Privacy Policy

Last updated: 25 July 2026

This Privacy Policy explains how TITAN PRIME CORP, a Wyoming corporation doing business as "Irradiation AI" ("Irradiation AI," "Irradiation," "we," "us," or "our"), collects, uses, shares, and protects personal information when you visit our websites, create an account, or use our products and services (the "Services").

This Policy is part of, and incorporated into, our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.

Two different roles — please read this first. When we provide the Services to you (our user, customer, or merchant), we are the controller of your personal information and this Policy applies. When you use the Services to build and run your own apps, sites, or stores, and those collect data about your end customers, you are the controller of that end-customer data and we act as your processor on your behalf — that processing is governed by our Data Processing Addendum, not this Policy. You are responsible for your own privacy notice to your end customers.

1. Information we collect

1.1 Information you provide

Account information — your email address, name, username, password (stored only as a secure hash), and any profile details, avatar, or bio you add.
Billing information — your plan, subscription status, and transaction history. Payment-card details are collected and processed by our payment processor (Stripe) — we never receive or store full card numbers. For paid selling, identity/verification information you provide is handled by the payment processor.
Content you submit ("User Content") — the prompts, briefs, text, images, audio, video, files, code, and other inputs you provide, and the outputs the Services generate for you.
Memory and assistant data — information you choose to save to, or share with, our AI assistant (for example, notes, preferences, people, or projects), which may be retained to provide a persistent, personalized assistant.
Communications — messages you send us (support requests, emails, forms) and your preferences.

1.2 Information we collect automatically

Device and connection data — IP address, browser type, operating system, device and browser characteristics, language, time zone, and approximate location derived from your IP (such as country).
Device and browser "fingerprint" — we and our providers compute a probabilistic device/browser identifier from device and browser characteristics, stored in a first-party identifier on your device, and used to detect and prevent fraud, abuse, and the circumvention of usage limits. See Section 4.
Usage data — pages and features you view, actions you take, sessions, referring pages, and similar analytics, collected through our own systems.
Cookies and similar technologies — see Section 4 and our Cookie Policy.

1.3 Information from third parties

Payment and verification — our payment processor provides transaction status, payout eligibility, and limited verification results (not full card data).
Authentication and security — sign-in, bot-detection, and fraud-prevention signals from our identity and security providers.

We do not intentionally collect special categories of data (such as health, biometric identifiers, precise geolocation, or government IDs) about our users, and you should not submit them as User Content unless necessary. Note that anything you place in User Content or assistant memory is up to you, and you are responsible for it.

2. How we use information

We use personal information to:

provide and operate the Services — create and secure your account, generate content, run your apps and stores, process your requests, and deliver our features;
process payments and billing — manage plans, Credits, renewals, invoices, and (for sellers) payouts and fees;
secure the Services and prevent abuse — authenticate users, detect and prevent fraud, spam, and circumvention of limits (including through device fingerprinting), and enforce our Terms and Acceptable Use Policy;
support you — respond to your requests and send service, transactional, and security messages;
improve and develop the Services — analyze usage, troubleshoot, and build new features, and — where not prohibited by law or your plan — train, fine-tune, and evaluate AI models and systems (see Section 3 and your opt-out right);
personalize and recommend — tailor your experience and suggest features, products, and services (including partner offerings for which we may receive a commission), based on your use of the Services and the features and content you engage with; you can opt out of marketing personalization at any time;
communicate — send product updates and, where permitted, marketing (you can opt out of marketing at any time); and
comply with law — meet legal, tax, accounting, and regulatory obligations and respond to lawful requests.

3. AI, your Content, and model training

Processing your Content. To generate outputs, your inputs and related Content are sent to and processed by AI model and infrastructure providers (see Section 5). Their handling of that data is governed by their own terms and privacy practices.
Model improvement and training. Where not prohibited by law or your plan, we may use your User Content and usage data to improve, fine-tune, evaluate, and train models and systems. Where we use your User Content to train models, we provide a way to opt out through your Account settings or by contacting us. Aggregated or de-identified data that no longer identifies you may be used without restriction.
Outputs. Generative outputs may be inaccurate or resemble third-party material; we make no warranty about them, as described in the Terms.

4. Cookies, tracking, and fingerprinting

We use cookies and similar technologies for several purposes:

Strictly necessary — to sign you in, keep your session, remember interface preferences, and secure the Services. These cannot be switched off without breaking core functionality.
Security and anti-fraud — including a first-party device/browser identifier and device fingerprinting to detect abuse, multiple-account fraud, and circumvention of free-tier limits. We rely on this as a legitimate interest and a security measure.
Analytics — usage analytics to understand and improve the Services.
Personalization and recommendations — to understand how you use the Services and recommend features, products, and services that may be useful to you, including offerings from our partners for which we may receive a commission.

We use this information as first-party data to personalize your experience and surface relevant recommendations. We do not sell your personal information, and we do not disclose your personal information to a partner for the partner's own marketing without your consent. Where consent is required (for example, in the EEA and UK), we set non-essential cookies only after you consent through our cookie banner, and you can opt out of marketing personalization at any time (see Section 6). For details, see our Cookie Policy.

Do Not Track / Global Privacy Control. Because there is no common "Do Not Track" standard, we do not respond to DNT signals. We do honor the Global Privacy Control (GPC) signal as a valid opt-out of any "sale" or "sharing" under the CCPA/CPRA and equivalent state laws.

We share personal information only as described here. We do not sell your personal information, and we do not share it with third parties for their own advertising.

Service providers (subprocessors). We share information with vendors that process data on our behalf to run the Services, under contracts that restrict their use of the data, including: payment processing (Stripe); cloud hosting, storage, content delivery, and bot protection (Cloudflare, including R2 storage and Turnstile; Hetzner; Fly.io); databases (Supabase for our platform; Neon for customer apps); AI model and machine-learning providers (such as Anthropic and Google, and other large-language-model providers, including through aggregators); embeddings (Voyage AI); media generation (Fal); web search (Tavily); code-execution sandboxes (E2B); email and notifications (Resend); stock imagery (Unsplash, Pexels); and device-intelligence/anti-fraud tooling. A current list of our subprocessors is available in our Data Processing Addendum or on request.
Payments. Payment and payout data is shared with our payment processor and, for sellers, the relevant card networks and financial partners.
Partner recommendations. We may recommend partner products and services to you based on your use of the Services, and we may receive a commission. We make these recommendations ourselves; we do not disclose your personal information to the partner unless you choose to engage with them or you consent.
Legal and safety. We may disclose information to comply with law, respond to lawful requests (such as subpoenas), enforce our Terms, prevent fraud or harm, or protect our rights, users, or the public.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
With your direction. We share information when you ask us to (for example, when you publish content or connect an integration).

Sharing personal information with our service providers and security/anti-fraud providers is for operating and protecting the Services and is not a "sale." We honor the Global Privacy Control, and you can opt out of marketing personalization, and of any "sale" or "sharing," at any time (Section 6).

6. Your privacy rights

6.1 United States — California (CCPA/CPRA) and other states

If you are a U.S. resident, you may have the right to:

know what personal information we collect, use, and disclose;
access and obtain a copy of your personal information;
delete your personal information (subject to legal exceptions);
correct inaccurate personal information;
opt out of marketing personalization and of any "sale" or "sharing" of personal information (we do not sell your data or share it for third-party advertising; we honor the Global Privacy Control);
limit the use of sensitive personal information; and
non-discrimination for exercising your rights.

To exercise these rights, email privacy@irradiation.ai or use the controls in your Account. We will verify your request and respond within the time the law requires (generally 45 days for California, extendable once). You may use an authorized agent. If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws, you have comparable rights, including appeal rights where provided.

If you are in the EEA, the UK, or Switzerland, you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.

The legal bases on which we rely are:

performance of a contract — to provide the Services you request;
legitimate interests — to secure the Services, prevent fraud, and improve and develop our products (balanced against your rights);
consent — for optional cookies, marketing, and any model training where consent is the basis (you may withdraw it); and
legal obligation — to comply with tax, accounting, and other laws.

To exercise any right, contact privacy@irradiation.ai. We respond within one month.

7. Data retention

We keep personal information for as long as your Account is active and as needed to provide the Services, then delete or de-identify it within a reasonable period, except where we must retain it longer to comply with legal, tax, accounting, or security obligations, resolve disputes, or enforce our agreements (for example, invoices and transaction records are typically kept for several years as required by law). Security and anti-fraud records, including device identifiers, are retained for as long as needed to prevent abuse. You can delete most assistant memory and content yourself, or request deletion of your Account.

Activity Record. We keep a sealed, append-only record of activity on the Services for seven (7) years. For merchants, it covers your use of the Services — account creation and sign-in, publishing a store, connecting a domain or a payment account, payments, refunds, chargebacks, invoices, and actions taken by AI agents on your behalf — together with the IP address and browser user agent used for those actions. It also covers the significant acts of merchants' own customers, identified only by an irreversible reference; we do not keep their name, email, postal address, IP address, order contents, or message text in it. We keep it to establish, exercise, or defend legal claims, to answer enquiries from payment processors and financial institutions, and to prevent fraud, on the basis of our legitimate interests. Because it is necessary for legal claims, it is retained despite a deletion or erasure request, as GDPR art. 17(3)(e) and equivalent laws permit; when you exercise a deletion right we erase the information that links its entries to an identified person, so the entries can no longer be attributed to you. Access is restricted to authorised staff, and every access is itself recorded. Merchants can request an extract of the entries concerning their own account at privacy@irradiation.ai. See section 11 of the Merchant & Payments Terms.

8. International data transfers

We are based in the United States, and we and our providers may process your information in the U.S. and other countries whose laws may differ from yours. By default, platform data is processed in the United States, and customer-app databases are provisioned in the U.S. (US-East) unless a different region is selected. Where we transfer personal data from the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission (and the UK Addendum), available on request.

9. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information — including encryption in transit, encryption of sensitive stored credentials, access controls, and row-level isolation between accounts. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Protect your credentials and notify us at security@irradiation.ai of any suspected compromise.

10. Children's privacy

The Services are for business and professional use and are not directed to, or intended for, individuals under 18. We do not knowingly collect personal information from anyone under 18 (or under the minimum age in your jurisdiction). If you believe a minor has provided us information, contact privacy@irradiation.ai and we will delete it.

11. Third-party services and links

The Services integrate with, and may link to, third-party products and websites we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them. Content you direct us to send to a third-party provider (such as an AI model provider) is processed under that provider's terms.

12. Changes to this Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice where required or appropriate. Your continued use of the Services after a change takes effect means you accept the updated Policy.

13. Contact us

For privacy questions or to exercise your rights:

TITAN PRIME CORP (d/b/a Irradiation AI) 525 Randall Ave, Ste 100, Cheyenne, WY 82001, United States

Privacy: privacy@irradiation.ai
Security: security@irradiation.ai
General & legal: legal@irradiation.ai

If you are in the EEA or UK and wish to reach a data-protection contact, email privacy@irradiation.ai and mark your message "GDPR."