Privacy at Aifluence.
Last updated: 19 August 2026
This notice explains the main data processing in the Aifluence website, account service and Windows app. Contact: hallo@aifluence.eu.
Data we process
Account details include your email address, encrypted password credentials, session information, plan and billing status. We record AI usage and provider cost so credits can be calculated. Workflows and social-network sessions are stored locally on your computer unless you explicitly send content to a connected service.
AI and media processing
Prompts and attached reference material required for a request are sent through Aifluence to OpenRouter and the selected model provider. Voice text and an optional Fish Audio voice reference are sent to Fish Audio. Do not upload content you are not allowed to process. Provider retention and training rules can differ; Aifluence will configure restrictive provider policies where available.
Service providers
- Cloudflare: hosting, API protection and database.
- Stripe: checkout, subscriptions, invoices and payment status.
- Resend: verification and password-reset emails.
- OpenRouter and its selected model providers: AI text and image requests.
- Fish Audio: text-to-speech generation.
- Google/YouTube: optional sign-in and publishing when you connect a channel.
- GitHub: private storage of signed application releases, delivered through Aifluence.
Retention and controls
Expired sessions and temporary authentication records are deleted automatically. Detailed AI usage events are retained for up to 400 days for billing and abuse investigation; completed Stripe delivery records for up to 180 days. You can export your account data and request deletion from the account page. Legal accounting records may have to be kept for longer.
Your rights
Depending on where you live, you may request access, correction, deletion, restriction, portability or object to processing. You may also complain to your competent data-protection authority. Send requests to the contact address above.
Before the public paid launch, the controller’s complete postal address, the final international-transfer basis and verified provider retention settings must be inserted after legal review.