Privacy Policy

1. Introduction

Aiko Assistant ("Aiko," "we," "us," or "our") operates the aikoassistant.com website and the Aiko AI assistant service. This Privacy Policy describes how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

We collect the following information when you create an account and use our service:

• Account information: Your name, email address, and authentication credentials (password or Google OAuth token).
• Billing information: Payment details are processed and stored by Stripe, our payment processor. We do not store your credit card numbers or bank account details on our servers.
• Usage data: Basic server logs including IP addresses, browser type, and access times for security and operational purposes.

3. Your AI Assistant Data

Each customer receives a dedicated, isolated AI assistant instance. We want to be explicit about how your assistant data is handled:

• Isolation: Your assistant runs in its own dedicated environment. Your data is not shared with, accessible to, or commingled with any other customer's data.
• Limited access by Aiko staff: We do not routinely access, read, review, or monitor the content of your conversations with your AI assistant. However, our staff may access your assistant data when necessary to provide technical support you have requested, troubleshoot issues affecting your service, or comply with legal obligations. We may also use anonymized, aggregated data (which cannot identify you or any individual) to improve our products and services.
• Encryption at rest: Sensitive data stored in connection with your assistant, including authentication tokens and assistant configuration, is encrypted at rest using industry-standard encryption.
• Encryption in transit: All communications between you and your assistant, and between our systems and third-party infrastructure providers, are encrypted using TLS.
• No training on your data: Your conversations, files, and any data processed by your assistant are never used to train, fine-tune, or improve AI models.

4. How We Use Your Information

We use the information we collect solely for the following purposes:

• To create and manage your account.
• To provision and maintain your AI assistant instance.
• To process payments and manage your subscription.
• To send you service-related communications (e.g., password resets, billing notices, service disruptions).
• To detect, prevent, and respond to security incidents.

5. We Do Not Sell Your Data

We do not sell, rent, lease, or trade your personal information or your assistant data to any third party, for any reason, under any circumstances. Your information will not be shared with third parties for marketing or promotional purposes. This is not a revenue model we participate in, and we have no plans to change this.

6. Third-Party Service Providers

We use the following third-party services to operate Aiko:

• Stripe: Payment processing. Stripe's privacy policy governs how they handle your payment information.
• Cloudflare: Infrastructure hosting for your AI assistant instance. Your assistant runs on Cloudflare's global network.
• Google: Optional authentication via Google OAuth, if you choose to sign in with Google.
• Twilio: SMS messaging and phone number verification. If you enable SMS, Twilio processes your phone number and message delivery. Twilio's privacy policy governs how they handle your data.

These providers are bound by their own privacy policies and data processing agreements. We share only the minimum information necessary for them to provide their respective services.

7. Data Retention

We retain your account information for as long as your account is active. If you cancel your subscription, your AI assistant instance and its associated data are deprovisioned and deleted. Account information (name, email) is retained for a reasonable period to support billing records and legal obligations, after which it is deleted.

8. Data Deletion

You may request deletion of your account and all associated data at any time by contacting us at [email protected]. Upon receiving a deletion request, we will delete your account, deprovision your assistant, and remove your data from our systems within 30 days.

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption at rest and in transit, isolated computing environments per customer, secure authentication, and regular security reviews. No method of transmission over the Internet or method of electronic storage is 100% secure, but we strive to use commercially reasonable means to protect your data.

10. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

11. Children's Privacy

Aiko is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of the service after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:
[email protected]