Privacy Policy - Qwen Ai Chat

Last Updated: October 31, 2025

This Privacy Policy explains how Qwen AI Chat (the “Site,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use the website qwen-ai.chat. We are committed to global privacy compliance and transparency, adhering to major data protection laws including the GDPR (EEA/UK), CPRA (California), LGPD (Brazil), PIPEDA (Canada), and other applicable regulations.

Important: Qwen AI Chat is operated by an independent team and is not affiliated with or endorsed by Alibaba Group or any official Qwen AI providers. If you have any questions about this Policy, please contact us at [email protected].

1. No Account Required & Data Minimization

No Registration Needed: You can use Qwen AI Chat without creating an account. We do not require login or registration and will never ask you to set a password or provide payment information. We do not collect your name or email for chat; we only collect them if you contact us or leave a comment (emails not published), and we do not collect phone numbers.

Minimal Personal Data: We aim to collect the least amount of personal data necessary. We do not intentionally collect sensitive personal information (such as financial, health, or biometric data). Please refrain from sharing sensitive personal data when interacting with the AI chat. We do not knowingly collect data from children under 13, and our service is not directed to minors.

2. Information We Collect

a. Information You Provide (AI Chat Inputs): When you type messages or questions into the Qwen AI chat interface, the content of your input is processed by our AI in order to generate a response. These user inputs may be temporarily logged on our servers. We use this data solely to provide you with the chat service, and to maintain and improve the AI (for example, debugging issues, preventing abuse, and enhancing answer quality). These chat logs do not include any account identifier (since you use the service anonymously), but they may contain personal information if you voluntarily include it in your conversation. We do not use chat input content for marketing or any purpose other than service improvement, and we delete or anonymize chat logs after a temporary period once they have served these purposes.

b. Information Collected Automatically: Like most websites, we automatically collect certain technical information when you visit Qwen AI Chat:

Device and Usage Data: This includes your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of access. We use this data for ensuring service reliability, security, and analytics. For example, we log IP addresses to detect malicious or excessive usage (such as DDoS attacks) and to derive approximate location (e.g. country level) for compliance (like showing the correct consent banner).
Cookies and Similar Technologies: We use cookies and related tracking technologies to operate our site and to collect analytics and advertising data (see Cookies & Tracking below for details). These may record information such as your browser identifiers or site preferences.

We do not collect biometric identifiers, precise GPS location, social media profile information, or any data unrelated to providing and monetizing our chat service.

3. How We Use Your Information

We use personal and usage information for the following purposes, in accordance with applicable law:

To Provide the Service: Process your chat inputs and generate AI responses. For users in the EEA/UK, this processing is based on your request and our need to perform the service you are accessing (GDPR Art. 6(1)(b)).
To Improve and Maintain the Service: Monitor chat sessions and site usage to debug performance issues, fix errors, and develop new features. We may temporarily analyze chat logs and user feedback to train and refine our AI models or filters. We use aggregated or anonymized data wherever possible for improvement purposes. (Our legitimate interest in improving our services is the lawful basis under GDPR Art. 6(1)(f) for this processing, and we ensure this does not override your rights).
To Ensure Security and Prevent Fraud: Use IP addresses and cookies to apply security measures via Cloudflare (see Section 5) and other tools. This includes protecting the site from spam, abuse, and malicious attacks (e.g. using IP reputation and bot detection). We may block or filter certain usage that looks like an attack or misuse. These activities are in our legitimate interests for maintaining a safe service.
To Show Advertisements: Display Google AdSense ads on our site to support our free service. Ad networks may process certain data (like cookie identifiers and browsing info) to serve you relevant ads (see Advertising below). Where required by law, we will obtain your consent for advertising cookies.
Analytics: Use Google Analytics and similar tools to understand how users interact with our site (e.g. which pages are visited, session length) so we can optimize user experience and troubleshoot technical issues. Analytics data helps us understand overall usage patterns (e.g. number of visitors, popular features) without identifying individual users. We have configured Google Analytics to anonymize IP addresses for users in the EU/UK.
Compliance with Legal Obligations: If we are required by law to retain or disclose information (for example, responding to lawful requests by public authorities or to comply with court orders), we will do so. Also, if needed to enforce our Terms of Service or to investigate and defend against legal claims, we may use or preserve relevant data.

We do not sell your personal information to third parties. We also do not use your data to profile you for purposes outside of the above (no automated decision-making that produces legal or similarly significant effects on you, aside from the automated processing inherent in our AI responses which you initiate).

4. Cookies & Tracking Technologies

Cookies are small text files stored on your device to remember information about your visit. Qwen AI Chat uses both first-party and third-party cookies for functionality, analytics, and advertising:

Essential Cookies: Some cookies are necessary for the site to function and cannot be disabled without affecting core functionality. For example, our security provider Cloudflare may set a cookie to distinguish legitimate users from malicious bots and to manage network traffic. These cookies do not store personally identifying information beyond what is needed for security and network management. (Cloudflare’s cookies are considered strictly necessary for security and DDoS protection, and as such may be stored without user consent where law permits.)
Analytics Cookies: We use cookies from Google Analytics to collect information about how visitors use our site. These cookies (e.g., _ga and others) allow Google to recognize your browser or device across visits. The information generated (e.g. pages visited, time on site, referral source) helps us analyze website traffic. We have enabled Google’s IP anonymization feature for Analytics in regions where required, so that your full IP address is not stored. Analytics cookies will only be set with your consent in jurisdictions that require it (e.g. EEA, UK, Brazil). You can opt out at any time (see Your Choices below). According to Google’s policies, we disclose that Google Analytics may use cookies or other identifiers to collect data and process it to provide us reports and insights. For more details, see Google’s own Privacy Policy.
Advertising Cookies: Third-party vendors, including Google, use cookies and similar trackers to serve ads based on your prior visits to our site and other websites. Google’s use of advertising cookies (such as the DoubleClick/Google Ads cookies) enables it and its partners to show ads to you based on your visit to Qwen AI Chat and/or other sites on the Internet. These cookies may track things like your browser’s browsing activity and interests (determined from sites you visit) in order to show more relevant ads. Ad Personalization: If you consent to personalized ads, Google may use your data to tailor the ads you see on our site. If you opt out (via our consent banner or other means), Google will serve non-personalized ads (which are targeted using contextual information only, not user profiling). Users can also opt out of personalized Google ads by visiting Google’s Ads Settings, or opt out of certain third-party advertising cookies by visiting the NAI’s opt-out page at aboutads.info.

We have implemented a Google-approved Consent Management Platform (CMP) on Qwen AI Chat that complies with the IAB Transparency & Consent Framework (TCF) v2.2. This CMP will present a cookie consent banner to users in applicable regions (such as Europe) and will allow you to set your preferences for Analytics and Advertising cookies. The CMP is integrated with Google Consent Mode v2, meaning that Google’s tags adapt to your consent choices – for example, if you decline analytics or ad cookies, Google’s scripts will adjust their behavior and refrain from setting those cookies or will operate in a limited mode. In other words, Consent Mode communicates your consent status to Google, and Google’s services will “respect users’ choices” by not writing or reading disallowed cookies. This helps us honor privacy regulations by only using cookies when we have a lawful basis.

Your Cookie Choices: You have the right to control cookies:

When you first visit, our CMP will ask for your consent for non-essential cookies. You can accept or reject categories of cookies (e.g. Analytics, Advertising). You can change your preferences at any time by accessing our cookie settings (via the CMP interface on our site).
Additionally, most web browsers let you refuse or delete cookies through settings. You can set your browser to block cookies or alert you when cookies are being sent. However, if you disable all cookies (especially essential ones), some parts of our site may not function properly (for example, security features or remembering that you opted out of certain cookies).
For more information on cookies and how to manage them, you can visit resources like cookiechoices.org which provide guidance on implementing cookie consent, or aboutads.info for opting out of targeted ads.

5. Third-Party Services and Data Sharing

To operate Qwen AI Chat, we rely on certain trusted third-party services who process data on our behalf. We carefully select these partners and ensure they commit to protecting your information through appropriate agreements (such as data processing addenda). The key third parties we use are:

Cloudflare (Content Delivery & Security): We use Cloudflare to provide CDN (content delivery network) services, DDoS protection, and other security features for our website. This means that when you access qwen-ai.chat, your requests are routed through Cloudflare servers which serve cached content and filter out malicious traffic. In the process, Cloudflare will see your IP address and device information as part of the network communication. Cloudflare may place cookies (such as __cf_bm for bot management) on your browser to distinguish legitimate users from bots. These cookies and Cloudflare’s processing of data are solely for protecting our site and improving load times, and Cloudflare does not use this data for its own marketing or advertising. Cloudflare is based in the USA; thus, data (like IP addresses) may be transferred to and processed in the United States for analysis and mitigation of attacks. Cloudflare is a service provider to us, and is contractually obligated to protect your data and only use it for the purposes we specify (security and performance). For more details, see Cloudflare’s Privacy Policy (Qwen AI Chat is simply a customer of Cloudflare).
Google AdSense (Advertising): We participate in the Google AdSense program to display advertisements. As mentioned, Google may collect certain information from our site visitors through cookies or similar tracking tech in order to serve ads and perform fraud detection. This information can include device identifiers, IP address, browsing activity on this site or others, and your interactions with ads. Google acts as a third-party ad network on our site. We do not share any information with Google that directly identifies you (such as name or contact info), and we have configured our ad tags not to pass them any sensitive data. However, by virtue of loading ads, Google will receive your device’s IP and may set cookies to learn about your web surfing (if you consent, in applicable regions). Data Use by Google: The data Google collects is used to personalize ads (if you allowed), measure ad effectiveness, and detect fraud or abuse. Google may combine information from our site with info from other sites you visit that also use Google services, in accordance with Google’s policies. For example, if you’ve visited other websites with AdSense, Google may use that history to decide what ads to show you on our site. Please see Google’s Privacy Policy and Google’s Ad Technology Providers list for details on how they process data. You can opt out of Google’s personalized advertising as described in Section 4. Disclosure: In compliance with Google’s AdSense Required Content policy, we inform you that third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet. You may opt out of personalized advertising from Google by visiting Google’s Ads Settings. Alternatively, you can opt out of some third-party vendors’ use of cookies for personalized ads by visiting the DAA’s opt-out site. We also honor the Global Privacy Control signal for California and U.S. users (see Section 8), which will opt you out of sale/sharing of data for advertising.
Google Analytics (Analytics): As noted, we use Google Analytics to gather aggregated, non-identifying data about site usage. Google Analytics may set cookies or use browser web APIs to collect data like page requests, device/browser metrics, and referring URLs. This helps us understand user behavior in aggregate. Google acts as a data analytics provider. The data collected is largely statistical. However, because Google Analytics can technically involve unique identifiers (cookie IDs, IP address (truncated/anonymized in EU), etc.), we treat it as personal data under privacy laws. We have accepted the Google Analytics Data Protection terms which means Google is a data controller for certain Analytics data (Google uses the data to provide and improve its analytics services to us) under a Controller-Controller relationship. Google may use the collected data to improve Google Analytics, but it cannot share that data with other Google products without your consent. You can prevent Google Analytics from recognizing you on return visits by disabling cookies or using Google’s Analytics Opt-out Browser Add-on. We also respect if you decline analytics cookies via our CMP.
Hosting and Infrastructure: (If applicable) Our website servers or cloud infrastructure may be provided by [Any hosting provider]. In such case, the hosting provider will process data that passes through the site (including possibly log files of visits). We ensure any hosting providers adhere to strict confidentiality and security obligations. (Note: If Qwen AI Chat is using a specific cloud service or if the AI is hosted on a cloud, mention here. If not, omit.)

We do not sell or rent any of your personal information to third parties. We also do not share your personal data with third parties for their own direct marketing purposes. The only parties who receive personal data are:

Service providers/Processors working on our behalf (as described above, e.g., Cloudflare, Google in certain capacities), and they are bound to use it only for providing their services to us.
Ad partners (like Google) who act as independent controllers of some data for ad personalization (with your consent). They do not get directly identifying information from us, only online identifiers and context.
Law Enforcement or Regulators: if we are required by law to disclose information, or in the event of a legal process (subpoena, court order, etc.), we may share only the data necessary and will attempt to notify you if permitted.
Business Transfers: In a hypothetical future where the Qwen AI Chat service or its operating team undergoes a merger, acquisition, or asset sale, user data could be transferred to the successor entity under the same privacy commitments. We will notify users and seek consent if required by law in such cases.

6. Data Retention

We keep personal data only for as long as it is needed to fulfill the purposes described in this Policy, unless a longer retention period is required by law. Because we do not require accounts, much of the data we collect (like cookies or logs) is associated with anonymous identifiers rather than a persistent user profile. Here are our general retention practices:

Chat Logs: Any logs of your AI chat interactions (prompts and responses) that are stored for debugging/improvement are retained temporarily. Typically, raw chat logs are kept for a short period (e.g. for a few days or weeks) and are periodically purged or anonymized. We may retain aggregated statistics about chats (e.g., how many questions asked per day, common issues) indefinitely for analytics, but those statistics contain no personal content. If a particular chat interaction triggers a review for policy violations or technical errors, we might retain that log longer as necessary to resolve the issue or to document abuse.
Server Logs: Our web server and security logs (which include IP addresses, timestamps, URLs accessed, user agent, etc.) are generally retained for 90 days (approximately 3 months) for security analysis and then automatically deleted or anonymized. In cases of serious security incidents, relevant log excerpts may be kept longer to investigate or cooperate with authorities.
Cookies: Cookies have varied lifespans. Some essential Cloudflare cookies last only 30 minutes or until you close your browser (they are session cookies), while others (like advertising cookies) might persist for 6 months to 2 years unless you clear them. You can clear cookies at any time from your browser, which deletes the data stored in them. Our cookie consent tool will periodically ask you to reconfirm choices, in compliance with regulations.
Analytics Data: Data in Google Analytics is retained for a period we have configured (e.g., 14 months) after which it is deleted on a rolling basis. We review aggregated Analytics reports which do not contain identifiable user data, and may keep those reports indefinitely.
Ad Data: Google AdSense data about ad impressions and clicks on our site is stored by Google. We do not store that data on our systems except in aggregate (e.g., total revenue, which has no personal detail). Google typically retains advertising data as per their own policies; for example, Google’s advertising cookies may expire after 2 years if not refreshed.
Contact Emails: If you contact us via email (at [email protected]), we will retain the correspondence and your email address for as long as needed to respond and resolve your inquiry, and for a short period thereafter in case of follow-ups. Official complaint or rights-request correspondence may be retained longer to demonstrate compliance.

When we no longer need personal data, we will securely delete it or anonymize it so it can no longer be associated with you. If deletion is not immediately possible (for example, because the data is stored in backup archives), we will ensure it remains securely stored and isolated from further active use until deletion is feasible.

7. Data Security

We take security measures to protect the personal information under our control from loss, misuse, and unauthorized access or disclosure. These measures include:

Encryption: The Qwen AI Chat website is served over HTTPS. This means data transmitted between your device and our servers (including your chat content and any personal data) is encrypted in transit using TLS. We also encrypt any sensitive data at rest when applicable.
Network Security: By using Cloudflare, we add an extra layer of protection against DDoS attacks and malicious traffic. Cloudflare’s systems analyze traffic and block suspicious activity before it reaches our servers. This helps keep the site stable and secure. Cloudflare also provides a Web Application Firewall (WAF) which filters out known attack patterns.
Access Controls: Only authorized team members of Qwen AI Chat (a small independent team) have access to server systems and logs that contain user data. Access to logs and databases is protected by strong authentication and is limited to what is necessary for operation and maintenance. We ensure that anyone with access to personal data is bound by confidentiality obligations.
Monitoring and Auditing: We monitor our infrastructure for potential vulnerabilities or intrusions. Regular software updates and patches are applied to keep our systems up to date. We utilize logging to track access to data and will investigate any suspicious activity.
Data Minimization: As described, we minimize personal data collection. By not storing what we don’t need (like not keeping long-term profiles or unnecessary personal details), we inherently reduce the risk exposure.
Incident Response: In the event of a data breach or security incident affecting personal data, we have procedures in place to contain the incident and mitigate harm. Where required by law, we will notify affected users and regulators (e.g., supervisory authorities) in a timely manner.

No website or Internet transmission is completely secure, so we cannot guarantee absolute security of data. However, we follow industry best practices and continually work to improve our safeguards. You also have a role in security: we encourage you to use the latest browsers and keep your devices secure. Note that since we do not use passwords or accounts, you don’t need to worry about credential security on our site, but always be cautious about what information you choose to share in the chat (avoid sensitive personal data as noted).

If you suspect any security vulnerabilities or incidents related to Qwen AI Chat, please contact us immediately at [email protected].

8. Your Rights and Choices

Depending on your location, you have certain privacy rights regarding your personal information. Qwen AI Chat is committed to honoring these rights. This section describes general rights available to users, with more region-specific details in the addenda that follow.

Access and Portability: You have the right to request a copy of the personal data we have about you, in a common electronic format. Given that we collect minimal personal data and much is anonymous or pseudonymous (e.g. cookie IDs), we will do our best to locate any data that is identifiable to you (for example, if you provide us an IP address and timestamp, we can search logs). For EU, UK, Brazil and other jurisdictions, this is your right of access. We will provide the information, or explain if we have none, typically within one month (or as required by law).
Correction (Rectification): If you believe that any personal data we hold about you is incorrect or incomplete, you have the right to request that we correct it. For example, if by any chance we had your email or other info and it’s wrong, we’ll fix it. (Note: Because we intentionally avoid collecting user-provided personal info, this may rarely apply. But if you, say, emailed us and your name was spelled wrong in our contact log, we can update it.) Users in the EU/UK have the right to rectification. We will rectify inaccurate data promptly upon verification.
Deletion (Right to be Forgotten): You can request that we delete personal information we have collected from or about you. This is also known as the right to erasure. For example, if you contacted us and want your email correspondence deleted from our records, or if by some mechanism we have store any of your data, you can ask us to remove it. We will honor valid deletion requests unless retention is required by law or overriding legitimate interest (e.g., we may retain a record that someone opted out of cookies, so we continue to enforce that preference). In many cases, we may not have any of your personal data stored (due to no accounts and ephemeral logs), but we will check thoroughly.
Objection to Processing: You have the right to object to certain processing of your data. For example, EU users can object to processing based on our legitimate interests (GDPR Art. 21) – such as analytics or improvement processing. If you object, we will evaluate the request and will cease or limit processing unless we have compelling legitimate grounds to continue or if it’s needed for legal reasons. You can also object to use of data for direct marketing; however, we currently do not send marketing communications or personalize marketing toward identified users.
Restriction of Processing: You can ask us to restrict or “pause” processing of your personal data in certain circumstances (for instance, if you contest the accuracy of data or have objected and await our consideration). While restricted, we will store your data securely but not use it until the issue is resolved. Given our minimal data, restriction requests can also often be handled by simply not using the service or by opting out of cookies (which “restricts” further collection).
Consent Withdrawal: For any processing that you have consented to (e.g. placement of non-essential cookies for ads/analytics in Europe, or any case where consent was our basis), you have the right to withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing done before that. You can manage consent through our cookie banner or settings (to withdraw cookie consent, toggle off those categories), or by contacting us. If you withdraw consent for the AI to process your inputs, note that we cannot provide the service (since the chat inherently processes what you type), but you can choose simply not to use the chat going forward.
Global Privacy Control (GPC): We honor the Global Privacy Control signal, which is a browser setting that communicates an opt-out of data sale/sharing. If your browser or extension sends a GPC signal, our site will treat it as a Do Not Sell or Share request under applicable laws (such as CPRA in California). Specifically, upon detecting GPC:
- We will not use or share your data for personalized advertising (i.e., we’ll instruct ad partners to serve non-personalized ads and disable any selling/sharing of personal info).
- Our consent management platform is configured to automatically register the GPC signal and set your preferences accordingly (effectively opting you out of advertising cookies without you needing to click anything).
- GPC signals are processed in a frictionless manner – we do not treat GPC-enabled users differently in terms of service level or charge any fee, etc. It’s simply a privacy preference we respect. (Note: GPC will generally apply on the specific device/browser it’s enabled. If you use our site on another device without GPC, you may need to set preferences there as well.)
Opt-Out of Sale or Sharing of Personal Data: As noted, we do not “sell” personal data for money. However, “sharing” for cross-context behavioral advertising (as defined under California law) may occur (i.e., using cookie data with third-party ad networks). You have the right to opt out of this sharing. You can do so by:
- Using the GPC signal as described above (easy one-step opt-out for all sites that honor it).
- Or using our site’s “Do Not Sell or Share My Personal Information” link or cookie settings (if provided) to opt out of advertising cookies.
- Or contacting us at [email protected] with a request to opt out, and we will ensure no personal data is shared with third-party advertising partners for your browser (we may provide you an opt-out cookie to honor this request).
Non-Discrimination: We will never retaliate or discriminate against you for exercising any of these privacy rights. This means we will not deny you our services, charge you different prices, or provide a different level of service because you made a privacy request (except insofar as certain data is necessary for service – e.g., if you opt out of chat processing, we can’t very well provide the AI response since it’s needed to function). For California residents, this is your right to non-discrimination under the CPRA, and we fully uphold it.

To exercise any of your rights, please contact us at [email protected]. We may need to verify your identity to process certain requests (especially for access, deletion, or correction) – for example, by asking for information that matches our records (like providing the IP and time you used the service so we can find data associated with it). This is to ensure we don’t release or delete data for the wrong person. Verification will be reasonable and not excessively burdensome.

For specific regional rights and information (such as additional rights in Europe, Brazil, or detailed disclosures for California), please see the following sections.

9. International Data Transfers

Qwen AI Chat is operated by an independent team based in Egypt (with infrastructure that may be in data centers outside of Egypt). When you use the Site from any country, your data will likely be transferred to and processed in other countries. In particular:

Our servers or cloud services may be located in data centers in the United States or European Union (or other jurisdictions, depending on our hosting arrangements).
Our service providers (Google, Cloudflare) are primarily U.S.-based companies. This means personal information (like IP addresses, cookie identifiers, and chat data) might be transmitted to or accessed from the United States. It could also travel through other countries where Cloudflare has servers (which can include various countries worldwide for CDN caching) or where Google maintains infrastructure.

Privacy Laws & Data Protection: Different countries have different data protection laws. When we transfer data from users in the European Economic Area (EEA), United Kingdom, or Switzerland to countries that the European Commission (or UK authorities) does not consider to have an adequate level of data protection (like the U.S.), we take steps to safeguard your privacy:

We use Standard Contractual Clauses (SCCs) as approved by the European Commission (and UK “International Data Transfer Addendum” as needed) as a legal mechanism for such transfers. These are contractual commitments between us and the recipient of the data (for example, included in our agreements with Google and Cloudflare) to protect personal data according to EU GDPR standards.
Some of our U.S. service providers (like Google) may also participate in the EU-U.S. Data Privacy Framework or similar schemes that facilitate compliant transfers. (For instance, if Google is certified under the new Data Privacy Framework, data transferred to Google in the U.S. is covered by that certification).
Where applicable, we rely on the IAB TCF signals to ensure that when ad tech vendors receive EU/UK user data, they have committed to appropriate safeguards as well.

For users in Brazil, any transfers of personal data outside Brazil are done in compliance with the LGPD’s requirements (we may use measures analogous to SCCs, or transfer under your consent where applicable, or other legal bases allowed by LGPD).

For users in Canada, personal information may be transferred outside of Canada (e.g., to the U.S.) for processing. Such information may then be subject to foreign laws (and accessible to foreign governments or courts). However, we will ensure that any foreign service providers are bound by contracts to provide a comparable level of protection as required by Canadian law. For example, our contracts with U.S. vendors include commitments to maintain confidentiality and security of personal data.

By using Qwen AI Chat, you understand that your information may be transferred to our facilities and those third parties with whom we share it as described in this policy, which may be located in countries other than your own. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy wherever it is processed.

If you have questions about our data transfer practices or need more specifics (such as obtaining a copy of the SCCs we use), you can contact us at the email provided.

10. Additional Notices for Specific Regions

To ensure our Privacy Policy is clear and compliant globally, we provide the following region-specific disclosures and information:

A. Users in the European Economic Area (EEA) and United Kingdom

If you are in the EEA or UK, the following additional provisions apply in accordance with the General Data Protection Regulation (GDPR) and UK Data Protection Act (2018)/UK GDPR:

Controller: Qwen AI Chat (operated by an independent team based in Egypt) is the “data controller” of your personal data processed via the Site. This means we determine the purposes and means of processing. You can contact us at [email protected] for any queries. (At this time, we have not appointed an EU representative as we do not systematically monitor or process large-scale EU data, but we will adhere directly to GDPR obligations. If required, we will designate a representative and update this Policy accordingly.)

Legal Bases for Processing: We only process your personal data when we have a legal basis under Article 6 GDPR. The legal bases we rely on are:

Performance of a Contract (Art. 6(1)(b)): When you use the Qwen AI Chat service, you are effectively requesting us to provide AI-generated responses – this forms a contract-like relationship. We process your chat inputs and necessary technical data to deliver the service you asked for. This is considered necessary for the performance of our contract with you (even if the service is free, you agree to our Terms by using it, and we deliver results).
Legitimate Interests (Art. 6(1)(f)): We process some data for our legitimate interests, in a manner that does not override your rights and freedoms:
- Improving our AI model and website functionality (we have an interest in enhancing our product) – we use only the minimal data needed and often anonymize it, and users benefit from a better service.
- Ensuring security (preventing fraud/abuse, debugging) – it’s in our and all users’ interests that the service is secure and reliable.
- Basic analytics to understand site usage – helps our legitimate interest in operating a competitive service. We respect Do-Not-Track and consent choices for analytics in compliance with ePrivacy, ensuring minimal impact to user privacy.
  In all cases, we assess that our interests are not overridden by your privacy rights, especially since data used is limited and often non-identifiable. You have the right to object to processing based on legitimate interest (see Section 8).
Consent (Art. 6(1)(a)): We will obtain your consent for certain processing where required by GDPR or ePrivacy laws:
- Placing non-essential cookies (analytics, advertising) on your device.
- Processing your data for personalized advertising or sharing data with third-party advertising partners. Our CMP records your consent (or refusal) for these activities. You can withdraw consent any time (which will not affect data processed prior).
- If in the future we engage in any email marketing (currently we do not), we would only do so with your consent or allowable soft opt-in and provide opt-out mechanisms.
Legal Obligation (Art. 6(1)(c)): If we need to process or retain data to comply with a legal obligation (e.g., tax law, law enforcement request, etc.), we will do so. For instance, retaining some data for potential law enforcement may be justified under law.
Protect Vital Interests/Public Interest: It is highly unlikely our processing would fall under Art. 6(1)(d) or (e) (vital interests or official authority), as we are not performing tasks in the public interest or life-and-death situations.

Your GDPR Rights: As an EU/UK data subject, you have the rights outlined in Section 8 (access, rectification, erasure, restriction, portability, objection, and not to be subject to significant automated decisions). We reiterate:

You can request a summary of your personal data that we process, and we will provide it (Article 15 GDPR).
You can correct your data (Art. 16).
You can request deletion (Art. 17) – and we will comply unless an exemption applies.
You can restrict processing (Art. 18) or object (Art. 21) as described.
You have the right to data portability (Art. 20) for any data you provided to us that we process by automated means on the basis of contract or consent. Given our service, this might apply if, say, you wanted a copy of all chat questions you asked and their answers; we could provide that if available.
If we ever engaged in automated decision-making that has legal or similar significant effects, you’d have rights under Art. 22. However, Qwen AI Chat does not make any legally significant decisions about individuals – the AI’s responses are informational and not used to profile you in a consequential way.

Data Protection Authority: You have the right to lodge a complaint with your local Data Protection Supervisory Authority if you believe we have infringed your privacy rights. For example, in the UK this would be the ICO, in France the CNIL, in Germany your state’s DPA, etc. We encourage you to contact us first so we can address your concerns directly, but you are free to contact the authority at any time.

International Transfers: As detailed in Section 9, if we transfer your data out of the EEA/UK, we ensure appropriate safeguards like SCCs. You can request more info from us about these safeguards.

Joint Controllers: No third party is acting as a joint controller with us for your data. Google Analytics and AdSense operate as separate controllers for some data; we each have responsibilities (Google provides opt-outs and disclosures for their part, as do we).

Cookie Consent (EU ePrivacy): We comply with the EU ePrivacy Directive (and UK PECR) regarding cookies. That’s why we utilize a CMP to get your consent for non-essential cookies. If you choose not to allow certain cookies, we will honor that (as described in Section 4). Note: Some limited cookies (like Cloudflare’s security cookie) are exempt from consent requirements as they are strictly necessary for service you request (loading the site securely).

B. Users in Brazil (Lei Geral de Proteção de Dados – LGPD)

If you are in Brazil, you are entitled to the protections of the LGPD. In this section, “personal data” and “sensitive personal data” have the meanings defined in LGPD.

Legal Bases under LGPD: We ensure that we have a legal basis for processing your data under the LGPD (Law No. 13,709/2018):

We obtain your consent for use of cookies that are not strictly necessary and for any processing that Brazilian law would require consent (e.g., marketing or certain data sharing). For instance, by interacting with our cookie banner and choosing to allow advertising cookies, you are consenting to that processing. You can revoke consent at any time, as LGPD allows, and it will not affect processing already done.
We process data without consent when necessary to fulfill our obligations in providing the service (which can be analogous to the “contract” basis in other laws) or to meet legitimate interests (LGPD Art. 10) in improving security and functionality, carefully balancing your rights.
We may also rely on other bases permitted by LGPD, such as compliance with legal obligations, exercise of rights in judicial proceedings, or protection of life (though the latter is unlikely to be relevant).
If we ever process any sensitive personal data (e.g., if a user inadvertently submits something about health or ideology in a chat), we would only process it as allowed by LGPD (which typically requires explicit consent or other specific justifications). We do not aim to collect such data.

Your Rights under LGPD: Brazilian data subjects have the rights listed in Article 18 of LGPD. These include:

Confirmation of Processing: The right to confirm whether we process your personal data. We will confirm if yes or no, typically in response to a request.
Access: The right to access your personal data that we hold, similar to the EU right of access. We will provide an overview or copy of data pertaining to you upon request.
Correction: The right to request correction of inaccurate, incomplete, or out-of-date data.
Anonymization, Blocking, or Deletion: The right to request anonymization, blocking, or deletion of unnecessary or excessive personal data or data processed in non-compliance with LGPD. Since we minimize data, if you believe something falls in this category, we will take appropriate action to honor this.
Data Portability: The right to data portability to another service provider, by request, provided it does not violate our IP or business secrets. (In practice, since we don’t have accounts, portability might be limited to something like giving you your chat transcripts or similar.)
Deletion of Consent-based Data: The right to request deletion of personal data processed with your consent, except where an exception applies. For example, if you had consented to something and then withdrew, you can ask us to delete that data.
Information about Sharing: The right to know which public and private entities we share data with. In this Policy, we list our third-party partners (Google, Cloudflare, etc.). You can request more details on recipients if needed, and we will inform you (Art. 18, VII).
Information about Consent Option: The right to be informed about the possibility of denying consent and the consequences of such denial. We hereby inform you: you are not obliged to consent to any optional data processing. If you refuse advertising cookies, the consequence is simply that you’ll see non-personalized ads (or possibly fewer ads). If you refuse analytics, there is no impact on using the site. If you refuse processing of chat content (by not using the site), the only consequence is you cannot get AI answers. We do not deny core services if you refuse data processing that is not strictly necessary.
Revocation of Consent: The right to withdraw consent at any time (Art. 8, §5). We make it as easy to withdraw as to give (e.g., via the CMP interface). Upon withdrawal, we will cease processing that was based on consent.

To exercise these rights, contact us at our email. We will respond as soon as possible, within the timeframe of Brazilian regulations. Some requests (like deletion or access) might be fulfilled immediately or within a practical period (LGPD suggests within 15 days for a full response to an access request in some cases).

Controller and Processor: For LGPD purposes, Qwen AI Chat is the controller of personal data. Our third-party service providers (Cloudflare, etc.) are generally operators (processors) processing data per our instructions. In some cases (like Google’s advertising use), they might be considered separate controllers for certain processing activities.

Data Protection Officer (DPO): LGPD requires a person in charge (“encarregado”) of personal data processing. At this time, our privacy point of contact is [Name of person, if applicable] who can be reached at [email protected]. (If we are a small operation not mandated to have a DPO, we still provide this contact for simplicity).

ANPD: You have the right to petition the Brazilian National Data Protection Authority (ANPD) if you believe your rights under LGPD were violated. We hope to resolve any issue directly, but you can seek ANPD’s mediation or enforcement as needed.

International Transfers (Brazil): Data may be transferred outside Brazil, as described. We will only transfer to countries or international organizations with an adequate level of protection or using mechanisms provided in Art. 33 of LGPD (such as standard contractual clauses, consent, etc.). For example, by using our site, you give us consent to transfer data internationally for the purposes outlined, and we also rely on standard safeguards in our contracts.

C. California Consumers (California Consumer Privacy Act as amended by CPRA)

If you are a resident of California, USA, you are protected by the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This section uses terms as defined in the law (like “Personal Information,” “Sell,” “Share,” etc.).

Categories of Personal Information Collected: In the past 12 months, we may have collected the following categories of personal information about consumers using Qwen AI Chat:

Identifiers: This includes direct identifiers like your IP address and unique online identifiers such as cookie IDs or device IDs. (We do not collect your name, postal address, email, or other traditional contact identifiers unless you voluntarily provide them by contacting us.)
Internet or Other Electronic Network Activity Information: This includes your interactions with our website, such as browsing history on our site, search queries or questions you submit to the AI, clickstream data, and information about your engagement with advertisements on our site. It may also include logs of the pages or features you use and timestamps.
Geolocation Data: We do not gather precise GPS location, but we may infer approximate location (e.g., city, region) from your IP address for purposes like displaying relevant content or complying with regional requirements. We do not store a dedicated “geolocation” field, but IP addresses inherently give a rough location.
Commercial Information: Not applicable. (We do not collect information about products or services purchased, as we have no sales.)
Biometric Information: Not collected.
Sensory Information: Not collected (we don’t record audio, etc., unless you count text inputs as “electronic” which is already covered above).
Professional or Employment Information: Not collected.
Education Information: Not collected.
Protected Classifications: Not intentionally collected. We do not ask for your age, gender, race, etc. Any such attributes would only be present if you included them in chat content.
Inferences: We do not create advanced “profiles” about you for our own use. However, our advertising partners (like Google) might use the data from cookies to draw inferences about your interests (e.g., inferring you are interested in tech based on sites visited) in order to show ads. Those inferences are handled by Google on their side, not stored by Qwen AI Chat.

Sources of Personal Information: We collect the above categories of information from:

You, the Consumer: Information you voluntarily provide by using the service, such as the content of your chats (internet activity info) or if you contact us via email.
Your Device/Browser: Information collected automatically through cookies or web technologies when you interact with the site (IP address, device attributes, browsing actions).
Third Parties: We do not purchase personal data from data brokers or get info from third parties about you. However, third-party advertising and analytics tools on our site may also contribute information (for example, Google Analytics provides us aggregate data derived from your interactions).

Business or Commercial Purposes for Collecting/Using Personal Information: We use the personal information for the following purposes:

Providing the Service: (IP and chat content used to deliver responses).
Debugging/Repair: (IP and usage logs to identify and fix errors).
Security: (IP and identifiers to detect security incidents, protect against fraud and malicious activity).
Improving the Service: (chat logs and usage data to develop new features and enhance AI quality).
Advertising and Marketing: (cookie identifiers and browsing info to show ads and measure ad effectiveness – this can be considered a “commercial purpose” as it helps us fund the service).
Analytics: (understanding user interactions to improve functionality – overlaps with improving service).
Legal Compliance: (retaining data as needed to comply with laws, e.g., to respond to law enforcement).

See Section 3 (“How We Use Your Information”) for more details, which align with these purposes.

Disclosure of Personal Information to Third Parties: In the past 12 months, we have disclosed (not sold) the following categories of personal information for our business purposes, to the following categories of recipients:

Identifiers (IP, cookie ID) – disclosed to:
- Service Providers: e.g., Cloudflare (for security), which uses IP for routing and protection; Google Analytics (for analytics) which receives online identifiers; Google AdSense (for ad serving) which receives cookie IDs and IP to serve ads. These disclosures are for business purposes like site security, analytics, and advertising.
- Analytics/Advertising Partners: As above, Google receives certain identifiers through its scripts on our site.
Internet/Electronic Activity – disclosed to:
- Service Providers: e.g., Google Analytics receives information about pages visited, etc., to provide aggregated analytics.
- Advertising Partners: Google AdSense may receive info on your site interactions (e.g., that you loaded a page with an ad) for ad delivery and reporting.
- No other third parties beyond those service integrations.

We do not disclose personal information to data brokers or unrelated third parties without your direction.

Sale of Personal Information: We do NOT sell personal information for monetary consideration. We haven’t sold any personal information in the past 12 months. In particular, we do not exchange data for money with anyone.

Sharing of Personal Information (Cross-Context Behavioral Advertising): The CPRA defines “sharing” as disclosing personal info to a third party for targeted advertising. Some of the data use on our site might be considered “sharing”:

When we allow third-party ad cookies (Google) to collect and use your identifiers and browsing activity on our site to show you personalized ads, that is sharing under CPRA. This is not a sale (no money is exchanged and the data isn’t used beyond ad services), but it is used for cross-context ad targeting.
In the last 12 months, we may have shared identifiers (like cookie IDs) and internet activity info with Google (our ad partner) for the purpose of behaviorally targeted ads.
Opt-Out of Sharing: You have the right to direct us to stop sharing your personal info for advertising. As detailed earlier, you can exercise this via our cookie consent tool (refuse personalized ads) or sending a Do Not Sell/Share request, or enabling Global Privacy Control on your browser which we honor as an opt-out s.

Use of Sensitive Personal Information: We do not collect “sensitive personal information” as defined by CPRA (which includes data like social security numbers, account passwords, precise geolocation, race/ethnicity, health info, etc.) except possibly your IP address (when used to determine location) could be considered sensitive geolocation if it pinpointed a location. However, we only use IP for approximate region (not precise GPS-level location), and we do not use any sensitive data to infer characteristics about you. We therefore do not use or disclose sensitive personal information for purposes that would require offering a right to limit under CPRA (like we’re not using sensitive data for anything beyond the service request or security).

California Consumer Rights: Under CCPA/CPRA, California residents have the following rights with respect to their personal information:

Right to Know: You can request that we disclose the specific pieces of personal information we have collected about you, as well as additional details like the categories of personal info, categories of sources, purposes for collecting, categories of third parties we disclose to. Essentially, this Privacy Policy is providing much of that information in a general sense (as allowed by CPRA). If you want the specific information tied to you, you can submit a verifiable consumer request. Upon verification, we will provide the required information covering the 12 months preceding your request, or beyond if you specifically request and law allows.
Right to Delete: You can request deletion of personal information we have collected from you and retained, subject to certain exceptions. Once we receive and verify your request, we will delete (and instruct our service providers to delete) your personal information, unless an exception applies (e.g., if we need to keep data to complete a transaction, detect security incidents, comply with a legal obligation, etc.). Given we store minimal data, deletion typically means removing any log entries or cookie identifiers linked to your browser in our systems.
Right to Correct: If you find that any personal information we maintain about you is inaccurate, you can request that we correct it. We will take into account the nature of the personal information and the purposes of processing. (As noted, due to minimal data, this might rarely be needed, but the right is available.)
Right to Opt-Out of Sale/Sharing: As described, you can opt out of the “sale” or “sharing” of your personal information. We provide multiple methods: a “Do Not Sell or Share” mechanism (such as honoring GPC signals and providing the ability to opt out of cookies). Once you opt out, we will instruct our advertising partners to stop using your data for targeted ads. If you come back with the same browser, our site will remember your opt-out preference via a cookie or browser signal.
Right to Limit Use of Sensitive PI: This right is relevant if a business uses sensitive personal information beyond what’s necessary. We do not do so (we don’t use any sensitive info for inferring characteristics or showing ads), so this is not applicable. If that changes, we will implement a limit mechanism.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. That means no denying service, no charging different price, no lowering quality, or suggesting that you’ll get different service unless it’s related to the value of data (we do not offer financial incentives at this time).
Financial Incentives: We do not offer any programs where we pay you or give discounts in exchange for your data. If that ever changes, we will provide a notice explaining the incentive, the terms, and how the value of data was calculated, and obtain your opt-in consent. Currently, no such programs exist.

Submitting Requests: You (or your authorized agent) can submit requests to know, delete, or correct by contacting us at [email protected] with the subject line “California Privacy Rights Request” and detailing your request. Before completing your request, we will need to verify your identity to a “reasonable degree of certainty.” Because we generally do not have account credentials for you, we may ask for information like:

Details of a recent interaction (e.g., the date/time you visited the site and an action you took) to match against our logs.
Your IP address or cookie ID (we might ask you to send a request from your browser to capture the cookie ID, for example).
We will only use the information provided in a request to verify and fulfill your request. If an authorized agent submits on your behalf, we may require proof of their authorization (e.g., a written permission from you or power of attorney, and we may still verify your identity with you directly as well).

We endeavor to respond to consumer requests within 45 days as required by CCPA. If we need more time (up to an additional 45 days, totaling 90), we will inform you of the reason and extension in writing.

Shine the Light: Separately, California Civil Code §1798.83 (the “Shine the Light” law) permits users of our site who are California residents to request certain information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes (without consent). Thus, there is no such information to provide.

Do Not Track: Some browsers broadcast “Do Not Track” (DNT) signals. The web industry is currently in flux on how to respond to DNT. We treat Global Privacy Control signals as described above. Aside from that, our site currently honors the GPC as a valid opt-out mechanism. Standard DNT signals (aside from GPC) are not separately honored (because we rely on the more recent GPC standard), but effectively, if you have a DNT on, our expectation is you likely wouldn’t opt into cookies and our CMP will align with that (if your browser blocks trackers, it has similar effect).

For more information about our privacy practices or your rights under California law, you can contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites or integrate third-party services (besides those mentioned, e.g., a link in our FAQ to Alibaba Cloud’s site, etc.). If you click on another website or interact with a third-party service, their privacy policies will govern those interactions. We are not responsible for the privacy practices of other sites or services. We encourage you to read the privacy statements of every website you visit, especially those you navigate to from our site.

For example, if we have a blog section that links to external references or an “About Qwen AI” page linking to Alibaba’s documentation, those sites have their own data collection. This Privacy Policy applies only to Qwen AI Chat.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will:

Post the updated Privacy Policy on this page with a new “Last Updated” date at the top.
If the changes are significant, we may provide a more prominent notice (such as adding a notice on our homepage or informing users via an in-service banner).

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. If you continue to use Qwen AI Chat after Privacy Policy changes go into effect, it will constitute acceptance of the updated policy to the extent allowed by law.

If any change requires individual consent or is materially less protective than what you agreed to at the time of data collection, we will obtain your consent as needed under applicable laws.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Email: [email protected]
Operator Name: Qwen AI Chat (Independent Team)

We will do our best to respond promptly and address your inquiry. Your privacy is important to us, and we welcome feedback about any aspect of our privacy practices.