AIFusion — https://aifusion.space
Last Updated: 4 September 2026
AIFusion ("we," "us," or "our") is committed to protecting the personal information you provide when you use our website and AI services.
This policy explains what information we collect, why, who receives it, where it is stored, how long we keep it, and what rights you have. Your use of AIFusion is also governed by our Terms of Service and Acceptable Use Policy.
By using https://aifusion.space, you acknowledge that you have read this Privacy Policy.
AIFusion is an independent software platform providing access to AI features through a unified interface. We access third-party AI models via direct API integrations under our own paid commercial agreements.
AIFusion is not affiliated with or endorsed by OpenAI, Anthropic, Google, xAI, ByteDance, Kuaishou, Paddle, or bKash. All trademarks belong to their respective owners.
| Field | Details |
|---|---|
| Legal name | AIFusion |
| Entity type | Registered partnership firm |
| Country | People's Republic of Bangladesh |
| Registered address | Mirpur DOHS, Avenue-12, Ground Floor, Dhaka, Bangladesh, 1216 |
| Website | https://aifusion.space |
| Contact — support, privacy, and abuse | aifusionsite@gmail.com |
Our role. We are the data controller for your account, billing, and website usage data. We act as a processor for the content you submit to AI features, processing it to deliver your requested output. Paddle and bKash act as independent controllers for transaction data they collect.
A Data Processing Agreement is available to business customers on request.
Email address; account identifier; authentication credentials (managed by Firebase Authentication — passwords are hashed and not visible to us); any name or profile details you provide; your confirmation that you are 18 or older; account creation and last-activity dates; credit balance, purchase history, and usage records; preferences and settings.
We do not collect your date of birth. Age eligibility is confirmed by checkbox attestation.
Text prompts and conversations; images and photographs; uploaded documents and files; reference material submitted to image or video features. We store the resulting AI-generated outputs so you can access your history.
Please do not submit: government ID numbers; health, biometric, genetic, or financial account data; passwords or card numbers; confidential information belonging to others; or images of a real, identifiable person without their consent (see Section 5).
AIFusion sells one-off credit packs and issues limited free credits to new accounts. Free credits require no payment information.
Paddle (international customers). Purchases outside Bangladesh are processed by Paddle.com Market Limited as Merchant of Record. Paddle independently collects your name, email, billing address, country, payment details, transaction records, and information required for tax, fraud prevention, and compliance. AIFusion never receives or stores your card number or CVV — only the transaction confirmation, amount, and reference. See https://www.paddle.com/legal/privacy
bKash (Bangladesh only). For customers in Bangladesh we offer bKash Limited, displayed only to Bangladeshi IP addresses and unavailable internationally. bKash processes your registered mobile number, transaction reference and amount, and information required under Bangladeshi financial and anti-money-laundering regulations. AIFusion never receives your bKash PIN or credentials.
IP address and approximate location; browser, device, and operating system; features accessed and access times; session and authentication events; error logs and performance metrics; API and credit usage; security events including failed logins and rate-limit triggers.
If you email us, we retain your message and address to respond and maintain support and abuse records.
Service delivery — creating and authenticating accounts; confirming age eligibility; delivering AI features; storing and retrieving your history; maintaining credit balances; processing purchases; providing support; sending service notices.
Safety and security — preventing fraud and abuse; operating the safety screening described in Section 4.3; investigating reports made under Section 6; investigating security incidents; enforcing rate limits; verifying transactions.
Service improvement — analysing aggregated usage to identify errors and improve reliability. Where possible we use de-identified data containing no prompt or output content.
Legal compliance — meeting obligations under Bangladeshi and other applicable law; maintaining tax records; responding to lawful requests; defending legal claims.
Marketing — only where you have opted in. Unsubscribe anytime. Operational messages (security, billing, policy changes) will still be sent.
| Purpose | Legal Basis |
|---|---|
| Account creation and operation | Contract — Art. 6(1)(b) |
| Delivering AI features you request | Contract — Art. 6(1)(b) |
| Storing your conversation history | Contract — Art. 6(1)(b) |
| Processing credit purchases | Contract — Art. 6(1)(b) |
| 18+ age confirmation | Legitimate interests — Art. 6(1)(f) |
| Content safety and likeness protection | Legitimate interests — Art. 6(1)(f) |
| Fraud prevention and security | Legitimate interests — Art. 6(1)(f) |
| Service improvement and diagnostics | Legitimate interests — Art. 6(1)(f) |
| Firebase Analytics / non-essential cookies | Consent — Art. 6(1)(a) |
| Marketing communications | Consent — Art. 6(1)(a) |
| Tax and accounting records | Legal obligation — Art. 6(1)(c) |
| Responding to lawful authority requests | Legal obligation — Art. 6(1)(c) |
Where we rely on legitimate interests, we have assessed that they are not overridden by your rights. You may object at any time. Where we rely on consent, you may withdraw it at any time without affecting prior processing.
We access third-party models through direct API integrations under our own paid commercial agreements. We do not resell raw API access. Content you submit is transmitted to the provider powering that feature.
| Provider | Legal Entity | Feature | Location |
|---|---|---|---|
| OpenAI | OpenAI, L.L.C. | Text, image | United States |
| Anthropic | Anthropic PBC | Text | United States |
| Google LLC | Text, image, video | United States | |
| xAI | xAI Corp. | Image | United States |
| Kuaishou | Beijing Kuaishou Technology Co., Ltd. | Video | China |
| ByteDance | ByteDance Ltd. / BytePlus | Video | China / Singapore |
Geographic restriction. Content sent to the Kuaishou and ByteDance video features is processed in the People's Republic of China, which is not covered by an EU or UK adequacy decision. These features are geo-blocked and unavailable to users in the EEA, United Kingdom, and Switzerland. Where a feature is available to you, the provider is identified in the interface before you submit content.
The current model list is published on our website. Providers may change; material changes will be reflected here.
AIFusion does not use your prompts, uploads, conversations, or outputs to train, fine-tune, or improve any AI model — ours or a third party's.
Under our commercial API agreements, providers process content solely to generate a response and do not use API content for training by default. Some retain content briefly — typically up to 30 days — for abuse monitoring before deletion, as set by each provider.
We may use aggregated, de-identified statistics (usage counts, error rates, latency) that do not identify you or contain prompt content.
We do not routinely read your conversations or view your generated content, and we never review it for training or commercial purposes. Because your content is stored on infrastructure we administer, a limited number of authorised personnel have the technical ability to access it — but do so only to investigate a suspected policy violation or a report under Section 6, respond to a support request where you have asked us to examine specific content, investigate a security incident or fault, or comply with a lawful authority request. Access is minimised, logged, role-restricted, and subject to confidentiality obligations.
We operate our own safety controls alongside each provider's filters. These may automatically screen prompts, uploads, and outputs to block unlawful content or content depicting real individuals without consent. Screening is automated and may block or delay a request; flagged content and metadata may be retained for review as described in Section 9. Full rules are in our Acceptable Use Policy.
When you upload a photograph or reference material showing another person, you are submitting their personal information, and in some jurisdictions their biometric data. You are responsible for having a lawful basis to do so.
You must not upload or generate content depicting a real, identifiable person unless you are that person or have their express, informed consent. Where you submit such material, you represent that you have obtained that consent and agree to evidence it on request.
Detailed restrictions and the consequences of breach are set out in our Acceptable Use Policy and Terms of Service.
If content on AIFusion depicts you or another person without consent, or otherwise infringes your rights, report it to aifusionsite@gmail.com.
Please include: a description of the content and any URL or generation ID; your relationship to it; why it is unlawful or violates our policies; and contact details.
How we respond: we acknowledge reports within 3 business days. Reports involving non-consensual intimate imagery, sexual content involving minors, or an imminent safety risk are treated as urgent. Substantiated urgent reports are actioned within 72 hours; all others within 7 business days. Removed content and associated logs are retained as set out in Section 9 where required for legal or safety purposes.
You do not need to provide identity documents to report. Where verification is genuinely necessary to confirm you are the person depicted, any documents you provide are used only for that purpose and deleted when the report closes.
Enforcement outcomes and appeals are governed by our Acceptable Use Policy.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
| Provider | Entity | Purpose | Data Location |
|---|---|---|---|
| Vercel | Vercel Inc. | Hosting, edge delivery, API compute | US (compute routed via India region) |
| Firebase Firestore & Cloud Storage | Google LLC | Database and file storage | United States |
| Firebase Authentication | Google LLC | Account authentication | United States |
| Firebase Analytics | Google LLC | Product analytics (consent-based) | United States |
| Google email services | Google LLC | Support correspondence | United States |
| AI providers | See Section 4 | AI generation | US / China / Singapore |
Providers process information only as needed to serve us, under confidentiality and security obligations.
Paddle and its payment, tax, and fraud partners process transaction data as independent controllers. bKash and any Bangladeshi financial institutions or regulators involved process transactions under applicable law. Both supply us the information needed to fulfil your purchase and prevent fraud.
We may disclose information where necessary to comply with law or lawful requests, or to protect the rights, security, or safety of AIFusion, our users, or the public.
In a merger, acquisition, financing, or sale of assets, personal information may transfer as part of the transaction, subject to applicable law. We will notify you of any transfer that materially affects how your information is handled.
Storage. All account data, conversation history, uploaded files, and generated outputs are stored in the United States on Google Firebase infrastructure.
Transit processing. Our application runs on Vercel. For latency, some API request handling executes in an India region. This is transient in-memory processing — no user data is stored at rest in India.
Operations. AIFusion is operated from Bangladesh; authorised personnel access production systems remotely under the controls in Section 4.2.
AI processing. Content is transmitted to the providers and locations in Section 4. Chinese providers are geo-blocked for EEA, UK, and Swiss users.
Safeguards. Neither Bangladesh nor India is covered by an EU or UK adequacy decision. For personal information relating to individuals in the EEA, UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), with supplementary measures including encryption in transit and at rest, access logging, and role-based access controls. A copy is available on request.
| Category | Period |
|---|---|
| Account information | Life of account + 30 days after deletion |
| Conversations, prompts, outputs | Until you delete them, or account deletion under 9.1 |
| Uploaded files and images | Until you delete them, or account deletion under 9.1 |
| Credit balance and usage records | Life of account + 30 days |
| Payment and transaction records | 7 years (tax and accounting) |
| Technical, access, and error logs | 12 months |
| Security, fraud, and abuse records | 24 months, or longer where legally required |
| Content removed under Section 6 | 24 months, or longer where legally required |
| Support and abuse correspondence | 24 months from closure |
| Marketing opt-out records | Retained on a suppression list |
To avoid holding data longer than necessary, inactive accounts are deleted:
"Inactivity" means no sign-in and no use of any AI feature. Where feasible we email a reminder before deletion. Deletion removes conversations, uploads, outputs, preferences, and any remaining credits, and is not reversible.
Backups are overwritten on a rolling 30-day cycle; deleted data may persist in backups until that cycle completes. Where retention is legally required, we restrict processing to that purpose only.
We use technical and organisational measures including encryption in transit (TLS) and at rest, hashed credentials, role-based access controls, authentication and session controls, access logging, monitoring, and restricted production access.
No internet service can guarantee absolute security.
If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to you, we will notify you directly without undue delay.
Essential — authentication, session management, security, and load balancing. These cannot be disabled.
Functional — remembering your preferences and settings.
Analytics — Firebase Analytics, used to understand feature usage and diagnose problems.
Analytics and functional cookies are non-essential. In the EEA, UK, and Switzerland they are loaded only after you give consent through our cookie banner, and you may withdraw consent at any time via the banner or your browser settings. Disabling essential cookies will prevent the service from functioning.
Subject to applicable law and legal exceptions, you may: access the personal information we hold; correct inaccuracies; request deletion; restrict or object to processing; obtain portability; withdraw consent; and opt out of marketing.
Contact aifusionsite@gmail.com. We may verify your identity before acting. We respond within 30 days (extendable where permitted).
You have the right to lodge a complaint with your local supervisory authority. EU authorities: https://edpb.europa.eu/about-edpb/board/members_en · UK ICO: https://ico.org.uk/make-a-complaint/
Residents of California, Colorado, Connecticut, Virginia, Texas, Utah, and other states with comprehensive privacy laws have the right to know, access, delete, correct, and port their information, and to opt out of targeted advertising, sale, and profiling with legal effects.
We do not sell or share personal information as defined under the CCPA/CPRA, and have not in the preceding twelve months. We do not sell or share the information of minors. We do not use or disclose sensitive personal information beyond permitted purposes. We will not discriminate against you for exercising any right. You may use an authorised agent where we can verify their authority. We acknowledge requests within 10 business days and respond within 45 days, extendable by a further 45.
AI outputs are generated automatically at your request; they are suggestions and are not decisions we make about you. We use automated systems to detect fraud, abuse, and policy violations, which may result in rate limiting or account suspension. Where such a decision produces legal or similarly significant effects, you may request human review, express your view, and contest the decision by contacting us.
AIFusion is for individuals 18 years or older. By creating an account you confirm you are at least 18. We do not knowingly collect information from anyone under 18, and will delete such information and terminate the account if we become aware of it. If you believe a minor has provided us information, contact aifusionsite@gmail.com.
You may delete your account at any time through your account settings, or by emailing aifusionsite@gmail.com. We complete deletion requests within 30 days.
Deletion permanently removes your conversations, uploaded files, generated outputs, preferences, and any remaining credits. Some information is retained where required for legal, tax, security, fraud-prevention, or dispute-resolution purposes, as set out in Section 9.
AIFusion links to and integrates with third-party services, including the AI providers in Section 4 and our payment providers. We are not responsible for their privacy practices. Review their policies before providing them with information.
We may update this policy to reflect changes to our service, data practices, or applicable law. For material changes — such as new categories of data, new purposes, or new recipients — we will notify registered users by email and update the "Last Updated" date at least 14 days before the change takes effect, where practicable. Continued use after that date constitutes acknowledgement.
This Privacy Policy is governed by the laws of the People's Republic of Bangladesh.
Nothing in this section limits any right you have under the mandatory data protection or consumer protection laws of your country of residence. If you are in the EEA, UK, Switzerland, or a US state with comprehensive privacy legislation, you retain all rights under those laws, including the right to complain to your supervisory authority and to bring proceedings in your place of residence where applicable law permits.
AIFusion — Registered partnership firm, Bangladesh
Registered address: Mirpur DOHS, Avenue-12, Ground Floor, Dhaka, Bangladesh, 1216
Email: aifusionsite@gmail.com
Website: https://aifusion.space