Privacy Policy
How CobraAI collects, uses, stores, shares, and protects information.
1. Scope
This Privacy Policy explains how CobraAI handles information when you use the CobraAI website, applications, accounts, AI features, file features, and paid services.
CobraAI uses third-party infrastructure, billing, and AI providers to operate the service. Those providers may process information as described below and under their own applicable privacy terms.
2. Information CobraAI processes
- Account information, such as authentication identifiers, email address, profile information, role, and subscription plan.
- User Content, such as prompts, chat messages, files, images, PDFs, and text documents that you submit.
- AI-generated content stored as part of your conversations, including generated images.
- Usage information, such as request counts, model profile, request type, token usage, timestamps, feature use, and settled or estimated AI-provider cost.
- Billing information made available to CobraAI, such as Dodo Payments customer and subscription identifiers, invoice and transaction references, payment or subscription status, usage balances, and billing-ledger records.
- Technical and security information that may be generated by CobraAI or its infrastructure providers, such as logs, errors, authentication events, device or network information, and security signals.
- Communications you send to CobraAI for support, legal, privacy, security, or billing purposes.
3. Payments and payment information
Paid CobraAI transactions are completed through Dodo Payments, which acts as Merchant of Record. CobraAI supplies and operates the CobraAI service.
CobraAI does not need to store your full payment-card number in its application database. Payment methods and transaction information required to complete a purchase are handled by Dodo Payments and its payment partners.
Dodo Payments may process information such as your name, contact details, location, billing information, payment information, transaction information, tax information, fraud-prevention signals, and other data required to complete and support a transaction.
4. How information is used
- Provide and maintain CobraAI.
- Authenticate users and protect accounts.
- Store chats, user-uploaded files, and generated image outputs.
- Route AI requests to the appropriate model provider.
- Generate images when a user requests image generation.
- Enforce account, model, upload, usage, and billing entitlements.
- Measure or estimate provider usage and deduct applicable AI usage balances.
- Provision subscriptions and extra-usage purchases after verified billing events.
- Detect abuse, fraud, security threats, and policy violations.
- Troubleshoot and improve service reliability and user experience.
- Comply with applicable law and enforce CobraAI policies.
5. AI provider routing
CobraAI is an AI orchestration service and does not perform every AI request entirely on CobraAI-owned infrastructure.
Relevant portions of your prompt, conversation context, system instructions, and attached content may be sent to a third-party AI provider selected for the request.
- DeepSeek is used for CobraAI text and reasoning requests, including relevant text-file context.
- Cloudflare Workers AI may process Fast-profile image and document requests.
- xAI may process Pro-profile image and document requests.
- OpenAI processes image-generation prompts and generates requested images for CobraAI's image-generation feature.
- Provider routing and specific models may change as CobraAI adds, removes, or replaces models.
6. DeepSeek processing
When CobraAI routes a request to DeepSeek, relevant request content is transmitted to DeepSeek's API for processing.
DeepSeek's privacy disclosures should be reviewed before submitting personal or sensitive information to requests that may be routed to DeepSeek.
DeepSeek's policies and data practices are controlled by DeepSeek and may change independently of CobraAI.
7. Cloudflare Workers AI, xAI, and OpenAI processing
Cloudflare, xAI, and OpenAI process requests routed to their services according to the terms and data-processing rules applicable to the services used by CobraAI.
For image-generation requests routed to OpenAI, relevant prompt content is transmitted to OpenAI's API and the generated image is returned to CobraAI for storage and display in the conversation.
Provider retention, abuse-monitoring, security, and data-processing practices can differ by provider, plan, API feature, and configuration.
8. Infrastructure and service providers
CobraAI uses service providers to operate the application. Information is shared with those providers only as reasonably necessary for the functions they perform or as otherwise described in this Policy.
- Clerk — authentication and account management.
- Convex — application database, backend functions, usage records, file storage, and storage of generated image outputs.
- Dodo Payments — Merchant of Record, checkout, payment collection, subscriptions, customer billing management, invoices, applicable tax handling, fraud prevention, refunds, and payment disputes.
- Vercel — application hosting and delivery when CobraAI is deployed to Vercel.
- DeepSeek, Cloudflare, xAI, and OpenAI — AI processing and image generation for routed requests.
9. Sale and targeted advertising
CobraAI does not currently sell personal information for money.
CobraAI does not currently share personal information for cross-context behavioral advertising or operate an advertising-based profiling system.
If CobraAI later introduces advertising or a materially different data practice, this Policy will be updated and any legally required choices or consent mechanisms will be provided.
10. Cookies and authentication technologies
CobraAI and its authentication, hosting, security, and billing providers may use cookies, local storage, tokens, and similar technologies that are necessary to sign users in, maintain sessions, prevent abuse, remember settings, and operate the service.
If CobraAI later introduces optional analytics, advertising, or other non-essential tracking that requires additional notice or consent, CobraAI will provide the required controls.
11. Retention
Chats, uploaded files, and generated images may remain stored while they remain associated with your CobraAI account unless you delete them or the account is deleted.
CobraAI may retain billing, transaction, fraud-prevention, security, audit, and legal records for longer periods where reasonably necessary or legally required.
Third-party AI, infrastructure, and billing providers maintain their own retention practices. Deleting content from CobraAI does not necessarily cause an independent provider to erase information that the provider is legally or contractually permitted or required to retain.
12. Deleting chats and files
CobraAI provides controls to delete conversations. When a CobraAI conversation is deleted, uploaded files and generated images associated with that conversation are also scheduled for removal from CobraAI-controlled application storage.
Some limited records may remain where necessary for security, fraud prevention, billing, legal compliance, dispute resolution, or backup processes.
13. Account deletion
Users can permanently delete their CobraAI account from Settings → Data & Privacy.
Account deletion removes CobraAI-controlled chats, uploaded files, generated images, ordinary usage data, settings, and the user's CobraAI sign-in account.
If the account has an active CobraAI Pro subscription, CobraAI will request immediate cancellation of the associated subscription so it cannot renew.
Remaining subscription time, unused included AI usage, and unused purchased extra usage may be forfeited when the CobraAI account is permanently deleted, except where applicable law or an applicable refund requires otherwise.
Limited billing, transaction, fraud-prevention, security, audit, dispute, chargeback, refund, and legal records may be retained where reasonably necessary or required by applicable law.
Deleting an account does not by itself guarantee a refund. Refund and withdrawal rights remain subject to applicable law and the terms governing the transaction.
Information retained by independent service providers may also remain subject to those providers' legal, security, accounting, backup, and retention requirements.
14. Children's privacy
CobraAI is not intended for children under 13 and users under 13 may not create or use a CobraAI account.
If CobraAI learns that personal information was collected from a child under 13 in circumstances requiring deletion, CobraAI will take appropriate steps to remove the information as required by applicable law.
Users who are minors but are old enough to use CobraAI should involve a parent or legal guardian where permission is required by applicable law, particularly for purchases.
15. Security
CobraAI uses technical and organizational measures intended to protect accounts and stored information, including authentication, server-side authorization, access controls, and security controls provided by infrastructure providers.
No internet-connected service can guarantee absolute security. Users should avoid submitting information that is unnecessary for their request.
16. International processing
CobraAI's service providers may process information in countries other than the country where you live.
Those countries may have different data-protection laws. Where required, CobraAI and its providers may use legal mechanisms intended to support lawful international transfers.
17. Privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of certain personal information, and you may have the right to appeal certain privacy-request decisions.
CobraAI may need to verify your identity before completing a privacy request. Applicable legal exceptions may limit a request.
CobraAI will not discriminate against a user for exercising a privacy right provided by applicable law.
18. Changes to this Policy
CobraAI may update this Privacy Policy as the service, provider routing, law, or data practices change.
The Last Updated date identifies the current version. Additional notice or consent will be provided where required by applicable law.
19. Contact
For legal, privacy, or billing questions, contact CobraAI at natorprime1@gmail.com.