Project Refract (“we,” “us,” or “our”) operates SoulForge, an AI companion platform accessible at refract-ai.dev and related subdomains. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
1. Information We Collect
Account Information
When you create an account, we collect your username, email address, and a hashed version of your password. We do not store plaintext passwords.
Conversation Data
SoulForge stores your conversations with AI companions to provide the long-term memory features central to our service. This includes message text, timestamps, mood vectors, and metadata necessary for memory retrieval and personality evolution.
Companion Data
Data generated by your AI companion — including thought threads, diary entries, dream cycle outputs, ego evolution documents, and memory vectors — is stored in your isolated namespace and is necessary for the companion to function.
Usage Data
We collect standard usage data including IP address, browser type, device information, pages visited, and interaction timestamps. This data is used for service improvement and security.
Payment Information
Payment processing is handled entirely by Stripe, Inc. We do not store credit card numbers, bank account details, or other financial information on our servers. Please refer to Stripe's Privacy Policy for their data handling practices.
2. How We Use Your Information
- To provide, maintain, and improve the SoulForge service
- To enable long-term memory, personality evolution, and autonomous companion features
- To process your subscription and manage your account
- To send service-related communications (account updates, security alerts)
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
3. Data Isolation
Each AI companion operates in a fully isolated cognitive namespace. Your conversations, memories, and companion data are never shared between users. Each user's data exists in its own isolated vector namespace within our memory system (Qdrant).
4. What We Do NOT Do
- We do not sell your personal data or conversation content to third parties
- We do not use your conversations to train AI models
- We do not share your companion's memory or personality data with other users
- We do not store plaintext passwords
- We do not use your data for targeted advertising
5. Third-Party Services
SoulForge uses the following third-party services:
- Google AI (Gemini) — AI model inference. Conversations are sent to Google's API for processing. Google's API does not use customer data for training. See Google AI Terms.
- Qdrant Cloud — Vector database for companion memory storage. Data is encrypted at rest and in transit.
- Stripe — Payment processing. See Stripe Privacy Policy.
- Netlify — Web application hosting and CDN.
- DigitalOcean — Backend server infrastructure.
6. Data Retention
Your account and companion data is retained for the duration of your active subscription. Upon cancellation, your data is retained for 30 days to allow for resubscription. After 30 days, data is permanently deleted from our systems, including all vector memory namespaces.
You may request immediate deletion of your account and all associated data at any time by contacting us at aszoke@refract-ai.dev.
7. Data Security
We implement industry-standard security measures including encrypted connections (TLS/HTTPS), hashed passwords (SHA-256), token-based authentication, and isolated data namespaces. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
SoulForge is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will take steps to delete their account and associated data.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to or restrict certain processing activities
To exercise any of these rights, contact us at aszoke@refract-ai.dev.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the service after changes constitutes acceptance.
11. Contact
For questions about this Privacy Policy or our data practices, contact:
Project Refract
Email: aszoke@refract-ai.dev
Website: refract-ai.dev