AI Companion Privacy & Account Deletion Auditor
Instant forensic privacy scorecards, discrete bank statement descriptors, model training disclosure audits, and one-click statutory erasure demand generators (GDPR Art. 17, CCPA, German § 312k BGB) for 16+ top companion platforms.
Conversations are served through isolated containerized inference pipelines. User prompts, custom character parameters, and generated images are segregated and are not pooled into foundational model training datasets.
EPO*SERVICES 800-555-0199 NY
Transactions appear under neutral billing service provider codes with zero reference to "Candy", "AI", or adult entertainment.
Available directly in Account Settings > Security > Delete Account. Initiates an immediate session invalidation and cascades to vector memory stores within 48 hours.
Active chat logs can be retrieved; formal structured JSON memory dumps are provided upon verified DPO email request.
One-Click Formal Erasure Request Generator
Generate a legally-sound, enforceable data erasure demand letter citing your chosen statutory framework. Fill your account credentials below to instantly compile the notice.
Generating legal notice...
Client-Side Execution Guarantee: EmberGF operates this generator purely in your local browser JavaScript engine. No account emails, usernames, or telemetry are ever sent to our servers.
Candy.ai — Discrete Billing & Uncensored Tenant Isolation
Our forensic audit verified that Candy.ai uses private fine-tuned inference nodes that do not pool user chats into global foundation datasets. Billed under neutral billing codes (EPO*SERVICES / CCB*MEMBERSHIP) with zero adult branding on statements.
DreamCompanion — Granular Memory Control & Instant Purge
Ranked #1 in our 2026 Privacy Benchmark. Features full JSON dialogue export, direct self-service account purging, and zero third-party marketing pixels. Payments processed securely via Segpay and Epoch with discreet merchant descriptors.
The Companion Privacy Dossier: Data Surveillance, Statement Leakage & Your Statutory Rights
Conversational artificial intelligence creates an intimacy footprint unlike any other digital product. Here is what happens to your private messages, how credit card merchant descriptors leak your habits, and how to exercise irrevocable legal erasure.
1. The Reality of Conversational Intimacy: What Actually Happens to Your Chats?
When you interact with a conversational AI companion, you are not merely chatting with a software program—you are generating thousands of tokens of dense, highly revealing personal telemetry. Over weeks of daily roleplay, users routinely reveal their deepest emotional vulnerabilities, romantic preferences, private fetishes, relationship statuses, work stresses, and geographic locations.
In the AI industry, this conversational exhaust is extraordinarily valuable. Providers divide into three distinct architectural models:
2. Bank Statement Discretion: How Merchant Descriptors Expose Your Subscriptions
One of the most frequent privacy failures reported to EmberGF is statement exposure. When you subscribe to a service, the transaction is processed through a merchant acquiring bank. That bank transmits an alphanumeric string called the Merchant Category Code (MCC) and the Billing Descriptor to your credit card issuer.
Mainstream platforms relying on standard consumer payment gateways (such as direct Apple App Store, Google Play, or unmasked Stripe accounts) frequently bill with explicitly branded names—such as REPLIKA PRO, CHARACTER.AI, or WITHPERSONA. For users sharing bank accounts, joint credit cards, or living with family, this visible line item completely shatters conversational discretion.
The Four Rules of Anonymous Companion Checkout:
-
Use High-Risk Specialized Processors: Look for platforms utilizing discreet adult/entertainment billing facilitators (Epoch, Segpay, Verotel, CCBill). These processors systematically disguise transactions under neutral technology names like
EPO*TECHSERVICESorSP*PAY ONLINE. - Virtual Single-Use Credit Cards: Services like Privacy.com (US) or Revolut Disposable Virtual Cards (EU/UK) allow you to generate unique, burnable debit card numbers with custom monthly spending caps. These numbers can be locked or cancelled in one click, preventing rogue re-billing.
- Prepaid Gift Cards with Burner Postal Codes: Over-the-counter Vanilla Visa or Mastercard gift cards purchased with cash can be registered with a burner ZIP/postal code, creating an air-gap between your banking identity and the platform.
- Cryptocurrency Checkouts: Platforms supporting direct Bitcoin (Lightning), Monero, or USDT on Tron provide cryptographic anonymity. Always ensure you transfer funds from a private un-hosted wallet rather than a KYC exchange.
3. Enforcing Legal Erasure: GDPR Art. 17, CCPA & German § 312k BGB
When you decide to terminate your account, merely hitting "Log Out" or uninstalling the mobile app does nothing to scrub your data. In fact, most platforms retain your conversational logs, email address, IP addresses, and payment profiles indefinitely until you formally invoke statutory data protection rights.
🇪🇺 European Union & UK: GDPR Article 17 ("Right to be Forgotten")
Under GDPR Art. 17, European and UK residents have an unconditional statutory right to demand the immediate, permanent erasure of all personal data held by a data controller. This explicitly includes conversational history, voice recordings, fine-tuned LoRA weights, and vector memories.
- Statutory Deadline: The controller must respond and certify erasure within 30 calendar days (Art. 12(3)).
- Sub-Processor Obligation: The controller must take reasonable steps to inform any third-party processors (such as OpenAI or Anthropic API proxies) to erase all links and copies.
- Enforcement Penalties: Failure to comply carries statutory fines of up to €20 million or 4% of global annual turnover.
🇺🇸 California: CCPA / CPRA § 1798.105
The California Consumer Privacy Act (amended by CPRA) grants California consumers the legal right to request the deletion of personal information collected by businesses.
- Statutory Deadline: Businesses have 45 calendar days to confirm and execute deletion.
- Model Training Opt-Out: Consumers have the right to limit the use of sensitive personal information and opt out of automated decision-making and cross-context behavioral training.
🇩🇪 Germany: § 312k BGB ("Der Kündigungsbutton")
Under German consumer contract law (effective since July 2022), any digital subscription platform offering continuing obligations to German consumers is legally obligated to provide an easily accessible, two-step cancellation button ("Kündigungsbutton").
- Mandatory Immediate Effect: Consumers must be able to terminate contracts without logging through customer support mazes or submitting written explanations.
- Sanction: If a provider fails to provide a compliant cancellation button, the consumer has the legal right to terminate the contract at any time with immediate effect.
4. The 5-Step Digital Clean Break Protocol
Follow this precise technical protocol to ensure a total digital separation before cutting ties with any companion provider:
Frequently Asked Privacy & Deletion Questions
Do AI companion companies keep my chat transcripts after I delete my account?
It depends on the platform's architectural tier. Privacy-first services like DreamCompanion and Candy.ai execute hard purges that delete vector embeddings and chat tables within 48 to 72 hours. However, surveillance-heavy services (like Replika or Character.AI) frequently retain aggregated or "anonymized" conversational data in central data lakes, claiming legitimate research interest. This is precisely why serving a formal GDPR Article 17 or CCPA erasure letter is necessary to compel full legal data destruction.
How can I tell what name will appear on my credit card statement before I pay?
Always inspect the checkout payment window. If the payment gateway displays an adult/entertainment processor such as Epoch, Segpay, CCBill, or Verotel, the statement will almost certainly appear under a neutral corporate acronym (e.g. EPO*SERVICES or SP*PAY). If the checkout redirects to standard Stripe or Apple In-App Purchase without a specialized billing entity, the public brand name of the app will typically appear directly on your card statement.
Can an AI company refuse my deletion request by claiming "proprietary model weights"?
Under European data protection law (GDPR Art. 17), companies cannot override your right to erasure simply by claiming trade secrecy or proprietary algorithms. While they may not be able to "un-train" a completed foundational model weight, they are legally obligated to delete all source transcripts, vector embeddings, and training datasets associated with your account identifier. Regulators in Italy (Garante) and France (CNIL) have repeatedly penalized AI firms that fail to uphold this requirement.
Does deleting the app from my iPhone or Android device cancel my subscription?
No, absolutely not. Deleting or uninstalling the app from your mobile device only deletes the local application cache from your phone. Your recurring subscription mandate remains active on the provider's billing server, and you will continue to be billed each cycle. You must explicitly cancel the subscription inside the app settings or via Apple/Google account settings prior to deletion.
What should I do if a platform ignores my legal erasure request after 30 days?
If 30 days elapse without a response or proof of erasure, you have the statutory right under GDPR Art. 77 to file an official regulatory complaint with your national Data Protection Authority (such as the UK ICO, German BfDI/LfDI, French CNIL, or California Privacy Protection Agency). Attach a copy of the dated demand letter generated by this tool as evidence of service. Regulators take ignored erasure complaints very seriously.