Privacy Policy

Last updated: July 14, 2026

1. Who we are

AtheneVIP, available at athenevip.ai (the "Service"), is operated by The Naughty Cult Ltd., Stefan Karadzha Street 10, Floor 3-4, Sofia 1000, Bulgaria. For the personal data described in this policy, The Naughty Cult Ltd. is the data controller under Regulation (EU) 2016/679 (the GDPR). You can reach us about anything in this policy at contact@athenevip.ai.

2. What we collect

  • Account data. Your email address and, if you set one, a display name. Signing in is passwordless, so we never store a password for you.
  • Content. The prompts you write, the reference images and audio you upload, the media generated for you, and your generation history.
  • Billing data. Your credit balance, purchases, and invoices. Card payments are handled by a third-party payment processor; we never see or store your full card number.
  • Technical data. IP addresses, timestamps, and basic device and browser information in our server logs.

We do not collect data that is not relevant to running the Service.

3. How we use it

  • To provide the Service: signing you in, generating and storing your media, showing your library, and handling your credits (legal basis: performance of our contract with you).
  • To keep the Service secure and prevent abuse, using logs and technical data (legal basis: our legitimate interest in protecting the Service and its users).
  • To handle payments, accounting, and tax obligations (legal basis: legal obligation and performance of contract).
  • To send you service emails such as sign-in links and important notices about your account. We only send marketing if you have agreed to it, and today we send none.

We do not use your content to train machine-learning models, and we do not sell your data.

4. Cookies

We use one essential cookie: the session cookie that keeps you signed in. We do not use advertising cookies or third-party analytics cookies.

5. Who we share data with

We share personal data only with providers we use to run the Service:

  • cloud hosting and storage providers that run our infrastructure and store your media;
  • media-generation compute providers that process your prompts and reference material on our instructions to produce your results;
  • an email delivery provider, to send sign-in links and service notices;
  • a payment processor, to handle card payments;
  • authorities or professional advisers, when the law requires it or when necessary to establish or defend legal claims.

These providers process data on our behalf and under our instructions, and are not permitted to use it for their own purposes.

6. International transfers

Some of our providers operate outside the European Economic Area. Where that is the case, we rely on safeguards recognized by the GDPR, such as adequacy decisions or standard contractual clauses.

7. Retention

We keep your account data and content for as long as your account exists. When your account is deleted, we remove your personal data within 30 days, except for residual copies in backups (removed on the backup cycle, at most 90 days) and records we must keep for legal or accounting reasons. Server logs are kept for up to 12 months.

8. Security

Data moves over encrypted connections, media storage is accessed through signed, expiring links, and access to production systems is limited to the people who need it to run the Service.

9. Your rights

Under the GDPR you can ask us to:

  • give you access to the personal data we hold about you, and a copy of it;
  • correct inaccurate data;
  • delete your data;
  • restrict or object to how we process it;
  • hand your data over in a portable format;
  • withdraw consent, where processing is based on consent.

Write to contact@athenevip.ai and we will respond within 30 days. You can also complain to a supervisory authority: in Bulgaria that is the Commission for Personal Data Protection (cpdp.bg), and you may also contact the authority in the country where you live.

10. Children

The Service is for adults. We do not knowingly collect data from anyone under eighteen (18). If you believe a minor has an account, contact us and we will remove it.

11. Changes to this policy

We may update this policy as the Service evolves. For material changes we will notify you through the Service or by email. The current version always lives at athenevip.ai/privacy, next to our Terms of Service.

12. Contact

The Naughty Cult Ltd., Stefan Karadzha Street 10, Floor 3-4, Sofia 1000, Bulgaria. Email: contact@athenevip.ai.