Privacy Policy

This Privacy Policy explains how The Glow Door ("we", "us") handles personal information when you use theglowdoor.com and related services (the "Platform"). It forms part of our Terms and Conditions. By using the Platform you agree to the collection and use of information as described here.

Information you give us

• Account details: email address, display name, password (stored only as a one-way hash), profile photo and bio.
• If you sign in with Google: your name, email address and profile picture from Google.
• Messages, voice notes and call audio you send, and things you tell the AI about yourself (such as your name, interests or preferences), which it may remember for future conversations.
• For creators: profile and pricing details, AI persona instructions, a voice sample and transcript (if provided), uploaded content, and links to shared Google Drive or OneDrive folders.
• Messages you send us, such as support or legal requests.

Payment information

Payments are handled by Stripe. We do not receive or store your full card number. We receive limited details such as a customer ID, the last four digits, card brand, purchase amounts and payment status.

Information collected automatically

• Activity on the Platform: follows, subscriptions, purchases, unlocks, likes, comments and call times and durations.
• Technical data: IP address, approximate location derived from it, device and browser type, and request logs, including those created by our network and security provider (Cloudflare).
• Cookies needed to keep you signed in and secure. We do not use advertising cookies. See section 9.

• To create and run your account, and to provide content, chat, voice notes and calls.
• To generate AI replies, voice notes and call audio in a creator's persona, which involves processing your messages, voice recordings and conversation history (including converting speech to text and text to speech).
• To process payments, subscriptions, renewals and creator payouts, and to prevent fraud and chargebacks.
• To send account, security and transactional emails (such as password resets and receipts).
• To keep the Platform safe: moderation, enforcing our Terms, investigating abuse and complying with law.
• To maintain, analyse and improve the Platform, including using de-identified or aggregated data.
• For any other purpose we tell you about when we collect the information, or that you agree to.

Chats, voice notes and calls are processed by AI systems run on servers we control. Your voice notes and call audio are transcribed so the AI can respond, and voice notes you send are stored so they can be played back in the conversation.

Creators can read conversations in their Studio and can take over replies personally. Do not send anything in a chat, voice note or call that you would not want the creator to see or that you are not comfortable being stored.

Memory. So the AI can remember you across conversations, we save details from your chats and voice-note transcripts (for example your name, where you live, your interests and things you mention about your life) into a memory kept for each creator-and-fan pair. It is stored on our own servers, is used only for that creator's AI, and is never used to train AI models or shared with other fans. The memory can contain personal details, so tell us if you want it removed (see your rights below).

We do not sell your personal information. We share it only as follows:

• With creators you interact with: your display name, profile, messages, voice notes, and your follow, subscription and purchase activity with them.
• With service providers who help us run the Platform, including Stripe (payments), Supabase (database hosting), Cloudflare (network and security), Google (sign-in), Google and Microsoft (creators' linked folders), and our email provider. They may only use it to provide services to us.
• For legal reasons: to comply with law, a court order or a request from a government or law enforcement body; to enforce our Terms; or to protect the rights, safety or property of us, our users or the public.
• In a business transfer: if we sell, merge or reorganise all or part of our business, your information may be transferred as part of it.
• With your consent, or at your direction.

Our service providers may store or process your information outside your country, including in Australia, the United States and other countries where they operate. By using the Platform you consent to these transfers. These countries may not have privacy laws equivalent to yours.

We keep information for as long as your account is active (including the AI memory of your conversations) and afterwards for as long as we reasonably need it for the purposes above — including resolving disputes and chargebacks, preventing fraud, enforcing our Terms, and meeting legal, tax and accounting obligations. When we no longer need it, we delete or de-identify it. Copies may remain in backups for a limited time.

We take reasonable steps to protect personal information, such as encrypted connections and hashed passwords. However, no system is completely secure, and we cannot guarantee the security of information you send or store on the Platform. You are responsible for keeping your login details secret. To the maximum extent permitted by law, we are not responsible for unauthorised access that is beyond our reasonable control.

We use essential cookies to keep you signed in, protect against fraud and remember basic settings. Cloudflare may set cookies to protect the Platform from attacks. We do not use advertising or cross-site tracking cookies. Blocking cookies will stop you from signing in.

• You can update your profile in Settings, and cancel subscriptions at any time.
• You can ask to access or correct the personal information we hold about you, or ask us to delete your account, by emailing [email protected]. We may need to verify your identity.
• Depending on where you live (for example under the Australian Privacy Act 1988, or the GDPR in the EU/UK), you may have further rights, such as to object to or restrict processing, or to data portability. We will respond as required by applicable law.

We may keep some information after a deletion request where we are allowed or required to, for example records of payments, disputes, or breaches of our Terms. Deleting your account does not delete messages already delivered to creators, and you will lose access to anything you bought, without refund.

The Platform is for adults 18 and over only. We do not knowingly collect information from anyone under 18. If we learn that we have, we will close the account and delete the information. If you believe a minor is using the Platform, contact [email protected].

We may update this Privacy Policy at any time by posting the new version on this page with a new effective date. Continuing to use the Platform after that means you accept the updated policy.

For privacy questions, requests or complaints, email [email protected]. We will try to respond within 30 days. If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).