Privacy Policy

At Gashi AI, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

By using Gashi AI, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the platform.

We collect the following types of information when you use Gashi AI:

• Account data — Your email address, name, and password (stored as a secure hash). This is required to create and maintain your account.
• Connected account tokens — Facebook Page access tokens and other OAuth credentials. These are encrypted at rest using industry-standard encryption and are never shared with third parties outside of the connected service.
• Content data — Posts you create, images you generate or upload, RSS/sitemap sources you configure, and WordPress site credentials (stored encrypted).
• Usage logs — Records of actions taken on the platform (e.g., posts published, AI requests made, login timestamps) for debugging, abuse prevention, and service improvement.
• Payment records — Cryptocurrency transaction hashes and plan activation records. We never store card numbers, bank details, or any traditional financial data.

We use the data we collect for the following purposes:

• Delivering and operating the Gashi AI service for your account
• Generating AI content on your behalf using your configured topics, feeds, and preferences
• Posting content to your connected social accounts (Facebook Pages, WordPress) via official APIs
• Sending transactional emails such as account confirmations, plan activation notices, and important updates
• Monitoring platform health, diagnosing errors, and improving features
• Enforcing our Terms of Service and detecting abuse or fraud

We do not use your data for advertising and we do not build advertising profiles.

To deliver the service, Gashi AI integrates with the following third-party providers. By using our platform, you acknowledge that data may be passed to these services as necessary for operation:

• Facebook / Meta Graph API — Used to publish posts, retrieve page data, and manage your connected Facebook Pages. Subject to Meta's Privacy Policy and Platform Policy.
• OpenAI (or equivalent LLM provider) — Used for AI content generation. Prompts and generated text are transmitted to the AI provider. We do not share your personal account details with them.
• Cryptocurrency payment processors (e.g., CryptAPI) — Used to monitor blockchain transactions and confirm payments. We share only the minimum data required (payment amount, currency) to generate a receiving address.

We do not sell, rent, or trade your personal data to any third parties for commercial purposes.

We take the security of your data seriously. The following measures are in place to protect your information:

• All sensitive tokens (Facebook access tokens, WordPress credentials) are encrypted at rest using AES-256 or equivalent.
• All communication between your browser and our servers is transmitted over HTTPS (TLS).
• Passwords are hashed using a strong one-way hashing algorithm and are never stored in plain text.
• Access to production systems is restricted to authorized personnel only.
• We follow industry best practices for web application security, including protection against common attacks (SQL injection, XSS, CSRF).

While we take every reasonable precaution, no system is 100% secure. We cannot guarantee absolute security, and we encourage you to use a strong, unique password for your account.

We retain your data for the following periods:

• Account data — Retained until you delete your account.
• Content and post data — Retained until you delete it or close your account.
• Usage logs — Retained for 90 days for debugging and security purposes, then automatically purged.
• Payment records — Transaction hashes and plan history may be retained for longer periods to comply with legal and financial record-keeping obligations.

You may request deletion of your account and all associated personal data at any time by contacting us at support@gashi.live.

Depending on your location, you may have rights regarding your personal data, including the right to:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request that we correct inaccurate or incomplete information.
• Deletion — Request that we delete your personal data (subject to legal retention obligations).
• Portability — Request a machine-readable export of your data.
• Objection — Object to certain types of data processing.

You can exercise these rights at any time via your account settings or by emailing support@gashi.live.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features we offer. When we make material changes, we will notify registered users via email at least 7 days before the changes take effect.

The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy, how we handle your data, or want to exercise your rights, please contact us at:

Email: support@gashi.live

We aim to respond to all privacy-related inquiries within 5 business days.