Privacy Policy
Version of 5 November 2026 · applies to gurus.chat
This Policy explains what data https://gurus.chat (“the Service”) processes, why, and what you can do about it.
1. Controller
The controller of your personal data is Arthur Da'Ario O'Harra, the owner and operator of gurus.chat. Requests about your data: [email protected].
2. What data
- E-mail address — if you give it to pay or to sign in.
- Conversations — your questions and the answers of the voices. They are kept in your browser. To produce an answer, your question and the recent part of the conversation are sent to the language model (section 5); we do not store them in readable form.
- Sealed conversations — only if you set up the 12-word key in your account: the browser encrypts each conversation with a key made from your words, and we store the encrypted copy and a hash check of the key, so another of your devices can tell whether the words were typed right. The words never reach us; we cannot read these copies or recover the key.
- Question topics — each answer is tagged with a topic from a closed list (anxiety, anger, money…); we keep only the number of questions per voice and topic per week, without the text and without any link to you.
- Feedback — a “Not that” mark under an answer: the voice, the topic and your comment if you wrote one; a conversation you chose to give to a voice — without your e-mail or IP address.
- Payments — the position, the amount, the payment method, the payment identifier of the processor or Telegram, its status and dates; for Telegram Stars also your Telegram user id. Wallet keys and card details never reach us.
- Technical data — IP address, the country derived from it, browser details, request times; an anonymous cookie that counts your free questions and a session cookie that keeps you signed in. Both are strictly necessary. We use no advertising cookies.
- Analytics — only if you press “Accept” in the cookie notice: Google Analytics records pages viewed, the approximate location derived from your IP address, the device and browser, and events such as opening the payment window, through its own cookies. It never sees the text of your conversations or your e-mail. You can change your choice at any time with the “Cookie” link at the bottom of every page.
- Applications from authors (the Mentors page) — name, contact and what you tell us about yourself.
We do not ask for special categories of data (health, beliefs and the like). Please do not share them in a conversation.
3. Why, and on what basis
- to answer you and keep the thread of the conversation, to count free questions and to open paid access — to perform our agreement with you (the Terms);
- to send sign-in codes and messages about your access — to perform the agreement;
- to keep payment records — our legal obligations;
- to protect the Service from abuse and fix errors, and to refine the voices by topics and feedback — our legitimate interest;
- to use a conversation you gave to a voice — your consent, which you give with a separate checkbox;
- to understand how the site is used (Google Analytics) — your consent in the cookie notice.
4. How long
- hourly per-IP counters — 6 hours; free-question counters — up to 12 months;
- sign-in codes — 15 minutes; sessions — 90 days after the last sign-in;
- payment records and the e-mail tied to them — 5 years after the payment, for accounting and refunds;
- feedback and conversations given to a voice — until the voice is refined, but no longer than 3 years;
- sealed conversations — until you erase them in your account or ask us to delete your data;
- analytics data — 2 months for detailed event data in Google Analytics (its aggregated reports keep only totals);
- applications from authors — until the talks end, or deletion on request.
5. Who else processes data
- Cloudflare, Inc. (USA) — hosting, database and network protection: all technical data and stored records.
- DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China) — the language model that writes the answers: the text of your question and the recent part of the conversation, without your e-mail or IP address.
- NOWPayments — cryptocurrency payments: the amount, the order id and what you enter on its payment page.
- Telegram — Stars payments, under Telegram’s own privacy policy.
- Our e-mail delivery provider — your e-mail address and the text of the message.
- Google LLC (USA) — Google Analytics, only with your consent: the data listed under “Analytics” above.
Some of these providers are outside your country, including outside the European Economic Area. Where the law requires it, transfers rely on the providers’ standard contractual clauses or equivalent safeguards. We do not sell your data and do not use it for advertising.
6. Your rights
You may ask us for a copy of your data, to correct or delete it, to restrict or object to its processing, or to receive it in a portable form, and you may withdraw consent at any time. Write to [email protected] — we answer within 30 days. You may also complain to the data-protection authority of your country. Clearing your browser storage deletes the conversations kept there.
7. Children
The Service is for adults (18+). We do not knowingly process data of children; if you believe a child has given us data, write to us and we will delete it.
8. Security
Connections are encrypted (HTTPS), access to the database is limited to the owner, sign-in codes are stored as hashes, and limits per IP address protect the Service from abuse.
9. Changes
We publish every new version of this Policy on this page with its date. Contact: [email protected].