Privacy
The data axiris.ai processes, why, where it is held, who it is shared with, and your rights.
axiris.ai processes the minimum needed to provide the service to you: your account, your creations and conversations, your credits and payments. Your creations, accounts and conversations are stored in Switzerland; the website and the credit ledger are hosted in France. No advertising tracking, no third-party audience analytics, no third-party cookies, no sale of data. Payment goes through Stripe; we never see your card. To exercise your rights: contact@axiris.ai.
Version of 6 November 2026.
1. Controller
Kris Wilhem, sole proprietorship Axiris, Case postale 233, 1470 Estavayer-le-Lac, Switzerland. Contact: contact@axiris.ai.
2. What we do not do
- No advertising tracking, no third-party audience analytics.
- No third-party cookies: the only cookie is your session cookie.
- No card number passes through our servers.
- No sale or rental of your data.
- No use of your creations to train models.
3. The data, and why
Your account. E-mail address, chosen name, password (stored in irreversibly hashed form, never in clear text), and if you add them: avatar, biography, preferences, newsletter subscription. With Google sign-in, we receive from Google your address, your name and your profile picture. Purpose: to identify you and provide the service to you.
Your creations and your conversations. Your prompts, reference images, renders, conversations with Nova, messages in the rooms and private messages. Purpose: to produce what you ask for and let you find it again.
Your credits and payments. The history of your credits (purchases, spending, gifted or earned credits), your bookings, and for each payment: the Stripe session identifier, the product, the amount, the date and the status. Purpose: to keep your balance and our accounts.
The gallery and the community. The images you publish, their description, the "likes" given and received, the accounts you follow. What is public: your username, your avatar, your biography and the published images; never your e-mail address.
The contact form. Name, e-mail, message: forwarded by e-mail to the operator.
Security. Requests to the service are logged (date, IP address, account, page requested) to protect the service against abuse. To prevent abuse of earned credits, a hash of the IP address is kept for one day, never the address itself.
4. Where your data is
- In Switzerland, on the operator's servers: accounts, conversations, messages and your creations.
- In France, at OVH: the website, the application, the credit and payment ledger, the images published in the gallery and the security logs.
France is among the countries recognised by Switzerland as providing an adequate level of protection.
5. Who it is shared with
| Provider | Role | What it receives | | :-- | :-- | :-- | | OVH SAS (France) | hosting of the website and the application | what is stored on that server | | Stripe | payment | your e-mail, the product, the amount; your card, entered at Stripe | | Infomaniak Network SA (Switzerland) | sending of e-mails | your e-mail address and the message sent | | Google | sign-in, if you choose it | authentication | | Third-party model provider | generation, if you choose such a model | your request and the attached images |
Stripe and third-party model providers may process data outside Switzerland and the European Union, under their own safeguards.
6. For how long
- The account and your creations: as long as the account exists.
- Deleted images pass through a recycle bin before being destroyed.
- Payment data and the credit ledger: 10 years, the period required by Swiss accounting law.
- Security logs: 12 months at most.
7. Cookies and local storage
A session cookie is set when you sign in; it is necessary for the service and disappears when you sign out or when it expires. The browser also keeps display preferences and the state of your work, which are transmitted to nobody.
8. Security
Encrypted connection (HTTPS), passwords stored in irreversibly hashed form, files partitioned by account, images served only to a valid session, uploads checked and cleaned, abuse limiting.
9. Your rights
You may request access to your data, its rectification, its deletion, its delivery in a common format, and you may object to a processing operation. Write to contact@axiris.ai from your account's address; we reply within 30 days. Deleting an account erases your creations and your conversations; the payment ledger is kept for the statutory period.
In Switzerland, you may refer the matter to the Federal Data Protection and Information Commissioner (FDPIC). If you reside in the European Union, you may refer the matter to the data protection authority of your country.
10. Minors
The service is reserved for persons aged 18 and over.
11. Changes
This page may change; the date at the top prevails. Significant changes are announced in the application.