Privacy Policy

Name FLYFISH LTD
Reg. Number ΗΕ 443895
Type Limited Company
Andrea Kariolou, 38, Agios Athanasios 4102, Limassol, Cyprus

This Privacy Policy defines the processing and protection of information about users of the website and services provided by the company (hereinafter referred to as the «Company»). This Policy has been developed to comply with applicable personal data laws and inform users of what data is processed, for what purposes, on what grounds, and how its protection is ensured.
By using the Company’s website and services, the user confirms that they have read this Privacy Policy and understand the terms of data processing set forth therein.

1. General Provisions
1.1. This Policy governs the processing of personal data and other information received by the Company from users of the website, services, software interfaces, feedback forms, and other digital products of the Company.
1.2. In this Policy, «personal data» means any information directly or indirectly related to an identified or identifiable user.
1.3. The Company processes personal data based on the principles of lawfulness, good faith, proportionality, limiting processing to achieving specific purposes, minimizing the content of data, and ensuring its accuracy, sufficiency, and relevance.
1.4. The Company takes the necessary legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, and other illegal actions.
2. Categories of Processed Data
2.1. The Company may process the following categories of user data:
2.1.1. Account data: email address, username or other specified name, country, interface language, profile settings, and other information provided during registration or use of the service. Data of users of the Russian Federation is stored in the Russian Federation.
2.1.2. Authentication and security data: password hashes, authorization tokens, account login information, two-factor authentication (2FA) data, and information about events related to account security.
2.1.3. Payment and settlement data: payment system identifiers, transaction information, payment statuses, and necessary payment details to the extent required for accounting and payment confirmation. The Company does not store full user bank card details.
2.1.4. Operational data related to the use of AI functions: text queries, uploaded files, generation or processing results, data on selected models and providers, system messages, telemetry data, including processing time, token count, and errors.
2.1.5. Technical data: IP address, browser and user agent information, device type, operating system, session information, cookies, localStorage, and other similar technical identifiers.
2.1.6. Communication data: support requests, inquiries, complaints, feedback, marketing preferences, consent to data processing and its revocation.
3. Purposes of Data Processing
3.1. The Company processes user data for the following purposes:
3.1.1. Registering, identifying, and authenticating users on the Service;
3.1.2. Providing access to the functionality of the Website and the Service;
3.1.3. Fulfilling obligations to the User, including providing services, processing requests, and providing the results of the Service;
3.1.4. Ensuring the stability, security, and proper functioning of the Website and technical infrastructure;
3.1.5. Preventing fraud, abuse, unauthorized access, and other illegal activities;
3.1.6. Processing payments, maintaining accounting and tax records, and generating settlement and reporting documents;
3.1.7. Processing support requests and communicating with users;
3.1.8. Sending informational and marketing messages, where permitted by law and/or with the User’s consent;
3.1.9. Analyzing, developing, improving, and optimizing the Service;
3.1.10. Fulfillment of obligations imposed on the Company by applicable law.
4. Legal Grounds for Data Processing
4.1. The Company processes personal data upon the presence of one or more of the following legal grounds:
4.1.1. The user’s consent to the processing of their personal data;
4.1.2. The need for processing to conclude, perform, or terminate an agreement with the user;
4.1.3. The need to fulfill obligations established by law;
4.1.4. The need to exercise the rights and legitimate interests of the Company or third parties, provided that this does not violate the rights and freedoms of the user;