Privacy Policy

1. Data we collect

• Mobile number (MSISDN). When you sign in with your mobile number, we process that number to identify your account and to keep your session active.
• Conversations and uploads. The prompts you send and the images you upload (for Image Studio restyling or as a profile photo), together with the AI-generated responses, so the Service can work and so you can revisit your history.
• Plan data. Your account's usage allowance and the counters for messages and conversations used this month. No payment-card details are collected or stored — there is no paid plan and no payment processing.
• Minimal technical data. Basic information needed to run and secure the Service, such as an authentication token, session identifiers, approximate request metadata, and error logs.

2. How we use your data

• to provide the Service, including generating and displaying model responses;
• to authenticate you and maintain your session;
• to maintain your account, plan allowance, and usage counters;
• to store and show your conversation history;
• to maintain security, prevent abuse, and debug problems; and
• to comply with legal obligations.

We do not sell your personal data, and we do not use your conversations to advertise to you.

3. Legal bases for processing

Where the GDPR applies, we process your data to perform our contract with you (providing the Service), to comply with legal obligations (such as accounting and security duties), on the basis of our legitimate interests in keeping the Service secure and improving it, and on the basis of your consent where consent is required.

4. Sharing with third parties

We share data only as needed to run the Service:

• AI model providers. To answer your questions, your prompts and any content you attach are sent to third-party model providers (including OpenAI, Anthropic, Google, xAI and DeepSeek). These requests are routed through OpenRouter, which forwards them to the selected provider. Your prompts therefore leave our systems and are processed by these third parties under their own privacy and data-handling terms. Please do not submit sensitive personal data you would not want shared with a model provider.
• Infrastructure and service providers. Hosting, storage, logging, and similar vendors that process data on our behalf under appropriate agreements.
• Legal and safety. Where required by law, or to protect the rights, safety, and security of SquareTable, our users, or the public.

5. International transfers

Some of the providers described above, in particular the AI model providers, are located outside the European Economic Area. Where we transfer personal data outside the EEA, we rely on an adequacy decision or on appropriate safeguards such as the European Commission's standard contractual clauses.

6. Retention

We keep your conversations, notes, and account data for as long as your account exists, so you can return to your history. We do not currently apply a fixed retention period. You can delete individual threads or notes at any time, or delete your account entirely — which permanently removes all your conversations, notes, and account data. We may retain limited records longer only where required for legal, accounting, or security reasons.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. Where processing relies on your consent (such as sending prompts to model providers when you choose a model), you can withdraw it, though this may limit the Service. To exercise any of these rights, contact support@ai-squaretable.com. You also have the right to lodge a complaint with your local data protection authority; in the Netherlands this is the Autoriteit Persoonsgegevens.

8. Security

We use reasonable technical and organizational measures to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

The Service is not directed to children and is intended only for users who meet the eligibility requirements in our Terms of Service. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by reasonable means, and the "Last updated" date above will be revised.

11. Contact

For privacy questions or requests, contact support@ai-squaretable.com, or write to SAM Media B.V., Van Diemenstraat 356, 1013 CR Amsterdam, Netherlands.