NanaRoast ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights. By using NanaRoast — including our website and any SMS communications — you agree to this policy.

1. Information We Collect

We collect the following types of information:

• Email Address: Required to access the chat service and manage your subscription.
• Phone Number (optional): If you opt in to SMS messaging via Twilio, we collect and store your phone number to deliver messages.
• Chat Messages: The messages you send to Nana are transmitted to OpenAI's API for generating responses. We may log chat counts (not full content) for rate-limiting purposes.
• Payment Information: Subscription payments are processed by Stripe. We do not store your credit card details — Stripe handles all payment data under their own privacy and security standards.
• Usage Data: We track how many chats you use per day (by email address) to enforce the free tier limit.
• Technical Data: Standard server logs may include IP addresses, browser type, and pages visited. This is used for security and service improvement.

2. How We Use Your Information

We use the information we collect to:

• Deliver the NanaRoast chat service and process your messages through OpenAI.
• Manage your account, subscription, and daily chat limits.
• Send transactional and promotional SMS messages (only if you opted in via Twilio).
• Process payments via Stripe.
• Prevent fraud and enforce our Terms of Service.
• Improve our service and diagnose technical issues.
• Comply with legal obligations.

3. SMS Messaging (Twilio)

If you provide your phone number and opt in to SMS communications, your number is processed through Twilio, our SMS service provider. By opting in, you consent to receive automated text messages from NanaRoast. Message frequency varies. Message and data rates may apply.

• To opt out at any time, reply STOP to any message.
• To get help, reply HELP or email admin@nanaroast.com.
• We do not sell or share your phone number with third parties for their marketing purposes.
• Carriers are not liable for delayed or undelivered messages.

4. TikTok

We maintain a presence on TikTok for marketing and entertainment purposes. When you interact with our TikTok content, TikTok collects data according to their own Privacy Policy. We do not receive personal data from TikTok unless you separately contact us or visit our website. We do not use TikTok's advertising pixel or tracking tools on our website.

5. Third-Party Service Providers

We share your data only with the service providers necessary to operate NanaRoast:

• OpenAI — receives your chat messages to generate AI responses. Subject to OpenAI's Privacy Policy.
• Stripe — processes subscription payments. Subject to Stripe's Privacy Policy.
• Twilio — delivers SMS messages. Subject to Twilio's Privacy Policy.
• Replit — hosts our application and database infrastructure. Subject to Replit's Privacy Policy.

We do not sell your personal information to any third party.

6. Data Retention

We retain your email address and chat usage data for as long as your account is active or as needed to provide the service. If you request deletion, we will remove your data within 30 days, except where we are required to retain it by law (e.g., for financial records related to payments).

7. Cookies and Tracking

NanaRoast does not currently use tracking cookies or third-party analytics tools. Standard server logs (IP address, request timestamps) are retained for up to 30 days for security purposes.

8. Children's Privacy

NanaRoast is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at admin@nanaroast.com and we will delete it promptly.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal data, including:

• The right to access the personal data we hold about you.
• The right to request correction of inaccurate data.
• The right to request deletion of your data ("right to be forgotten").
• The right to opt out of SMS communications at any time by replying STOP.
• The right to withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at admin@nanaroast.com.

10. Data Security

We implement reasonable technical and organizational measures to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the updated date at the top of this page. Your continued use of the service after any changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:
Email: admin@nanaroast.com
Website: nanaroastchat.com