Privacy Policy

1. Data Controller

The data controller responsible for personal data processed through LugChat.com is:

2. Data We Process

• Account & Auth data: email address, unique user identifier, encrypted auth session tokens.
• Subscription & Credit data: subscription tier (Starter, Pro, Creator), credit balances, monthly allowances and auditable transaction records.
• Simulation input: prompt text, scene descriptions and context voluntarily entered to configure chat generation.
• Technical logs: connection timestamps, IP address and essential session cookies.

3. Legal Basis & Purposes

Data is processed on the basis of contract execution (delivering AI chat simulations and managing account credits), legitimate security interests, and compliance with statutory obligations.

4. Retention Policy

Account profiles are retained while active. Generated video exports and simulation payloads are retained under our 24-hour temporal retention policy, after which downloadable heavy files are automatically pruned.

5. Sub-processors

We work with reputable technology infrastructure providers:

• Certified cloud infrastructure: encrypted database hosting and secure authentication infrastructure.
• Payment processors: future subscription checkouts will be processed via certified PCI-DSS payment gateways without card data being stored on our servers.

LugChat does not sell data or use third-party behavioral ad tracking pixels.

6. User Rights (GDPR)

You may exercise your rights of access, rectification, erasure, restriction, data portability and objection by contacting contact@lugchat.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).