Privacy Policy
Pass the Floor ("the service", "we") is operated by AI SIMPLE APPS LLC, in the United States. This policy explains what data the service collects, why, who it is shared with, how it is protected and when it is deleted.
What we collect
- Sign-in: your Google account's permanent id and email address (see below). We never see your Google password.
- Profile: your username and the nicknames you choose.
- Chats: the messages and files you send, and the AI's replies.
- Friends: your friend requests, friendships and blocks.
- Payments: the amounts and dates of your recharges and AI charges. Card details go straight to Stripe and never reach us.
Google user data
What we access. When you sign in with Google, we ask Google only for the openid and email scopes: your Google account's permanent id and your email address. We have no access to your Gmail, contacts, Drive, calendar or any other Google data.
How we use it. The id links your Google account to your Pass the Floor account so you can sign in. The email address is used to suggest a username when you sign up and is shown only to you, on your Account page, so you can see which Google account is linked. We refresh it each time you sign in. We do not send you marketing email.
Sharing. Your Google id and email address are not shared with anyone: not with other users, not with AI providers, not with Stripe, and never sold. Other users find you by your username.
Limited Use. Pass the Floor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used for advertising, never sold, and never used to train AI models.
AI providers
When you or someone in a chat calls the AI, the chat's messages and files are sent through OpenRouter to the model's provider, which generates the reply. These requests are sent under the service's own account. Each one is tagged only with the internal account number of whoever pays for it, which OpenRouter uses to detect abuse; it carries no username, email address or Google id, so the number means nothing outside our service and OpenRouter cannot tell who you are. When more than one person is in a chat, each message is labelled with its author's nickname in that chat so the AI knows who said what, and anything you write in a message is sent as you wrote it.
We keep no copy of what is sent to the AI beyond the conversation itself, which you can see and delete. OpenRouter and the model's provider handle the request under their own privacy terms.
If a model uses the web search or page fetch tools, our server sends the search terms or page address the AI chose to DuckDuckGo or to that web page, without any information about you.
Who else sees your data
- People in your chats: everyone in a shared chat sees its messages and the nicknames used in it.
- Stripe processes payments. We only tell Stripe the recharge number and amount, and Stripe collects your payment details under its own privacy policy.
We sell nothing to anybody.
How we protect your data
All traffic between your browser and the service is encrypted with HTTPS. The cookie that keeps you signed in is encrypted and signed, so it cannot be read or forged. The database runs on our own server, is not reachable from the internet, and only the operator can access it. Card details never reach our server.
Logs
The web server keeps no access logs: it does not record the pages you visit or your browser. It does keep an error log for troubleshooting, which records the IP address of a request only when that request runs into a server error; these entries are deleted after 14 days. The service's own logs record only errors, and never contain names, email addresses, IP addresses or message content; at most they contain an internal account or conversation number.
Cookies
We use one encrypted cookie to keep you signed in, and short-lived ones during sign-in and sign-up. Your light or dark theme preference is kept in your browser's local storage. There are no tracking or advertising cookies, and fonts and scripts are served from our own server.
How long we keep data
Your data is kept while your account exists. Chats and messages stay until they are deleted by you or by the chat's owner.
Deleting your account is immediate, from the Account page. Your Google links, username, nicknames, friendships and model choices are removed, and chats you own are deleted. Messages you wrote in other people's chats stay in those chats, shown as written by "Deleted user". Payment and usage records are kept because accounting law requires it; they are tied to an anonymous account number, not to your name. Your old username stays reserved for 30 days so that nobody can pose as you.
Changes to this policy
If we change how we handle your data, we will update this page and its effective date, and announce material changes before they take effect.
Contact
To ask about your data or to have it deleted: aisimplebzbusiness@gmail.com.