to provide, secure, and improve the service:

• Account data: name, email, hashed password.
• Order data: selected credit package, currency, promo code, payment method, invoice details.
• Usage data: tools invoked, credit consumption, timestamps, request/response metadata.
• Technical data: IP address, browser and device information, referrer, error logs.
• Communications: messages you send us via support or email.

We do not knowingly collect data from children under 16.

• Provide the service, process credit purchases and grant access to AI tools.
• Send transactional emails: order confirmations, bank transfer instructions, security alerts.
• Detect fraud, abuse and violations of our Acceptable Use Policy.
• Comply with legal, accounting and tax obligations.
• Improve product quality, performance and safety of AI outputs.

• Contract: to deliver the credits and tools you purchased.
• Legitimate interests: platform security, fraud prevention, product analytics.
• Legal obligation: invoicing, tax and accounting retention.
• Consent: optional analytics and marketing cookies (see Cookie Policy).

We share data only with vetted subprocessors that help us run the service: cloud hosting, email delivery, error monitoring, and payment processing. Each subprocessor is bound by a data processing agreement and appropriate safeguards for international transfers (Standard Contractual Clauses where applicable).

We do not sell personal data.

• Account data: while your account is active, plus up to 12 months after deletion.
• Invoices and payment records: 7 years, as required by law.
• Tool inputs and outputs: up to 30 days for abuse prevention, then deleted.
• Support conversations: up to 24 months.

Subject to applicable law, you have the right to:

• Access, correct or delete your personal data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority.

To exercise a right, email [email protected].

We use TLS in transit, encrypted storage at rest, principle-of-least-privilege access controls, and continuous logging. No system is perfectly secure — please report suspected vulnerabilities to [email protected].

We may update this policy from time to time. Material changes will be announced by email or in-app notice at least 14 days before they take effect.