Legal · Privacy
Privacy, without the mystery.
Last updated: 20 August 2026
This policy explains how Aifluence processes personal data on the website, in your account and in the Windows app.
1. Controller and contact
The controller is Jannes Alexander Rohde, Hilden, Germany. The complete service address is available in the Legal Notice. Privacy requests can be sent to [email protected].
2. Website and account
When you visit the website, technical connection data such as IP address, request time, URL, browser and device information may be processed for delivery, security and error diagnosis. Cloudflare provides hosting, security and database services. Aifluence does not currently use advertising or cross-site tracking cookies.
To understand whether the product works, Aifluence records privacy-friendly aggregate funnel counts such as installer download starts, verified registrations and completed purchases. Download counters are stored by day and a short, allow-listed button source. They do not contain email addresses, user IDs, full referrer URLs, IP addresses or user-agent strings. A download start does not prove that installation completed.
When you create an account, we process your email address, password hash and salt, verification status, session identifiers, plan and subscription status. Passwords are not stored in readable form. Necessary authentication storage keeps you signed in.
3. Windows app and local data
Workflows, imported files, project data and connected-service credentials are generally stored on your device. Sensitive local credentials are protected using Windows-provided encryption. Aifluence receives local content only when a feature requires a cloud request, billing check or connected service.
4. AI, images, voice and media
When you run an AI feature, the prompt, relevant workflow context and files needed for that request are transmitted through the Aifluence API to OpenRouter and the model provider selected by Aifluence. Managed OpenRouter requests are configured to deny provider data collection where supported. OpenRouter and model providers may still process operational metadata and may have provider-specific retention rules.
Text submitted for speech generation and an optional voice reference are transmitted to Fish Audio. Local rendering and FFmpeg-based processing remain on your computer unless an external feature requires an upload. Do not submit personal, confidential or copyrighted material unless you have the necessary rights and lawful basis.
5. Usage, credits and payments
We process request counts, credit debits, provider costs, model identifiers, timestamps, transaction identifiers and limited error information to operate credits, prevent abuse and resolve billing issues. Aifluence does not intentionally store AI prompt or output content in its usage ledger.
Stripe processes checkout and payment details. Aifluence receives identifiers and status information such as customer, subscription, invoice, price, payment and refund status, but not full card numbers.
6. Email
Resend processes email addresses and delivery metadata for account verification, password reset and essential service emails. Support messages sent to [email protected] are routed to the operator's support inbox.
7. Google and YouTube
Google sign-in requests basic identity scopes (openid, email and profile). If you connect YouTube, Aifluence requests youtube.readonly and youtube.upload so the app can display connection information and upload videos according to your workflow settings.
YouTube tokens are stored locally in encrypted form. During a token refresh, the refresh token passes through the Aifluence API to Google for the requested exchange and is not intentionally persisted in the cloud database. Aifluence never receives your Google password. You can revoke access in your Google Account at any time.
8. Service providers and transfers
- Cloudflare — website, API protection and database.
- Stripe — checkout, subscriptions and payments.
- Resend — transactional email.
- OpenRouter and its model providers — AI requests.
- Fish Audio — speech generation.
- Google/YouTube — optional sign-in and publishing.
- GitHub — application release infrastructure.
Some providers process data outside the EEA. Depending on the provider and destination, transfers rely on an adequacy decision, the EU–US Data Privacy Framework, Standard Contractual Clauses or another mechanism permitted by Chapter V GDPR.
9. Legal bases
Processing is based on contract performance and pre-contractual steps (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c)), legitimate interests in secure and reliable operation (Art. 6(1)(f)), or consent where requested (Art. 6(1)(a)). You may withdraw consent prospectively at any time.
10. Retention
- Access sessions expire according to their configured lifetime; refresh sessions normally expire after 30 days.
- Temporary authentication and rate-limit records are regularly removed, generally after expiry or within a few days.
- Detailed usage events are retained for up to 400 days for billing, support and abuse investigation.
- Aggregate website and conversion counts may be retained for up to 400 days. They are not used to build individual visitor profiles.
- Completed Stripe webhook records are retained for up to 180 days.
- Accounting and tax records may be retained for statutory periods.
11. Your choices and rights
You can request access, correction, deletion, restriction, portability or object to processing where applicable. The account area provides export and deletion functions. An active subscription must be cancelled before account deletion so future charges are stopped correctly. You may lodge a complaint with a supervisory authority, including the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.
12. Security and changes
We use access controls, encrypted transport, hashed passwords, encrypted secrets and minimised cloud storage. No system is completely secure. We may update this policy when the product, providers or law changes; the current version and date will remain available here.