Privacy policy
1. Who is responsible for your data
The data controller is Marcin Michał Szul, United Kingdom. Contact for anything about your data: ai-ecosystems@lore-arc.org.
2. What we collect
- Sign-in details — your email address, your name if your sign-in provider shares it, and a unique sign-in ID, received from Google or from our email-code sign-in.
- Your workspace — tasks, notes, documents, station names and settings you create in AIONS.
- Connections you choose — if you connect GitHub, Asana or Telegram, we keep the access tokens needed to do that, stored encrypted, and only the data needed to show it to you.
- Your devices — if you install the AIONS Companion, we keep a device record (name, pairing and last-seen time) so your computer can connect to your account.
- Technical logs — basic security and error logs (for example IP address, time, the page requested) kept by our hosting provider.
Terminal sessions with your AI assistants run on your own computer through the Companion; your AI accounts (Claude, Codex, Antigravity, OpenCode) are your own and are not stored by us.
3. Why we use it and our legal basis
- To create and run your account and workspace — performance of our contract with you.
- To keep the service secure and prevent abuse — our legitimate interests.
- To tell you about important changes to the service or these documents — contract / legitimate interests.
- To meet legal obligations, for example tax records once paid plans start — legal obligation.
We do not sell your data, we do not use it for advertising, and we do not use your workspace content to train AI models.
4. Who processes it for us
- Cloudflare — hosting, database and secure sign-in (Cloudflare Access).
- Google — only if you choose "Sign in with Google".
- GitHub, Asana, Telegram — only if you connect them, and only for your own account.
Some of these providers may process data outside the UK. Where they do, they rely on safeguards recognised under UK law, such as the UK International Data Transfer Addendum or adequacy regulations.
5. How long we keep it
We keep your account and workspace data while your account is open. When you delete your account, your workspace, connections and device records are deleted from the live database; any copy left in a backup is removed when that backup expires. Security logs are kept for a limited time by our hosting provider.
6. Cookies
We use only the cookies needed to keep you signed in securely (set by Cloudflare Access). We do not use advertising or tracking cookies.
7. Your rights
Under UK data protection law you can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent where we rely on it. You can export and delete your workspace yourself in the app, or email ai-ecosystems@lore-arc.org. We will reply within one month.
If you are unhappy, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113. We would appreciate the chance to put it right first.
8. Children
AIONS is not intended for anyone under 18, and we do not knowingly collect data about children.
9. Security
Every account is kept separate from every other; connection tokens are encrypted; the site is only served over HTTPS behind secure sign-in. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you and the ICO if a serious breach affects you.
10. Changes
If we change this policy in a way that matters, we will tell you in the app or by email.