Privacy Policy

Last updated: December 6, 2025

Ninjafy Tools is a trade name of SkinDeep.AI Inc.
Products include: Ninja Chatter, VDO.Ninja, and related services
Corporation Number: 11616668 | Ontario, Canada

This Privacy Policy explains how SkinDeep.AI Inc. ("Company", "we", "us", or "our") collects, uses, and protects your information when you use Ninjafy Tools products and services, including Ninja Chatter and VDO.Ninja ("Service").

      Plain English: We collect minimal data needed to run our services. We don't sell your data. You can request deletion anytime.
    

1. Information We Collect

1.1 Information You Provide

Data Type	When Collected	Purpose
Username / Display Name	When you join a chat	Display in chat messages
Avatar URL	Via OAuth (Discord/Patreon)	Display in chat messages
Chat Messages	When you send messages	Deliver to chat room participants
OAuth Profile	When you login via Discord/Patreon	Authentication, username, avatar
Payment Information	When you subscribe (via Stripe)	Process payments (handled by Stripe)

1.2 Information Collected Automatically

Data Type	Purpose	Retention
IP Address	Rate limiting, abuse prevention	Not stored permanently
Browser/Device Info	Technical compatibility	Not stored
Connection Timestamps	Service operation	Temporary (in-memory)

1.3 Cookies and Local Storage

We use browser local storage to:

Store authentication tokens (to keep you logged in)
Remember your preferences

We do not use third-party tracking cookies or analytics services that track you across websites.

2. How We Use Your Information

We use your information to:

Provide the Service: Deliver chat messages, display usernames and avatars
Authenticate: Verify your identity via OAuth providers
Process Payments: Handle subscriptions via Stripe
Prevent Abuse: Rate limiting, spam prevention, moderation
Improve the Service: Fix bugs, improve performance
Communicate: Respond to your inquiries, send service updates

3. Message Retention

      Chat messages are transient. Messages are broadcast in real-time and are NOT permanently stored on our servers. Once delivered, messages exist only in the memory of connected clients.
    

Exceptions:

Room owners may enable message caching (temporary, configurable duration)
Moderation logs (ban/mute actions) are retained for room administration

4. Information Sharing

We do not sell your personal information. We may share information with:

4.1 Service Providers

Provider	Purpose	Data Shared
Discord	OAuth authentication	Username, avatar, user ID
Patreon	OAuth authentication	Username, avatar, membership status
Stripe	Payment processing	Payment details (handled directly by Stripe)
Server Infrastructure	Hosting	Technical data necessary for operation

4.2 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights, safety, or property.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement reasonable security measures including:

TLS/HTTPS encryption for all connections
JWT-based authentication tokens
Rate limiting to prevent abuse
Access controls on server infrastructure

However, no system is 100% secure. You use the Service at your own risk.

6. Your Rights

6.1 All Users

Access: Request a copy of your data
Deletion: Request deletion of your data
Correction: Request correction of inaccurate data
Objection: Object to certain processing activities

6.2 European Users (GDPR)

If you are in the European Economic Area, you have additional rights under GDPR:

Data Portability: Receive your data in a structured, machine-readable format
Restrict Processing: Request we limit how we use your data
Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
Lodge a Complaint: File a complaint with your local data protection authority

Legal Basis for Processing (GDPR):

Contract performance (providing the Service you requested)
Legitimate interests (security, abuse prevention, service improvement)
Consent (where specifically obtained)

6.3 California Users (CCPA)

California residents have the right to:

Know what personal information is collected
Request deletion of personal information
Opt-out of the sale of personal information (we do not sell personal information)
Non-discrimination for exercising these rights

7. International Data Transfers

Our servers are located in North America. If you access the Service from outside this region, your data will be transferred to and processed in North America. By using the Service, you consent to this transfer.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

9. Data Retention

Chat Messages: Not permanently stored (real-time only)
Account Data: Retained while your account is active
Room Configuration: Retained while the room exists
Moderation Logs: Retained for room administration purposes
Payment Records: Retained as required by law (typically 7 years)

You may request deletion of your data at any time by contacting us.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related inquiries, data access requests, or deletion requests, please contact us at:

SkinDeep.AI Inc.
Email: contact@skindeep.ai
Address: 1560 Atrium Court, Mississauga, ON L5H 2B8, Canada

We will respond to requests within 30 days.

← Back to Dashboard | Terms of Service