Privacy Policy

Last updated: April 2026

1. Who We Are

SHELA ("we", "us") is an AI Life Manager platform operated by Grega Vidmajer, based in Slovenia, EU. Website: heyshela.com

2. What Data We Collect

We collect the following data when you use SHELA:

• Account data: Email address, name (when you register)
• Conversation data: Messages you send to SHELA and AI responses
• Usage data: Token usage, features used, session timestamps
• Payment data: Processed securely by Stripe — we never store your card details
• Technical data: IP address, browser type, device info (for security and analytics)

3. Why We Collect It (Legal Basis — GDPR Art. 6)

• Contract performance: To provide the SHELA service you signed up for
• Legitimate interest: To improve the service, prevent abuse, ensure security
• Consent: For marketing communications (you can opt out anytime)

4. How We Use Your Data

• To provide and improve the SHELA AI service
• To process payments via Stripe
• To remember your preferences and conversation context (Memory system)
• To send important service updates
• To detect and prevent abuse or unauthorized access

5. Third-Party Services

We use the following third-party processors:

• Third-party AI service providers: AI processing — messages are processed by industry-standard AI service providers to generate responses. Data is transmitted securely and is not used to train external models.
• Google AI (Gemini): Image and video generation
• Stripe: Payment processing. See Stripe's Privacy Policy
• Hetzner: Server hosting (EU-based, Germany)

6. Data Storage & Security

Your data is stored on Hetzner servers in the European Union (Germany). We use encryption in transit (HTTPS/TLS), rate limiting, input validation, and access controls to protect your data.

7. Your Rights (GDPR)

As an EU resident, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Object: Object to processing based on legitimate interest
• Withdraw consent: For any consent-based processing

To exercise any of these rights, contact us at: privacy@heyshela.com

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where legally required to retain it.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

10. Children

SHELA is not intended for users under 16 years of age. We do not knowingly collect data from children.

11. Changes

We may update this policy. Significant changes will be communicated via email or in-app notification.

12. Contact

Data Controller: Grega Vidmajer
Email: privacy@heyshela.com
Location: Slovenia, EU