// legal

Privacy, Terms & Security

Last updated: July 2026

The short version: we do not sell your data and we do not add our own logging of your message content. To generate a reply, your prompt is sent to the model's provider (for the Cybren models and most others this is OpenRouter, or the provider directly), and is handled under that provider's data and retention policy. Choose your model accordingly.

Privacy Policy

This policy explains what CybrenAI ("we", "us") collects, how we use it, and the important difference between our own models and third-party models.

1. What we collect

Account data: your email address, display name and a securely hashed password (or your Google account identifier if you sign in with Google).
Usage metadata: which model you used, message counts and token counts, so we can show your usage and enforce plan limits. We do not add our own logging of your message content.
Billing data: if you subscribe, payments are processed by Stripe. We never see or store your full card details; Stripe handles them under its own PCI-compliant policy.
Local storage: a session token and your preferences are kept in your browser to keep you signed in.

2. How your conversations are handled

This is the most important part, so we spell it out clearly:

Model type	Where it runs	Logged / retained?
Cybren models (Cybren-1.0, Uncensored, GenZ)	Served via OpenRouter	Handled under OpenRouter's policy. We do not add our own logging of the content; the provider processes the request under its own terms.
Third-party models (Claude, GPT, Gemini, Grok, DeepSeek, Qwen and others)	The provider, reached via OpenRouter or directly	Handled by that provider. Your prompt leaves our system and is logged and retained according to the third party's own policy, not ours.

When you select a third-party model, you are choosing to send that message to the provider. We pass it through and do not add our own logging of the content, but we cannot control what the downstream provider does. Please review the relevant policies: OpenRouter, Anthropic, OpenAI and Google.

3. How we use data

To run the service, sign you in, and enforce your plan.
To show you your own usage and billing.
To keep the service secure and detect abuse.

We do not sell your personal data, and we do not use your conversations to train our models.

4. Your rights

You can access, correct or delete your account and associated data at any time by contacting us or using your account settings. Deleting your account removes your stored profile, usage metadata and sessions.

5. Cookies and local storage

We use browser local storage for your session token and preferences. We do not use third-party advertising cookies.

Terms of Service

By creating an account or using CybrenAI you agree to these terms.

1. Your account

You are responsible for keeping your credentials safe and for activity under your account. You must be old enough to form a binding contract in your country.

2. Acceptable use

Do not use the service to break the law or to harm others.
Do not attempt to disrupt, overload or reverse-engineer the service.
When using third-party models, you also agree to those providers' usage policies.

The uncensored Cybren model removes content filters. You are solely responsible for how you use its output, and it must still be used within the law.

3. Plans and billing

The Free plan is provided as is. Paid plans (Pro, Ultimate) are billed through Stripe on a recurring basis.
You can upgrade, downgrade or cancel at any time from your account. Cancellation stops future renewals; access continues until the end of the paid period.
Prices and plan features may change; we will give reasonable notice of material changes.

4. Availability and warranty

The service is provided "as is" and "as available", without warranties of any kind. AI output can be inaccurate; verify important information before relying on it.

5. Limitation of liability

To the extent permitted by law, CybrenAI is not liable for indirect, incidental or consequential damages arising from your use of the service or from third-party model output.

6. Changes and termination

We may update these terms or suspend accounts that violate them. Continued use after changes means you accept the updated terms.

Security

We take reasonable, industry-standard measures to protect your account and data.

1. Data in transit

All traffic between your browser and CybrenAI is served over encrypted HTTPS. API keys for third-party providers are held server-side and are never exposed to the browser.

2. Credentials and sessions

Passwords are stored only as salted, irreversible hashes, never in plain text.
Sessions use randomly generated tokens that expire and can be revoked by signing out.
Google sign-in uses Google's verified identity tokens; we never see your Google password.

3. Model isolation

All model requests, including the Cybren models, are forwarded to the chosen provider (OpenRouter or the provider directly) over encrypted connections and are subject to that provider's security and retention practices. We do not add our own logging of message content.

4. Payments

Card data is handled entirely by Stripe, a PCI-DSS Level 1 provider. We never store card numbers.

5. Reporting an issue

If you believe you have found a security vulnerability, please contact us so we can address it responsibly.

This document is a general template provided for transparency and should be reviewed by qualified legal counsel before you rely on it for a live, commercial service.