PERSONA AI · Legal
Privacy Notice
Seller: Jamain Roth · Last updated: 7 November 2026
Controller and contact
Jamain Roth, trading as PERSONA AI, is the data controller for personal data processed to provide this service. For privacy questions or rights requests, contact redjamain@icloud.com.
Data and purposes
We process email, authentication records and profile details to create and secure accounts; private assistant configurations, saved missions, crew sessions, duels and approved memory to provide your workspace; purchase identifiers, payment status and trial counters to manage access and prevent abuse; and technical logs such as request information, IP addresses and device/browser information for security and troubleshooting. Support correspondence is used to answer your requests. Passwords are handled by the authentication service, not stored as plain text in your profile.
AI and optional features
When you explicitly start an AI request, the question, conversation history, assistant instructions and approved memory entries you select are sent through Lovable AI Gateway to the selected model provider. Do not include unnecessary sensitive information. Ordinary chat conversations are not saved in your workspace; collaboration answers are stored when you save them. Provider operational logs may be retained under provider policies. Memory is never captured implicitly. The guided voice tour uses your browser's speech service; feedback opens an email draft and is not automatically sent.
Legal bases
Account, workspace and purchase processing is necessary to perform our contract with you. Security, abuse prevention and troubleshooting rely on legitimate interests, balanced against your rights. Optional features requiring consent use that consent, which you can withdraw for future use. Records required by tax, accounting or other law are processed to meet legal obligations.
Recipients and transfers
Service providers include Lovable Cloud for hosting, authentication and private storage, and Lovable AI Gateway and model providers for AI processing. Paddle receives purchase information as Merchant of Record for sales, payments, tax compliance and invoicing, and processes it under its own privacy notice. Professional legal or accounting advisers and authorities receive data where necessary or legally required. Providers may process data outside the EEA or UK; where required, transfers must use adequacy decisions or contractual safeguards such as Standard Contractual Clauses. Contact us for information about the safeguards applicable to your data.
Retention and deletion
Account and saved workspace data are kept while needed to provide your account, until you delete individual items or request account deletion. Account deletion removes private profile, configuration, session and memory records and anonymizes financial account linkage. Necessary payment, security and deletion-prevention records may remain for legal obligations, dispute handling and preventing stale-session access, and are deleted or anonymized when no longer needed. Technical and provider logs follow their operational retention schedules. Request details of applicable retention periods by email.
Your rights
Subject to applicable law, you can request access, correction, erasure, restriction, portability or object to processing and withdraw consent. For EEA and UK users, GDPR rights apply and we respond within one month, subject to lawful extensions. You may complain to your local data protection authority. Account settings allow profile changes and deletion; memory controls allow approval withdrawal and deletion.
Security and browser storage
We use appropriate technical and organizational protections, including encrypted connections and owner-only access controls; no system is perfectly secure. Essential session mechanisms and browser storage support sign-in, language preferences and signed-out work. Signed-out work stays in that browser and is not automatically imported into a signed-in account. This app does not set advertising or optional analytics cookies. You can clear browser storage or block cookies in your browser, which may sign you out or remove local work. Integrated checkout providers may use their own essential cookies.