Eidren Privacy Policy

At a glance. This box is a courtesy and is not part of the policy.

What we collect	Your account and billing details; the content you give Eidren; what Eidren does and produces while working for you, including screenshots of the pages it visits; usage records; technical logs; how you found Eidren; visit statistics for our public pages
Why	To run the Service, bill you, keep it secure, and meet legal obligations
Who sees it	The AI model providers and infrastructure providers that operate the Service on our behalf. We do not sell your information or use it for advertising
AI training	We do not train AI models on your content, and our model providers may not either
Where	The United States
How long	Detailed task records 14 days; your content until you delete it; billing records 7 years
Your rights	Access, export, correct, delete, object; complain to a regulator. Tools in Settings → Privacy & data, or support@aletarch.com

1. Who we are and what this policy covers#

Aletarch Inc ("Aletarch", "we", "us"), a Delaware corporation, is the controller of the personal information described in this policy, except where Section 15 says otherwise. This policy covers Eidren (the "Service"), available at https://eidren.ai and through the applications, interfaces, and email communications we provide for it, including the public pages of that website, such as its home, product, and legal pages. It does not cover the aletarch.com website, which has its own privacy policy.

Capitalized terms not defined here have the meaning given in the Eidren Terms of Service.

2. What Eidren does#

Eidren is an AI agent. On your instructions it may hold a conversation, research the web, generate documents, code, and web applications, analyze files and images you upload, remember information for later tasks, act in accounts you connect, and use a computer on your behalf by operating a real web browser and a cloud desktop. This policy explains what information that involves and how we handle it.

You are always interacting with an automated system when you use Eidren. Where Eidren sends a message, fills a form, or produces a document on your behalf, that output is machine-generated.

3. Information we collect#

3.1 Account information#

Your email address, your display name if you set one, and sign-in metadata such as timestamps and IP addresses. We do not store your password; our authentication provider stores only a hash of it. If you reach sign-up through a link that names where it came from, such as a link on the Aletarch website or in a campaign, we record that source with your Account.

3.2 Content you provide#

Prompts and messages you send Eidren, files and images you upload, and instructions you save, such as scheduled tasks and standing goals.

3.3 Output#

Answers, documents, code, web applications, and other material Eidren generates in response to your requests.

3.4 Memory#

Facts and preferences Eidren records about you so that later tasks can use them. You can view and delete them in Settings → Privacy & data.

3.5 Task records#

Records of what Eidren did while working on a task: the steps it took, the tools it used, the websites it visited, the files it created or edited in its workspace, the commands it ran and their output, and screenshots of its browser or desktop taken while it worked.

Screenshots and page contents capture whatever is on the pages Eidren visits. That may include information about you or about other people, and where Eidren browses a site you are signed in to, it may include content from your accounts or from paid services you have access to. Eidren is designed to hide screens that show password or payment fields from the live view and to mask them in stored frames. This protection is automated and may not catch every case. You can hide the screen, take over, or stop a task at any time. The cloud desktop Eidren uses does not keep saved logins between separate tasks.

3.6 Usage and billing information#

Records of your use of the Service measured in Credits, including which capabilities each task used and what it cost, so that we can bill you, enforce plan limits, and show you a receipt for each task.

If you buy a Plan or a Pack, our payment processor, Stripe, collects your payment card details directly. We receive confirmation of payment, your billing name and address, the brand and last four digits of your card, and any tax identifier you provide. We do not receive or store full card numbers.

3.7 Technical information#

IP address, device and browser information, and error and diagnostic logs generated by your use of the Service.

3.8 Connected Accounts#

You may connect third-party accounts so that Eidren can act in them on your behalf. At present these are Google (Gmail and Google Calendar), Slack, and GitHub. When you connect an account:

• We request only the permissions shown to you when you connect, and you can narrow what Eidren may do with each connection inside the Service.
• We store the access credential the provider issues, encrypted, so that Eidren can act without asking you to sign in again.
• Information Eidren reads from a Connected Account is used only to carry out the task you asked for and, where the task produces something you keep, to store that result in your workspace. Content from a Connected Account that a task needs is sent to the AI model providers described in Section 5, which act as our processors and may not train on it or use it for any other purpose.
• Google accounts. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data to serve advertising, do not sell it, do not use it to develop or train AI models, and do not allow humans to read it except with your consent, for security purposes, or to comply with law.
• You can disconnect any account at any time within the Service. Disconnecting deletes the stored credential.

3.9 Information about other people#

Eidren may process personal information about people who are not our users because it appears in the pages, messages, or files involved in your task. We process it only to carry out your task and keep it as described in Section 8, and we rely on you to have the right to involve it (Terms of Service, Section 5.3). If you are such a person and have a question or request, contact support@aletarch.com.

3.10 Communications#

Messages you send to support, feedback you give inside the Service, and our records of the transactional emails we send you.

3.11 Visits to our public pages#

When you visit Eidren's public pages, we use Cloudflare Web Analytics to count visits. A small script from Cloudflare reports the page address (without its query string), the site that linked you there, your country, your browser and device type, and how quickly the page loaded. It sets no cookies, stores nothing in your browser, and does not fingerprint you, and we see only aggregate totals, never a record of an individual visit. It runs only on the public pages, never inside the Service itself.

4. How we use information#

We use the information described above to:

• provide, operate, and maintain the Service, including carrying out the tasks you ask Eidren to perform;
• send your content to AI model providers so that they can generate responses on our behalf (Section 5);
• operate the cloud sandboxes, browsers, and desktops that Computer Use relies on;
• meter usage, bill you, and enforce the limits of your Plan;
• diagnose problems, maintain security, detect and prevent fraud and abuse, and enforce our Terms of Service, including its acceptable-use rules;
• communicate with you about the Service, including account, billing, and security notices;
• improve the Service, using aggregated or de-identified information where that is sufficient;
• understand, in aggregate, how people find Eidren and how many visit its public pages; and
• comply with legal obligations and respond to lawful requests.

We do not sell your personal information, share it for cross-context behavioral advertising, use your content to serve advertising, or process sensitive personal information to infer characteristics about you.

We do not use your content to train AI models, and our agreements with our model providers do not permit them to train on it either.

Section 12 sets out the legal bases on which we rely where the law requires one.

5. AI model providers#

To generate responses, Eidren sends your prompts, messages, relevant content, and the screenshots and page contents it gathers while working to third-party AI model providers, which process that content to produce the response. We use these providers through their business API services, under terms that prohibit them from using our data to train their models. Under their published API terms, each provider may retain API inputs and outputs for up to 30 days to monitor for abuse, after which they are deleted. We will update this section if our arrangements change. We do not send these providers your account details or payment information.

6. How we share information#

Service providers. We use third-party providers to operate the Service: AI model inference, cloud sandboxes and desktops, database and authentication, application hosting, content delivery, visit statistics for our public pages, web search, payment processing, and company email. Each processes information on our behalf under a written agreement. We provide the current list, with legal entities, purposes, and locations, to customers who enter into our Data Processing Agreement, and on request at support@aletarch.com.

Connected Account providers. When you connect an account, Eidren acts in it under the permissions you grant; the provider's own terms and privacy policy govern the information held there.

Legal and safety. We may disclose information where the law requires it or in response to a valid legal request; to protect the rights, safety, or property of Aletarch, our users, or others; and to enforce our Terms of Service.

Business transfers. If Aletarch is involved in a merger, acquisition, or sale of assets, information may be transferred to the successor, and this policy will continue to apply to it until changed with notice to you.

Aggregated information. We may share information that does not identify you, such as aggregate usage statistics.

7. Cookies#

We use strictly necessary cookies to keep you signed in and to protect the Service against cross-site request forgery, and browser local storage to remember your preferences. Our payment processor sets fraud-prevention cookies during checkout, and our content delivery provider may set a short-lived security cookie to distinguish people from automated traffic. We do not use advertising or analytics cookies; the visit statistics for our public pages (Section 3.11) use no cookies or browser storage. Because every cookie is strictly necessary, we do not show a cookie consent banner. We do not respond differently to browser "Do Not Track" or Global Privacy Control signals, because we do not track you across sites. The full list is in our Cookie Notice.

8. How long we keep information#

Deleting your Account. You may request deletion by emailing support@aletarch.com from the email address on your Account. After we verify the request, your data remains available for export for 30 days; we then delete it within a further 30 days. Copies may persist in encrypted backups for up to 30 days after that before they are overwritten. We retain billing and tax records, and records needed to resolve a dispute or comply with law, for the periods above.

In-product controls. You can export your data, delete individual chats, and erase Eidren's memory of you at any time in Settings → Privacy & data.

9. Your rights and choices#

Depending on where you live, you have the right to:

• access the personal information we hold about you and receive a copy in a portable format;
• correct information that is inaccurate;
• delete your information, subject to the retention obligations in Section 8;
• restrict or object to certain processing, including processing based on our legitimate interests;
• withdraw consent where we rely on it, without affecting processing that took place before withdrawal; and
• complain to a supervisory authority or regulator.

To exercise these rights, use the in-product tools described in Section 8 or email support@aletarch.com. We will verify the request using the email address on your Account, or by other reasonable means if you are not a user, and will respond within one month or any shorter period your local law requires. For an unusually complex request we may take up to two further months, and we will tell you within the first month if so. We will not discriminate against you for exercising your rights. You may authorize another person to make a request on your behalf; we will ask for proof of that authority and may confirm the request with you directly.

Automated decisions. We do not make decisions that produce legal or similarly significant effects on you solely by automated means. Where an automated system pauses or restricts an Account for suspected abuse, you can ask for a person to review the decision by writing to support@aletarch.com.

Marketing. We send marketing email only with your consent, or where the law permits us to write to existing customers about similar services, and every marketing message includes an unsubscribe link. Transactional and security messages are part of the Service and cannot be unsubscribed from while you hold an Account.

10. Security#

We apply technical and organizational measures designed to protect the information we handle, including encryption in transit and at rest, encrypted storage of Connected Account credentials, isolation of the sandboxes in which Eidren works, access controls, and logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We will publish any third-party security certification we obtain. To report a security vulnerability, follow the disclosure process at https://aletarch.com/security.

11. International transfers#

Aletarch is based in the United States, and the Service is operated from there. If you use the Service from elsewhere, your information is transferred to and processed in the United States and in the other countries where our providers operate. Section 12 describes the safeguards that apply to information protected by European, UK, and Swiss law.

12. Additional information for the EEA, the UK, and Switzerland#

This Section applies if you are in the European Economic Area, the United Kingdom, or Switzerland.

12.1 Legal bases#

Providing account and billing information is necessary to enter into the contract; you are not obliged to provide any other information, but Eidren cannot perform a task without the content the task requires.

12.2 Transfers#

Where we transfer personal information out of these regions, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and the Swiss Federal Data Protection and Information Commissioner's requirements, together with supplementary measures where appropriate. You may request a copy of the relevant clauses at support@aletarch.com.

12.3 Representatives#

We are appointing representatives in the European Union and the United Kingdom under Article 27 of the GDPR and the UK GDPR, and will name them here, with their addresses, once the appointments are complete. Until then, please contact us directly at support@aletarch.com.

12.4 Complaints#

You may lodge a complaint with the supervisory authority in the country where you live or work, or where you believe an infringement occurred. A list of EU authorities is published by the European Data Protection Board; the UK authority is the Information Commissioner's Office; the Swiss authority is the Federal Data Protection and Information Commissioner. We would welcome the chance to address your concern first, but you are not required to contact us before complaining.

13. Additional information for United States residents#

This Section applies if you live in California or another US state with a comprehensive privacy law, and supplements the rest of this policy.

Categories of personal information. In the preceding 12 months we have collected: identifiers (email address, IP address, Account identifiers); customer records (billing name and address, partial payment card details held by our processor); commercial information (Plans and Packs purchased, usage records); internet and network activity (log data, interactions with the Service, the site or campaign that referred you, and visit statistics for our public pages); the contents of your messages, files, and Connected Account data as needed to carry out your tasks; geolocation inferred from IP address at the country level; and inferences drawn to remember your preferences for later tasks. Sources and purposes are described in Sections 3 and 4; disclosures to service providers are described in Section 6.

Sensitive personal information. Account log-in credentials and the contents of your messages and Connected Accounts are sensitive personal information. We use them only to provide the Service you requested, to maintain security, and as otherwise permitted without a right to limit.

No sale or sharing. We do not sell personal information, and we do not share it for cross-context behavioral advertising, and we have not done either in the preceding 12 months. We have no actual knowledge that we collect personal information from anyone under 16, the age relevant under California law; the Service in any case requires users to be 18.

Your rights are those listed in Section 9, including the rights to know, to delete, to correct, and to non-discrimination. We will acknowledge a request within 10 business days and respond within 45 days, extendable once by a further 45 days with notice. If we deny a request you may appeal by replying to our response; we will explain the outcome of the appeal in writing.

14. Children#

The Service is for adults. You must be at least 18 years old to use it. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has created an Account, email support@aletarch.com and we will delete it.

15. Organizations and their users#

If you use the Service on behalf of an organization that has agreed to our Terms of Service, we process the content of your tasks on that organization's behalf and under its instructions, and the organization is responsible for its own privacy notices to you. We remain the controller of account, billing, usage, security, and support information. Organizations that require a data processing agreement can request one at support@aletarch.com; the agreement is available at /legal/dpa.

16. Changes to this policy#

We may update this policy. If a change materially reduces your rights or materially changes how we use your information, we will notify you by email to the address on your Account, or by a prominent notice in the Service, at least 30 days before the change takes effect. Other changes take effect when posted, with the effective date above updated. Your continued use of the Service after a change takes effect means you accept the updated policy.

17. Contact#

Questions, requests, and complaints about this policy: support@aletarch.com.

Postal address, for legal process (please use email for everything else): Aletarch Inc, c/o Corporation Service Company, 251 Little Falls Drive, Wilmington, Delaware 19808, United States.