Privacy Policy

Last updated: November 2026

Controller

Herverus is a product of SLF Guardian, owned and operated by Recep Saki Doğan (sole proprietor), Cevizli Mah. Zühal Cad. A Ticari Blok Apt. No: 46/50, Maltepe / Istanbul, Türkiye. E-mail: [email protected], phone: +44 7418 613848.

What we process

• Account data: e-mail address, password (stored only as a hash), name if you give one, sign-up date, and the Google account identifier if you sign in with Google.
• Conversations: the messages you send and the answers generated, so that your history is available in your account.
• Technical data: IP address, date and time, requested address and browser identification in the server log; the IP address is also used to count free messages and limit abuse.
• Payment data: handled by our payment provider acting as merchant of record. We never see your full card number; we receive only the subscription status and the invoice data needed for bookkeeping.

Why and on what legal basis

We process account data and conversations to provide the service you asked for (Art. 6(1)(b) GDPR), technical data to run the service securely and prevent abuse (Art. 6(1)(f)), and payment data to fulfil our contractual and tax obligations (Art. 6(1)(b) and (c)).

Processors and the AI model

The service runs on a rented server in Frankfurt am Main, Germany (DigitalOcean), behind Cloudflare's network. To generate answers, the text of your conversation is sent to our language model provider (Z.AI). Transactional e-mails (verification, password reset) are sent via Brevo. These providers process data on our instructions; transfers outside the EU are covered by standard contractual clauses.

Retention

Server logs are deleted after 14 days. Conversations are kept until you delete them or close your account. Account data is deleted when you close your account, except records we must keep for tax purposes.

Cookies

We set only technically necessary cookies: a session cookie after you sign in and an identifier used to count free messages. There are no advertising or analytics cookies, no ad networks and no external fonts.

Your rights

You have the right to access, rectification, erasure, restriction, portability and objection. Write to [email protected]. You may also lodge a complaint with a data protection supervisory authority. Turkish users additionally hold the rights granted by KVKK Art. 11.

Children

Herverus is not intended for children under 18 without the consent of a parent or guardian.