Who we are
Itzi is an independent project operated from France.
Itzi provides an AI workspace, compatible APIs and related tools. Itzi acts as the data controller for account, product and support data. Privacy questions can be sent to [email protected].
Scope
This policy covers the Itzi website, application and public APIs.
It applies when you browse the website, create an account, use chat or other workspace features, call an Itzi API, purchase usage, or contact support. Third-party websites that you open from Itzi apply their own privacy policies.
Data we collect
We collect what is needed to run your account and provide the service.
- Account data, including your name, email address and authentication records.
- Workspace content, including conversations, prompts, files, generated images, saved settings and support messages.
- Usage and billing records, including model usage, credit movements, plan status and transaction references. Itzi does not store payment card details.
- Technical and security data, including request metadata, browser information, a random first-party device identifier, pseudonymized IP and network signals, error records and abuse-prevention events.
- Advertising preferences and attribution data while optional measurement is enabled.
How we use data
Each use has a practical purpose and a lawful basis.
We process data to create and secure accounts, deliver requested AI and tool features, maintain conversation history, calculate usage, provide billing and support, prevent abuse, identify probable links between accounts for manual security review, and comply with legal obligations. Account-link signals do not trigger automatic suspension or credit removal. These activities rely on performance of our contract, legitimate interests in operating and protecting Itzi, legal obligations, or your consent where required.
AI processing
Your requests must be processed by external AI infrastructure to produce results.
The prompt, relevant conversation context and any files required for a request may be sent to specialized infrastructure and model operators. Routing can vary by model, feature, availability and safety requirements. We share only the data needed to complete the request and do not sell chat content.
Service providers
A limited set of services helps us operate Itzi.
Hetzner provides production hosting infrastructure. Other providers support email delivery, authentication, security checks, payments, customer support, optional advertising measurement and requested product tools. Buy Me a Coffee handles checkout and subscription management. Reddit advertising measurement is enabled by default and can be disabled in Privacy settings.
Retention
We keep personal data only while it has a clear operational or legal purpose.
Account and workspace data is kept while your account remains active or until you delete the relevant content. Billing and transaction records may be retained for statutory accounting periods. Pseudonymized IP, network, device and browser security signals are kept for up to 90 days. Account-link review cases are removed after 365 days without new evidence. The first-party security device cookie lasts up to 180 days. Support records may be kept for up to three years after the request is closed. Some data may remain longer when required to resolve a dispute, prevent fraud or meet a legal obligation.
Your rights
You can ask to access, correct, export or delete your personal data.
Depending on the processing, you may also request restriction, object to processing, or withdraw consent. You can export conversation data from Itzi and delete individual content in the application. For any other request, contact [email protected]. You may also lodge a complaint with the CNIL or your local data-protection authority.
Security and transfers
We use technical controls and transfer safeguards appropriate to the service.
Itzi uses encrypted connections, access controls, scoped account authorization, hashed credentials and optional two-factor authentication. Some service providers may process data outside the European Economic Area. Where required, those transfers rely on recognized safeguards such as adequacy decisions or standard contractual clauses.
Children and changes
Itzi is for people aged 16 or older, and this policy may evolve with the product.
We do not knowingly provide accounts to children under 16. If you believe a child has provided personal data, contact us so we can review and remove it. Material policy changes will be reflected by a new date and version on this page.
Contact
Use one clear contact point for privacy requests.
Write to [email protected] with a clear subject such as Privacy request. Signed-in users can also contact us from the Support area in Itzi.
Read the companion legal document.
Terms of use