Privacy Policy
How we collect, use, and protect your information.
Last updated: 22.03.2026
1. Who we are
NT AI Assistant (“we”, “our”, “the service”) is operated by News Targeted and provides AI chat, image generation, 3D-related tools, and related features. This policy describes how we handle personal data when you use our website and services.
2. Information we collect
We may collect:
- Account data – Email address, username, and password hash (we do not store plaintext passwords). If you use Discord or Roblox sign-in, we store the identifiers those platforms provide (e.g. account IDs) and profile fields they share (such as username and email when exposed by the provider).
- Security data – When you enable two-factor authentication (2FA), we store secrets and recovery-related data needed for TOTP. If you register passkeys or WebAuthn credentials, we store cryptographic public key material and related metadata required for authentication.
- Usage and content data – Prompts, conversations, attachments you upload, generated outputs, credit usage, plan or subscription status, and similar data needed to run and improve the service, enforce limits, and meet legal obligations.
- Billing data – When you purchase credits or subscriptions, our payment processor (e.g. Stripe) processes card and billing details. We typically receive limited billing metadata (such as customer id, transaction ids, and product identifiers), not full card numbers.
- Technical and cookie data – IP address, user agent, timestamps, session identifiers, security-related cookies, language or UI preferences (e.g. changelog language), and short-lived OAuth helper cookies used to complete sign-in securely. Our site may be delivered through a CDN or security proxy (e.g. Cloudflare), which can process similar technical data according to its own policies.
- Support and communications – Messages you send via contact or support forms, and correspondence we need to resolve requests.
3. Legal bases (EEA / UK users)
Where GDPR-style laws apply, we rely on appropriate bases such as: contract (providing the service you asked for), legitimate interests (security, abuse prevention, analytics, product improvement where not overridden by your rights), consent where required (e.g. certain cookies or optional features), and legal obligation where we must retain or disclose data.
4. How we use information
We use your information to:
- Provide, operate, and secure the service (authentication, credits, chat, images, billing, admin tools).
- Process payments and prevent fraud or abuse.
- Maintain and improve features, diagnose errors, and plan capacity.
- Comply with law, respond to lawful requests, and enforce our Terms of Service.
- Use feedback or training-related flows only where clearly disclosed and, where required, with your consent (e.g. optional “use for training” style submissions).
5. Sharing and processors
We do not sell your personal information. We may share data with:
- AI and infrastructure providers – e.g. model APIs, hosting, email, analytics, or logging, strictly as needed to deliver the service.
- Payment processors – e.g. Stripe, to complete purchases you initiate.
- Identity providers – Discord, Roblox, or similar when you choose social login; their use of data is governed by their policies.
- Professional advisers or authorities – when required for legal, security, or corporate reasons.
Processors may be located outside your country; where required we use appropriate safeguards (such as standard contractual clauses).
6. Retention
We keep data while your account is active and for a reasonable period afterward for backup, dispute resolution, and legal compliance. Technical logs may be retained for shorter or longer periods depending on security needs. Exact periods can vary by data category; contact us for more detail about your account.
7. Security
We use reasonable technical and organisational measures (including encryption in transit where appropriate, access controls, and secure handling of secrets). No online service is completely secure; you are responsible for keeping passwords and 2FA factors confidential.
8. Your rights
Depending on your location, you may have rights to access, rectify, delete, restrict, or object to certain processing, and to data portability or to withdraw consent. You may also lodge a complaint with a supervisory authority. To exercise rights, use the Contact form. Account deletion or export options may be available in Settings where implemented.
9. Children
The service is not directed at children under the age required by applicable law to consent to data processing. If you believe we have collected a child’s data in error, contact us and we will take appropriate steps.
10. Changes
We may update this policy. We will change the “Last updated” date and, where appropriate, provide a notice in the service or by email.
11. Contact
For privacy-related questions or requests: Contact us. Related documents: Terms of Service and Documentation.
Last updated: