CompanionForge — Privacy Policy

Last Updated: August 5, 2026

This Privacy Policy describes how Brightspan Holdings LLC, doing business as BookAIStudio and operating CompanionForge ("CompanionForge," "BookAIStudio," "Company," "we," "our," or "us"), collects, uses, discloses, and protects your personal information when you access or use our website, mobile applications, AI companion services, and related features (collectively, the "Services").

This Privacy Policy applies to all users of the Services. By using the Services, you consent to the practices described in this Policy. If you do not agree, please discontinue use.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Create an account: Your name or username, email address, and date of birth for age verification.
• Subscribe to paid services: Payment information (processed securely through our third-party payment processors), billing address, and transaction history.
• Interact with Companions: The text, voice, and other content you submit during conversations with AI companions.
• Customize your experience: Preferences, companion customizations, and profile settings.
• Contact us: Information in customer support requests, feedback, or other communications.

Important: Please do not include sensitive personal information (such as social security numbers, financial account numbers, precise health information, or government IDs) in your conversations with Companions or other content you submit.

1.2 Information We Collect Automatically

When you use the Services, we automatically collect:

• Device and usage information: IP address, browser type, operating system, device identifiers, mobile network information, and pages visited.
• Activity data: Interaction patterns, features used, time spent, and actions taken within the Services.
• Log data: Access times, referring URLs, error logs, and performance data.
• Geolocation: Approximate location derived from your IP address (country/region level).

1.3 Information from Cookies and Similar Technologies

We use cookies and similar tracking technologies (pixels, local storage) to:

• Maintain your session and preferences
• Authenticate your account
• Analyze usage patterns and improve the Services
• Deliver relevant content

For detailed information on how we use cookies, please see our [Cookie Policy].

1.4 Information from Third Parties

We may receive information about you from:

• Payment processors: Confirmation of transactions
• Authentication providers: If you sign in through Google, Apple, or similar services
• Analytics providers: Aggregated usage and demographic data

2. How We Use Your Information

We use your information for the following purposes:

2.1 Service Delivery

• Create, maintain, and authenticate your account
• Process payments and manage subscriptions
• Deliver AI companion interactions and personalize your experience
• Provide customer support

2.2 Service Improvement

• Analyze usage patterns to improve features and functionality
• Train and improve our AI models (using de-identified data)
• Debug and troubleshoot technical issues
• Conduct research and development

2.3 Communications

• Send account-related notices (billing, security, policy updates)
• Respond to your inquiries and support requests
• Send marketing communications (with your consent, where required)

2.4 Legal and Safety

• Verify user age and eligibility
• Detect, prevent, and address fraud, abuse, and illegal activity
• Comply with legal obligations and enforce our Terms of Service
• Protect the rights, safety, and property of our users and the Company

2.5 Aggregated and De-identified Data

We may aggregate or de-identify your information so that it no longer identifies you. We use such data for analytics, research, and improving the Services, and may share it with third parties.

3. How We Share Your Information

We do NOT sell your personal information. We share information only as follows:

3.1 Service Providers

We share information with trusted vendors who perform services on our behalf, including:

• Cloud hosting and infrastructure providers
• Payment processors
• Analytics providers
• Customer support platforms
• Email and communication services

These providers are contractually bound to use your information only for the services they provide to us.

3.2 Legal Obligations

We may disclose information when required by law, including:

• To comply with court orders, subpoenas, or legal process
• To respond to lawful requests from government authorities
• To enforce our Terms of Service and protect our rights
• To prevent, investigate, and address fraud, security, or safety concerns

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will notify you of any such change in ownership or control.

3.4 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Security

We implement commercially reasonable technical, administrative, and physical safeguards to protect your personal information. These include encryption in transit (TLS), encryption at rest, access controls, and regular security assessments.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide you with the Services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we remove your personal information from active systems within 30 days. Some information may be retained in backups for a limited time, or as required by law. Aggregated or de-identified data may be retained indefinitely.

6. Your Rights and Choices

6.1 Account Information

You can access, update, or correct your account information through your account settings at any time.

6.2 Delete Your Account

You may delete your account through your account settings. Upon deletion, your personal information and conversation history will be removed in accordance with our data retention practices.

6.3 Marketing Communications

You can unsubscribe from marketing emails by clicking the "unsubscribe" link. Even if you opt out, we may still send you non-marketing communications about your account.

6.4 Cookie Preferences

Most browsers allow you to control cookies through their settings. You can also manage cookie preferences through our cookie consent tool. Disabling certain cookies may affect the functionality of the Services.

6.5 Do Not Track

Some browsers offer a "Do Not Track" signal. Our Services do not currently respond to Do Not Track signals.

7. Florida Privacy Rights

7.1 Florida Digital Bill of Rights (FDBR)

Florida residents have the following rights under the FDBR:

• Right to Know: Request information about the categories and specific pieces of personal data we collect, use, and disclose.
• Right to Access: Obtain a copy of your personal data in a portable format.
• Right to Correct: Request correction of inaccurate personal data.
• Right to Delete: Request deletion of your personal data, subject to certain exceptions.
• Right to Opt Out: Opt out of the sale of personal data (we do not sell personal data) and targeted advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at admin@bookaistudio.com. We will verify your identity before processing your request, which may require confirming your account email. We respond to verified requests within 45 days, with a possible 45-day extension.

7.2 Authorized Agents

You may designate an authorized agent to exercise your Florida privacy rights on your behalf. We may require proof of authorization.

7.3 Appeals

If we deny your privacy rights request, you may appeal by contacting us. We will respond to your appeal within 45 days.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information is collected
• Right to access and obtain a copy of your data
• Right to delete your data
• Right to correct inaccurate data
• Right to opt out of the sale or sharing of personal information
• Right to limit the use of sensitive personal information

We do not sell or share personal information as defined by California law. To exercise your California rights, contact us at admin@bookaistudio.com.

9. Children's Privacy

The Services are intended for adults 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK), in compliance with the Children's Online Privacy Protection Act (COPPA) and applicable law.

If we learn that a child under the applicable age has provided us with personal information, we will delete it promptly. If you believe a child has provided us with information, contact us immediately.

We implement age-verification measures to prevent underage access. Parents or guardians who believe their child may have accessed the Services should contact us.

10. International Users

The Services are operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Services, you consent to such transfer and processing.

11. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the Services. Your continued use after changes take effect constitutes acceptance. The "Last Updated" date at the top reflects the most recent revision.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights:

BookAIStudio (DBA of Brightspan Holdings LLC)

Email: admin@bookaistudio.com

Website: https://companionforge.bookaistudio.com

For privacy-related inquiries: admin@bookaistudio.com

*This Privacy Policy was last updated on August 5, 2026.*