How we process your data.

Last updated · July 2026

Data controller

The controller of your personal data — the party that decides why and how it is processed — is:

• Service — AI404, operated at ai404.site.
• Merchant — Tech 404 LLC.
• Registered address — Isahakyan Street 22, 0901 Armavir, Armenia
• Tax ID (TIN) — 04448618
• Email — info@tech404.am
• Phone — +374 41 818088

If you have any question about this policy or about how your data is handled, write to info@tech404.am.

What personal data we process

• Identity and contact data — your name and email address.
• Authentication data — a securely hashed password. If you sign in with Google, the account identifier and email address Google provides.
• Usage and metering data — token usage across your rolling windows, storage used, and the number of projects and live apps, so we can show your limits and apply your plan fairly.
• Content data — the projects, files and code you create, stored in your own isolated workspace.
• Payment data — the amount, date, status and reference of each transaction.
• Technical data — IP address, device and browser information, and server logs, for security and reliability.

We never see or store your card details. Your full card number, expiry date and CVV are entered on the secure page of our payment provider and are processed by the bank. They never reach our servers.

Purposes and legal basis

Every category of data has a defined purpose and a lawful basis. Nothing is collected "just in case".

• To create and run your account and provide the service you asked for — performance of the contract between you and us.
• To take payment, issue receipts and keep accounting records — performance of the contract, and compliance with the accounting and tax legislation of the Republic of Armenia.
• To apply plan limits and prevent abuse — our legitimate interest in running the service fairly.
• To keep the service secure and to investigate incidents — our legitimate interest in security.
• To send service messages such as verification codes and billing notices — performance of the contract.
• To answer your enquiries — performance of the contract, or your consent.

Consent

Where we rely on your consent, you give it by a clear affirmative action — for example, by creating an account. You may withdraw consent at any time by deleting your account or by contacting us. Withdrawal does not affect the lawfulness of processing carried out beforehand, and does not affect records we are required by law to keep.

How long we keep it

• Account and content data — for as long as your account exists. When you delete your account, your data, projects, files and live apps are permanently deleted.
• Transaction records — retained for the period required by the accounting and tax legislation of the Republic of Armenia, even after your account is deleted.
• Technical logs — kept for a limited period for security and reliability, then deleted.

Third parties

We do not sell personal data, and we never will. We share it only where it is necessary to run the service, and only as far as required:

• Payment processing — the acquiring bank and the card schemes, in order to take your payment.
• Infrastructure providers — hosting and email delivery.
• AI model provider — the prompts and project context you send in the workspace are processed by our AI model provider in order to generate a response.
• Authorities — only where we are legally required to disclose.

International transfers

Some of our providers operate outside the Republic of Armenia. Where personal data is transferred abroad, it is transferred only as far as necessary to run the service and remains protected by appropriate safeguards.

Your rights

Under the law of the Republic of Armenia on the Protection of Personal Data, you have the right to:

• know whether we process data about you, and obtain a copy of it;
• have inaccurate or incomplete data corrected;
• have your data deleted — you can do this yourself at any time by deleting your account in Settings;
• object to processing, or ask us to restrict it;
• withdraw consent, where processing is based on consent;
• not be subject to a decision based solely on automated processing that produces legal effects for you.

To exercise any of these, email info@tech404.am. We respond within the time limits set by law, and we do not charge you for it.

Security measures

Passwords are hashed. Data is encrypted in transit and at rest. Each account runs in its own isolated environment, so your projects, files and live apps are yours alone — other users cannot see or reach them. Access to production systems is restricted and logged. Card data never reaches our servers.

Complaints

If you believe we have processed your personal data unlawfully, please contact us first at info@tech404.am — we will investigate properly. You also have the right to lodge a complaint with the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia.