aesy

aesy™

policy

Privacy Policy

Version: 1.0.2 | Effective: 10/28/2026

Last Updated: October 28, 2026
Effective Date: October 28, 2026

At AESY ("aesy.ai", "Company", "we", "us", or "our"), your privacy and data security are of paramount importance. This Privacy Policy outlines how we collect, use, process, store, disclose, and protect information when you access or use https://aesy.ai, https://app.aesy.ai, our AI prompt library, creative suite, workflow utilities, and related digital services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

A. Information You Provide Directly

  • Account and Profile Data: When you register an account, we may collect your name, username, email address, password (stored in salted hashed format), and profile avatar.
  • User Content and Prompts: Prompts, system instructions, AI workflow configurations, bookmarked items, custom tags, reviews, ratings, and comments you submit or save on the platform.
  • Support and Communications: Details you provide when contacting customer support, submitting feedback, reporting bugs, or subscribing to our updates.
  • Preferences: Display settings (dark/light theme), language selections, and notification preferences.

B. Information Collected Automatically

  • Usage and Analytics Data: Features interacted with, prompts copied or bookmarked, search queries, referring URLs, access timestamps, and session duration.
  • Device and Technical Information: IP address, browser type and version, device identifier, operating system, screen resolution, and preferred system language.
  • Cookies and Storage Technologies: Session tokens, authentication state, and local preferences stored via cookies or local storage.

2. Third-Party and Social Authentication Services

AESY allows users to create or access their accounts using supported third-party identity and social sign-in providers, such as Google, LinkedIn, GitHub, X, Facebook, and other supported platforms.

A. Information Accessed from Identity Providers

When you sign in using a supported third-party identity provider, the selected provider shares authorized basic profile details according to the permissions you grant:
  • Account identifier: A unique identifier associated with your account at the provider.
  • Basic profile information: Your name, username, and profile picture URL.
  • Email information: Your primary email address and its verification status.
We request only the minimal necessary profile scopes required for authentication. We do not request, access, or store access to your private files, emails, cloud storage, contacts, calendars, or unrelated personal content from any third-party provider.

B. How We Use Authentication Data

We use information received through third-party authentication services strictly to:
  1. Verify and authenticate your identity.
  2. Create, populate, and maintain your AESY user account and profile.
  3. Secure your authenticated sessions.
  4. Associate your saved prompts, custom collections, and community ratings with your account.
  5. Send essential transactional communications, such as account security alerts.

C. Protections, Non-Sharing, and Data Guarantees

  • No Selling of Authentication Data: We never sell, rent, trade, or monetize personal data or third-party authentication credentials under any circumstances.
  • No Advertising: Authentication data is never shared with third parties for advertising, marketing, retargeting, or data broker services.
  • No AI Model Training: Personal data obtained through third-party authentication providers is not used to develop, improve, fine-tune, or train generalized artificial intelligence or machine learning foundation models without explicit consent.
  • No Human Inspection: Our personnel do not inspect your personal account data unless you give explicit consent (e.g., during support troubleshooting) or where strictly necessary for security or legal compliance.

D. Managing and Revoking Permissions

You maintain full control over third-party connections. You can manage or revoke permissions granted to AESY at any time through the respective platform's account security settings: Revoking permission immediately prevents the corresponding third-party sign-in connection from refreshing. To permanently delete your AESY account and all associated personal data, see Section 8 below.

E. Additional Disclosures for Specific Providers (Google API Limited Use)

Where users sign in or connect using Google APIs, AESY adheres to all applicable developer policies:
AESY's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is not sold, is not shared with third parties for advertising, and is not used to develop, improve, or train generalized AI/ML foundation models.

3. How We Use Information

We process personal information for legitimate business purposes:

  • Authentication and Service Delivery: To authenticate users, deliver prompt discovery tools, maintain session persistence, and enable interactive features.
  • Product Optimization: To diagnose technical issues, analyze platform performance, and improve search algorithms.
  • Safety and Security: To prevent fraudulent activities, detect spam or abuse, verify compliance with our terms, and secure our infrastructure.
  • Communications: To provide customer support and notify you of important security updates.

4. Generative AI, Safety, and Acceptable Use

A. AI Model Processing

When you use AI prompt generation, testing, or tool discovery features, non-personal prompts or public queries may be processed via integrated AI model APIs (such as OpenAI, Anthropic, Stability AI, or Google Cloud Vertex AI/Gemini).
  • Processing is governed by applicable partner terms and encryption standards.
  • You should not input sensitive personal data, financial details, or confidential passwords into prompt test fields.

B. Prohibition of Non-Consensual Intimate Imagery (AI NCII) & Abusive Content

AESY is strictly committed to ethical AI practices and maintaining a safe platform. In compliance with the Google APIs Terms of Service and Google Generative AI Prohibited Use Policy, AESY strictly prohibits:
  • The generation, distribution, facilitation, or promotion of AI-generated Non-Consensual Intimate Imagery (AI NCII) or sexually explicit material.
  • Deepfakes, non-consensual sexual depictions, non-consensual likeness manipulation, CSAM, or non-consensual exploitation of real persons.
  • Violent, harassing, hateful, or defamatory prompt generation.
Accounts found creating or distributing content that violates these policies will be immediately terminated and reported to relevant authorities where required.

C. Foundation AI Model Training

We do not sell your private prompts or confidential inputs. We do not use private user data or third-party authentication data to train generalized AI foundation models without explicit opt-in consent.

5. Information Sharing and Disclosure

We only share personal information under strict, limited conditions:

  1. Service Providers: Trusted third-party vendors who provide hosting, database infrastructure, caching, error monitoring, and customer support tooling (e.g., cloud hosting and database providers). All vendors are bound by confidentiality agreements.
  2. Legal and Regulatory Compliance: Where required by valid subpoenas, court orders, or applicable law, or to protect the safety, rights, and security of our users and the public.
  3. Business Transfers: In the event of a merger, acquisition, or asset transfer, user data will remain subject to the commitments made in this Privacy Policy.

We do not sell personal information or share personal data with third-party advertisers.

6. Cookies and Tracking Technologies

AESY uses essential cookies and local storage tokens to:

  • Keep you logged in securely between sessions.
  • Remember your interface preferences (e.g., dark/light theme mode, selected language).
  • Monitor aggregate platform stability and performance.

You can configure your browser to block or alert you about cookies, though certain interactive features of AESY may not function properly without essential authentication cookies.

7. Data Security and Retention

A. Technical Safeguards

We implement industry-standard technical and organizational security measures to protect your personal data, including:
  • HTTPS / TLS 1.3 encryption for all data in transit.
  • Secure token handoff mechanisms and encrypted session stores.
  • Strict role-based access controls limiting data access to authorized personnel only.

B. Data Retention

We retain personal data only as long as your account remains active or as necessary to provide the Services. If you delete your account, your personal data is permanently deleted or anonymized within thirty (30) days, except where retention is legally required.

8. Account Deletion, Data Removal, and User Rights

You maintain complete ownership and control over your personal data.

A. How to Delete Your Account and Data

You can permanently delete your AESY account and all associated personal data at any time:
  1. Self-Service: Sign in and navigate to Account Settings, locate the Delete Account option, and confirm deletion.
  2. Direct Email Request: You can send an email with the subject line "Account Deletion Request" to [email protected] or [email protected] from your registered email address.
Upon confirmation:
  • Your account profile, email address, display name, and stored authentication tokens are permanently removed from our active databases within thirty (30) days.
  • Any private prompt collections, saved tools, and user configurations are purged.

B. Your Global Privacy Rights (GDPR / CCPA / Global)

Depending on your jurisdiction, you have the right to:
  • Access & Portability: Request a copy of the personal information we hold about you.
  • Correction: Request rectification of inaccurate or incomplete personal data.
  • Deletion ("Right to be Forgotten"): Request full erasure of your personal data.
  • Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact [email protected].

9. Children's Privacy

Our Services are not designed for or targeted to individuals under the age of 16 (or 13 where permitted by local law). We do not knowingly collect personal information from children. If we discover that personal data from a minor has been collected without verified parental consent, we will promptly delete that data.

10. Contact Us and Developer Information

If you have questions, comments, or requests regarding this Privacy Policy or our third-party data handling practices, please contact us: