This Notice explains how Coyly collects, uses, stores and shares personal data. The data controller is the operator of the Coyly service, reachable at support@coyly.ai.
1. Data we collect
We collect account and authentication details, profile settings, subscription and transaction records, Coin ledger entries, messages and prompts, generated media, uploads, support communications, safety reports, device and network information, cookies, approximate network location and product usage events.
2. How we use data
We use data to provide and personalize Coyly, process payments, maintain balances, generate requested content, prevent fraud and abuse, enforce policies, provide support, measure reliability and the results of our advertising, meet legal obligations and improve the Services. We do not sell personal data.
3. Providers and transfers
Prompts, messages, media or technical metadata may be sent to contracted AI, hosting, storage, analytics, authentication, email and payment providers when needed to fulfil a request. Providers may process data in other countries under applicable contracts and law. Card details are entered on the payment provider’s own checkout page; Coyly never receives or stores card numbers or security codes.
Analytics. We use Google Analytics to understand how the Services are used. It receives product usage events, a pseudonymous browser identifier and, when you are signed in, an internal account identifier. Our servers also report sign-ups to it (with how you signed up) and purchases and refunds (with an order reference, the product and the amount paid). We use Microsoft Clarity to see how pages are used through heatmaps and session recordings of clicks, scrolling and page layout; on pages showing your chats, generated media, characters or account, the content is masked and only the interactions are recorded. Error and performance monitoring by our hosting and error-reporting providers sets no cookies.
Advertising measurement. When you arrive at Coyly from an advertisement, we keep the ad’s click identifier and campaign labels in a first-party cookie for 30 days and, once you sign up or buy, with your account. If you then create an account or make your first purchase, our servers tell the advertising network that sent you (currently TrafficJunky) that the click led to it, with the click identifier, an internal account or order reference, the kind of product and, for a purchase, the amount paid. Sign-ups and purchases measured in Google Analytics may also be shared with Google Ads to measure Google campaigns. We use this to measure which ads work; it is not used to show you ads. We do not give analytics or advertising partners your name, email address, messages or payment-card details.
4. Retention
We retain data while your account is active and as needed for the purposes above. Financial, fraud-prevention and audit records may be kept longer where required. Deleted content may remain in encrypted backups for a limited period. Messages you send to support are kept after your account is deleted, so we can answer them and keep a record of what was asked.
5. Your rights
Depending on your location, you may request access, correction, deletion, portability, restriction or objection, withdraw consent where applicable, close your account, and block or delete cookies in your browser (see the Cookies Notice). Send requests to support@coyly.ai; identity verification may be required.
6. Security
We use access controls, encryption in transit, restricted private-media delivery and logging. No system is completely secure. Use a unique password and do not share highly sensitive information with AI characters.
7. Adults only
Coyly is for adults aged 18 or older. We do not knowingly collect data from minors. Report concerns immediately to support@coyly.ai.