Privacy Policy
In short
- We collect what we need to run your account, bill your usage and keep the Service secure.
- Your prompts and outputs pass through our servers to the model provider you choose. We do not keep the text of prompts or completions in our usage logs, and we do not use them to train AI models.
- We never sell your personal data.
- You can ask to see, correct or delete your data at any time: [email protected].
1. Who we are
This Privacy Policy explains how Afri Nexus AI (“Afri Nexus”, “we”, “us”), based in Antananarivo, Madagascar, collects, uses and shares personal data when you use afri-nexus.io, api.afri-nexus.io and the related console, API and tools (the “Service”). We are the controller of the personal data described here. Contact: [email protected].
2. Data we collect
| Category | What it includes |
|---|---|
| Account | Username, display name, email address, password (stored only as a salted hash), passkey public keys if you register one, account settings and group. |
| Email verification | The one-time code we send to your email address when you register or reset your password. It is valid for a few minutes. |
| Billing | Balance, top-ups and their amounts, redeem codes used, payment references. If you pay through a payment provider (card, mobile money, bank), that provider handles your payment details; we receive the confirmation, the amount and a reference. |
| API keys and usage | Your API keys and their settings, and for each request: time, model, key, group, quantities (tokens, images, seconds), price, duration and status or error. If you turn on IP logging in your settings, the client IP address of each request. |
| Content | Prompts, files and media you send and the outputs you receive. They pass through our servers to the model provider. We do not keep the text of prompts or completions in our usage logs. Some features store Content so they can work: generated images and videos are kept temporarily so you can download them; Video Studio and Image Studio keep the projects, prompts and media you save in them (on our servers or in your browser’s storage); workflows and credentials you create in the workflow tool are kept in your workspace until you delete them. |
| Technical | IP address, browser type, requested pages and timestamps in our web server logs; security signals from our content delivery network. |
| Messages | What you write to us by email or on Facebook. |
3. How we use it
| Purpose | Legal basis |
|---|---|
| Provide the Service: create your account, route requests to models, keep your balance and keys working. | Performance of our contract with you. |
| Verify your email address, secure accounts, prevent fraud and abuse, enforce the Terms of Service. | Our legitimate interest in a safe Service; legal obligations. |
| Billing, accounting and tax. | Contract; legal obligations. |
| Service messages: verification codes, password resets, security alerts, important changes. | Contract; legitimate interest. |
| Support and answering your requests. | Contract; legitimate interest. |
| Improving the Service with aggregated usage statistics. | Legitimate interest. |
| News and offers by email, only if you ask for them. You can unsubscribe at any time. | Consent. |
We do not sell personal data, and we do not use your Content to train AI models.
5. International transfers
We operate from Madagascar, our servers are in the European Union and our providers may process data in other countries, including the United States and China. These countries may not offer the same level of protection as yours. We only share what each provider needs, choose providers that commit to protecting the data, and rely on contractual safeguards where available.
6. How long we keep it
- Account data: while your account is open. After closure it is deleted or anonymised within 30 days, except what we must keep by law.
- Usage and billing records: while your account is open and up to 5 years after, for accounting, tax and dispute purposes.
- Verification codes: a few minutes.
- Web server logs: a limited period, normally a few months, then deleted automatically.
- Generated images and videos: download links expire, usually within hours or days. Studio projects and workflows are kept until you delete them or close your account.
- Support messages: as long as needed to handle your request, and up to 2 years.
7. Your rights
You can ask to access, correct or delete your personal data, to restrict or object to its use, to receive a copy in a portable format and to withdraw any consent you gave. You can change your profile and delete your API keys yourself in the console.
To exercise your rights, write to [email protected] from the email address of your account. We may ask you to confirm your identity and will answer within 30 days.
You can also complain to a data protection authority: in Madagascar, the Commission Malagasy sur l’Informatique et des Libertés (CMIL) under Law No. 2014-038 on the protection of personal data; in the European Union, the authority of your country.
9. Security
Traffic is encrypted with HTTPS, passwords are stored as salted hashes, access to systems is limited to authorised people, API keys can be revoked at any time and we keep backups. No system is perfectly secure; if a breach is likely to affect your rights, we will tell you without undue delay.
10. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a minor has created an account, contact [email protected] and we will delete it.
11. If you build on our API
If you build a product on the Service and send your own users’ personal data to it, you are responsible for that data and we process it on your behalf. You must inform your users, have a lawful basis for the processing and avoid sending more personal data than you need.
12. Changes and contact
We may update this policy. We will publish the new version on this page with a new date and tell you by email or in the console about important changes. Questions or requests: [email protected].