Privacy Policy

Last Updated: September 7, 2026

Onvessi ("Onvessi," "we," "us," or "our") is operated by Ardox Labs LLC, a Wyoming limited liability company.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit our website, create an account, purchase our products, use our applications, interact with our AI companion services, purchase Tokens or Subscriptions, or otherwise use our Services.

By using our Services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on how you use our Services, we may collect the following categories of information.

1.1 Account Information

When you create an account, we may collect:

• email address;
• username or account identifier;
• password or authentication information;
• account preferences;
• age or age-confirmation information; and
• other information you voluntarily provide.

1.2 Order and Transaction Information

When you purchase products or Services, we may collect:

• name;
• billing address;
• shipping address;
• email address;
• order information;
• product information;
• Subscription information;
• Token purchase information;
• transaction identifiers;
• refund information; and
• other information necessary to process your transaction.

Payment card information may be processed directly by third-party payment processors.

We generally do not store complete payment card numbers on our own systems unless expressly stated otherwise.

1.3 AI Companion and User Content

When you use our AI companion Services, we may process information that you voluntarily provide, including:

• prompts;
• text conversations;
• uploaded images;
• audio or voice inputs;
• preferences;
• generated-content requests;
• character preferences;
• interaction history; and
• other User Content.

Because our Services are adult-oriented, some User Content may reveal or relate to sensitive aspects of your personal life or preferences, including information concerning sex life, sexual orientation, or health.

We process such information only for legitimate business purposes, to provide requested Services, maintain security, comply with law, and for other purposes described in this Privacy Policy.

Where applicable law requires explicit consent for the processing of special category data (including data concerning sex life, sexual orientation, or health data), we will obtain your explicit consent before processing such data. You may withdraw your consent at any time. Where you do not provide or withdraw consent, we may be unable to provide certain features of the Services.

1.4 Smart Hardware Information

If you use Onvessi smart hardware or connected-device features, we may process information necessary to operate those features, including:

• device identifiers;
• connection keys;
• device status;
• firmware information;
• connectivity information;
• technical diagnostics;
• app/device interaction data; and
• information necessary to provide remote-control or interactive functionality.

Where supported, hardware may operate in an offline mode without transmitting personal information to our servers.

1.5 Device and Technical Information

When you access our website or applications, we may automatically collect:

• IP address;
• browser type;
• operating system;
• device type;
• language settings;
• referring URLs;
• pages viewed;
• interaction information;
• approximate location derived from IP address;
• timestamps;
• diagnostic information; and
• other technical information.

1.6 Cookies and Similar Technologies

We may use cookies, pixels, SDKs, local storage, and similar technologies to:

• operate the website;
• remember preferences;
• maintain security;
• understand website usage;
• analyze traffic;
• measure marketing performance; and
• improve our Services.

Third-party providers, including analytics and advertising providers, may use similar technologies subject to their own privacy policies.

Where required by law, we will obtain appropriate consent before using non-essential cookies or similar technologies.

2. How We Use Information

We may use information to:

• provide and operate the Services;
• create and manage accounts;
• process payments and orders;
• fulfill and ship physical products;
• provide AI companion Services;
• generate requested digital content;
• provide customer support;
• manage Subscriptions;
• manage Tokens;
• operate smart hardware;
• maintain security;
• detect fraud and abuse;
• troubleshoot technical problems;
• analyze and improve our Services;
• develop and train AI models (subject to applicable law and the terms of this Privacy Policy);
• send transactional communications;
• send marketing communications where permitted and where you have provided the required consent;
• comply with legal obligations; and
• protect our rights, users, and business.

Where required by applicable law, we rely on your explicit consent as the legal basis for processing special category data pursuant to Article 9(2)(a) of the GDPR. Where processing is based on consent, you may withdraw your consent at any time.

3. AI Processing

AI features may require your prompts, conversations, User Content, and other information to be processed by Onvessi and by service providers supporting our AI infrastructure.

We may use third-party AI infrastructure providers to process requests and generate responses or content.

We take reasonable measures to require appropriate confidentiality and security protections from service providers processing information on our behalf.

We do not use private user conversations to publicly identify individual users.

We may use your prompts, conversations, and User Content to operate, maintain, and improve the AI systems that power the Services, including for AI model training and service enhancement. Where we use such information for AI model training or service improvement, we apply de-identification techniques consistent with applicable data protection law.

We conduct Data Protection Impact Assessments ("DPIAs") for processing activities that are likely to result in high risk to individuals, as required by Article 35 of the GDPR. Our adult-oriented AI companion services are subject to DPIA given the sensitivity of the data processed. For more information about our DPIA practices, please contact us at support@onvessi.com.

4. How We Share Information

We do not sell your personal information as defined under applicable privacy laws, including the California Consumer Privacy Act ("CCPA")/California Privacy Rights Act ("CPRA"). We do not share your personal information with third parties for cross-context behavioral advertising without your consent.

We may share information with trusted service providers where reasonably necessary to operate our business, including:

Infrastructure and Hosting Providers For hosting, storage, security, databases, and technical infrastructure.

Payment Providers For processing payments, subscriptions, refunds, fraud prevention, and transaction verification.

E-commerce and Fulfillment Providers For order processing, inventory management, shipping, and delivery.

AI Technology Providers For AI processing, content generation, and related functionality.

Analytics Providers For understanding website and product usage.

Email and Communications Providers For transactional emails, customer support, and marketing communications.

Legal and Compliance Providers Where necessary to comply with law, prevent fraud, protect rights, or respond to lawful requests.

Service providers are generally authorized to process information only for specified business purposes and are contractually required to implement appropriate security and confidentiality measures.

5. Legal Disclosures

We may disclose information where reasonably necessary to:

• comply with applicable law;
• respond to subpoenas, court orders, or lawful government requests;
• enforce our Terms;
• investigate fraud or security incidents;
• protect users or the public;
• protect our legal rights; or
• respond to an emergency where disclosure is reasonably necessary.

6. International Data Transfers

Because Onvessi operates internationally and may use service providers located in different countries, your information may be processed or stored outside the country in which you reside.

For transfers from the EEA, Switzerland, or the United Kingdom to the United States, we rely on Standard Contractual Clauses ("SCCs") approved by the European Commission and/or the UK Information Commissioner's Office, supplemented by Transfer Impact Assessments where required. Where applicable, we also rely on the EU-US Data Privacy Framework.

For other international transfers, we implement appropriate safeguards consistent with applicable data protection law.

For a copy of the safeguards we have implemented, please contact support@onvessi.com.

7. Data Retention

We retain personal information for as long as reasonably necessary to:

• provide the Services;
• maintain your account;
• process transactions;
• comply with legal and accounting obligations;
• resolve disputes;
• prevent fraud and abuse;
• enforce agreements; and
• protect our legitimate business interests.

Retention periods vary depending on the type of information and the purpose for which it was collected. The following table summarizes our general retention periods:

When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to applicable legal obligations. We may retain anonymized or aggregated information indefinitely for legitimate business purposes, including AI model improvement and service development, provided that such information does not identify individual users.

8. Security

We use reasonable technical and organizational safeguards designed to protect personal information.

These may include:

• encryption in transit and at rest;
• access controls and role-based permissions;
• authentication mechanisms;
• security monitoring and incident response procedures;
• service-provider controls; and
• other reasonable security measures.

No method of transmission or storage is completely secure.

We cannot guarantee absolute security.

9. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

• access to personal information;
• correction of inaccurate information;
• deletion;
• restriction of processing;
• portability;
• objection to certain processing;
• withdrawal of consent;
• opting out of certain marketing communications; and
• other rights provided by applicable law.

You have the right to lodge a complaint with your local data protection supervisory authority. EEA residents: contact details for your supervisory authority are available at edpb.europa.eu. UK residents: contact the Information Commissioner's Office at ico.org.uk.

To exercise applicable rights, contact:

support@onvessi.com

We may need to verify your identity before processing certain requests.

10. California Privacy Rights

If you are a California resident, you may have additional rights under the CCPA/CPRA, including rights relating to access, deletion, correction, and certain disclosures concerning personal information.

We do not sell or share your personal information as defined under the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law. California residents have the right to limit the use and disclosure of their sensitive personal information.

Where applicable, you may request information regarding:

• categories of personal information collected;
• purposes for collection;
• categories of sources;
• categories of recipients;
• retention practices; and
• other information required by applicable law.

To submit a request, contact support@onvessi.com.

We will not discriminate against you for exercising your CCPA/CPRA rights.

11. European Economic Area and United Kingdom

If you are located in the European Economic Area, Switzerland, or the United Kingdom, additional data protection rights may apply.

Depending on the circumstances, we may process personal information based on:

• performance of a contract;
• your consent (including explicit consent for special category data);
• compliance with legal obligations;
• legitimate interests; or
• other lawful bases recognized by applicable law.

Where processing is based on consent, you may withdraw consent at any time, subject to applicable law.

You may also have the right to lodge a complaint with your local data protection authority.

12. Sensitive Information

Due to the nature of our Services, certain information you provide may be classified as sensitive under applicable laws, including GDPR Article 9 special category data (such as data concerning sex life, sexual orientation, or health) and sensitive personal information under the CCPA/CPRA.

We collect and process such information only with your explicit consent (where required by applicable law) and only to the extent necessary to provide the requested Services.

We implement enhanced technical and organizational safeguards for sensitive information, including:

• encryption at rest and in transit;
• access logging and role-based access controls;
• purpose limitation controls;
• minimized collection of unnecessary sensitive information; and
• additional security measures where appropriate.

We do not require you to provide unnecessary sensitive information. You should avoid submitting sensitive information that is not necessary for your use of the Services. Where applicable law requires heightened protection or consent for sensitive information, we will apply the safeguards required by that law.

13. Children's Privacy

Our Services are intended for adults.

We do not knowingly collect personal information from children who do not satisfy the applicable minimum age requirements.

If we learn that we have collected personal information from an underage user, we will take reasonable steps to delete the information, subject to applicable legal obligations.

If you believe an underage person has provided information to us, please contact:

support@onvessi.com

14. Marketing Communications

We may send transactional communications necessary to operate your account or fulfill orders.

Where required by law, we will obtain consent before sending promotional communications.

You may unsubscribe from marketing emails using the unsubscribe link included in the communication.

Unsubscribing from marketing communications does not prevent us from sending necessary transactional or account-related communications.

15. Third-Party Websites

Our Services may contain links to third-party websites or services.

We are not responsible for the privacy practices of third parties.

You should review the privacy policies of third-party services before providing information to them.

16. Biometric and Voice Data

Where you use voice-input features or other features that involve biometric information, we may process voice data or similar biometric identifiers for the purpose of providing and improving the AI companion Services.

Where applicable law (including the Illinois Biometric Information Privacy Act, "BIPA," and similar state laws) requires additional consent or notice for the collection, use, or storage of biometric information, we will obtain the required consent and provide the required disclosures.

Biometric data will not be sold, leased, or disclosed to third parties except as described in this Privacy Policy, as required by law, or with your explicit consent. Biometric data will be retained only as long as reasonably necessary to fulfill the purpose for which it was collected, as described in Section 7 (Data Retention) of this Privacy Policy.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the "Last Updated" date.

Where required by law, we will provide additional notice of material changes.

18. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy, contact us at:

• Company: Ardox Labs LLC
• Brand: Onvessi
• Email: support@onvessi.com
• Registered Office: 30 N Gould St Ste R, Sheridan, WY 82801, United States