Privacy Policy
Effective date: May 24, 2026
1. Who We Are
ChatJuan (“we”, “us”, or “our”) is an AI chat platform operated by Irvin Abarca, based in the Philippines. We provide access to large language models (LLMs) — including Claude, ChatGPT, Gemini, DeepSeek, and GLM — through a credit-based, pay-as-you-go system.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use chatjuan.com. By using our service you agree to the practices described here.
2. Information We Collect
Account information
When you register we collect your email address and, if you sign in with Google, your name and profile picture provided by Google OAuth.
Conversation data
Messages you send and responses generated by AI models are stored in your account so you can access your chat history. Messages are tied to your user ID and are not accessible by other users.
Payment data
Credit purchases are processed by PayMongo. We store your credit balance and a transaction log (amount, timestamp, description). We do not store raw card numbers, GCash PINs, or full payment credentials — these are handled entirely by PayMongo.
Usage data
We record the number of messages sent, models used, and credits consumed per session for billing accuracy and abuse prevention.
Technical data
Standard server logs may include IP addresses, browser type, and timestamps. These are used for security monitoring and are not sold or shared.
3. How We Use Your Information
- To provide and operate the ChatJuan service.
- To authenticate your account and keep it secure.
- To process credit purchases and maintain accurate billing records.
- To display your conversation history within your account.
- To send transactional emails (account verification, password reset). We do not send marketing emails without your consent.
- To detect and prevent fraudulent or abusive activity.
- To comply with applicable Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173).
4. Third-Party Services
To deliver our service we share certain data with these third parties:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database & authentication hosting | All user & conversation data |
| Anthropic | Claude AI model inference | Message content only |
| OpenAI | GPT model inference | Message content only |
| Gemini model inference | Message content only | |
| DeepSeek AI | DeepSeek model inference | Message content only |
| ZhipuAI | GLM model inference | Message content only |
| PayMongo | Payment processing | Email, purchase amount |
| GCash / Mynt | GCash checkout via PayMongo | Handled by PayMongo |
Message content sent to AI providers is used solely for generating responses. It is governed by each provider’s own API data-use policy. We recommend reviewing their privacy policies if you have concerns about sensitive data.
5. Data Retention
We retain your account data and conversation history for as long as your account is active. Credit transaction records are kept for a minimum of 3 years for financial compliance. If you delete your account, all associated personal data and conversation history will be permanently deleted within 30 days, except where retention is required by law.
6. Your Rights Under Philippine Law
Under the Data Privacy Act of 2012 (RA 10173) you have the right to:
- Access — request a copy of personal data we hold about you.
- Correction — have inaccurate personal data corrected.
- Deletion / Erasure — request deletion of your data, subject to legal retention requirements.
- Portability — receive your data in a structured, commonly used format.
- Object — object to processing of your data in certain circumstances.
To exercise any of these rights, email us at irvinabarca.nv@gmail.com. We will respond within 15 business days.
7. Cookies & Local Storage
We use browser cookies and local storage solely for authentication session management and your UI preferences (e.g., dark/light mode). We do not use third-party advertising cookies or tracking pixels.
8. Security
All data is transmitted over HTTPS. Database access is restricted to server-side API routes using a service-role key that is never exposed to the browser. Passwords are hashed by Supabase Auth — we never store plaintext passwords. Despite these measures, no system is 100% secure; please use a strong, unique password for your account.
9. Children’s Privacy
ChatJuan is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” at the top. For significant changes we will notify you via email or an in-app notice at least 7 days before the change takes effect.
11. Contact
Questions or concerns about this Privacy Policy? Reach us at: