Privacy Policy

1. Overview

This Privacy Policy covers data collected when you visit aeriox.co, use AERIOX Studio at create.aeriox.co, or otherwise interact with the Services.

It also covers the AI front desk services we provide to businesses: an AI receptionist that answers their calls, an AI chat agent on their websites, online booking and calendar tools, and websites. If you call, chat with, or book with a business that uses these services, Section 4 explains what happens to your information. If your business is an AERIOX client, Section 4 also covers support chats with the AERIOX agent in your AERIOX portal.

It also covers the AERIOX app for iPhone and Android: shopping the AERIOX Shop in the app, your AERIOX account, drop alerts, and the app’s own analytics. Section 7 explains what happens to your information there. Buying on the shop’s website, shop.aeriox.co, is covered by the AERIOX Shop privacy policy.

2. What Data We Collect

2.1 Account Information

• Name and email address (required for registration).
• Profile picture (optional).
• Authentication credentials (managed via Supabase Auth).
• Account preferences and settings.

2.2 Generated Content

• Scripts, prompts, and text content you create.
• Images, videos, and audio files generated through the Platform.
• Project metadata (titles, descriptions, tags).
• Brand assets and configurations.

2.3 Usage Analytics

• Feature usage patterns (which tools you use, session duration).
• Credit consumption history.
• Error logs and performance data (via Sentry).
• Device type, browser, and operating system.

2.4 Payment Information

• Billing details are processed and stored by Stripe. We do not store credit card numbers, CVV codes, full card details, or bank account numbers on our servers.
• We retain transaction records (plan type, amount, date) for billing purposes.

2.5 The AERIOX App and the AERIOX Shop

What the app and the shop’s checkout collect, from your account and orders to drop alerts and the app’s own analytics, is in Section 7.

3. How We Use Your Data

• Service operation: To provide, maintain, and improve AERIOX Studio's features and functionality.
• AI model improvement: Anonymized and aggregated usage data may be used to improve our AI pipelines and generation quality. You can opt out of AI training data contribution at any time through your account settings.
• Billing and payments: To process subscriptions, credit purchases, and manage your account balance.
• Communication: To send transactional emails (receipts, account changes), security alerts, and product updates. You can unsubscribe from non-essential communications at any time.
• Safety and security: To detect and prevent fraud, abuse, and violations of our Terms of Service.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.
• The AERIOX app: To run your cart and checkout, keep your account, saved items and sizes, show your orders, send the drop alerts and emails you asked for, and see how the app is used (Section 7).

4. AI Receptionist Calls, Website Chats and Bookings

Businesses can use AERIOX to answer their phones and take bookings. When you call a business that does, an AI assistant answers. It tells you it’s an AI assistant whenever you ask, and never claims to be a person. The call opens with “This call may be recorded.” We don’t record the call, and we don’t keep a transcript of it. Our voice AI provider may keep the conversation for up to 30 days to check for abuse (see “Who processes it” below).

• What we collect: your phone number, and whether the phone network verified it; what you tell the assistant for a message or a booking, such as your name, address, the service you need, and times that work for you; and records about the call: when you called, how long the call lasted, its language, how it ended (for example, with a booking or a message), and what it cost to run. If you book online, we collect the details you enter on the booking page. Beyond what you give for a message or a booking, we don’t keep anything you say on the call.
• Your voice: the call’s audio goes to our voice AI provider live, while you talk, so the assistant can hear and answer you. AERIOX doesn’t record it.
• Who processes it: AERIOX; Twilio, our phone carrier, which connects the call and keeps its own record of it (the phone numbers, the time, and how long it lasted); and xAI, whose Grok voice AI hears you, writes the assistant’s replies, and speaks them. xAI may keep the conversation for up to 30 days to check for abuse, and doesn’t use it for training.
• How it is used: to answer your questions, take your message, book or change an appointment, send a confirmation you asked for, and let the business see your message or booking and the record of your call. The business may get an email about your call with your phone number (if it shows), the time you called, how long the call lasted, its language and how it ended. We also review call records and messages to improve that business’s assistant.
• If the assistant can’t take your call: for example, when the line is busy, you hear a short message asking you to call back, or a busy signal. When your phone number shows, the business may get an email with it and the time you called, so it can call you back.
• Whose information it is: the business you called decides how this information is used. We process it on the business’s behalf as its service provider. To access, correct, or delete it, contact that business, and we will help it respond. You can also write to joshua@aeriox.co.
• Payment cards: the assistant never asks for card numbers.
• How long we keep it: the record of the call and your message for 2 years, unless the business deletes them sooner or its agreement with us says otherwise.

Website chats

Some businesses have our AI chat agent on their website. Before you send your first message, the chat tells you that you’re chatting with the business’s AI assistant, who processes your messages, and how long they’re kept, and it links to this section. Sending your first message starts the chat. The assistant tells you it’s an AI whenever you ask and never claims to be a person. A chat ends after 30 minutes without a message.

• What we collect: the messages you send and the assistant’s replies. We ask for your name, phone number, and email only when you leave a message for the business or book through the chat, together with the reason, your message, and the times that work for you. On a business’s live website, the path of the page you opened the chat on (such as “/services”), not its full web address. Records about the chat: which business it was for, its language, when it started and ended, how many messages it had, whether it ended in a booking or a message, and what it cost to run.
• What we don’t collect: the chat sets no cookies and uses no analytics. It never sends the full web address of the page you’re on or the page you came from. Your browser keeps an open chat in the tab’s session storage for up to 30 minutes, so it stays open as you move between pages; closing the tab clears it.
• Abuse limits: we keep a one-way hash of your IP address, never the address itself, for up to 24 hours to count the chats you start, the messages you leave, and the bookings you make. When traffic is unusually heavy or looks automated, the chat may ask Cloudflare Turnstile to check that you’re a person before it starts. Cloudflare then receives your IP address and information about your browser for that check.
• Card and Social Security numbers: don’t share them in a chat. The assistant never asks for them. If you type something that looks like a card number or a Social Security number, the chat replaces it with “[removed]” in your browser, and our server removes it again before the assistant sees your message and before anything is stored.
• How it is used: to answer your questions, book or request an appointment, pass your message to the business, and give the business the chat when it asks for it. We also review chats to improve that business’s assistant, for example by adding answers to questions it couldn’t answer.
• Who processes it: AERIOX, and Anthropic, whose Claude models write the assistant’s replies. Anthropic receives the conversation and the business information the assistant answers from, and processes them for us as our service provider under its Data Processing Addendum. Anthropic may keep the messages for up to 30 days. If its safety systems flag a chat for breaking its Usage Policy, Anthropic may keep those messages for up to 2 years, and its safety scores for them for up to 7 years. We can’t ask Anthropic to delete a single chat sooner. Anthropic doesn’t train its models on them.
• What the business sees: on a business’s live website, the business can ask us for the chat. If you leave a message for it, your name, contact details, and message go into its customer records as a request to call you back, and it gets an email alert with them. The alert doesn’t include the rest of the chat. Those records belong to the business and are kept as its customer records, not on the chat’s schedule below.
• Demo chats: on a preview of a business’s new website, the chat is a demo. Nothing is booked, and nothing is sent to the business: leaving a message there only shows you what the business would receive.
• Health information: on the website of a dental, chiropractic, med spa, therapy, or other business that sees patients, the chat asks you not to share medical or health information. The assistant doesn’t discuss symptoms or treatment and offers a call instead. A message you leave there carries only your name, contact details, the reason, and the times that work for you, with no message of your own, and the chat’s messages are deleted within 24 hours after it ends.
• Whose information it is: as with calls, the business decides how this information is used, and we process it on its behalf. To access, correct, or delete it, contact that business, and we will help it respond. You can also write to joshua@aeriox.co.

How long we keep it:

These are AERIOX’s periods. Anthropic’s are under “Who processes it” above.

Support chats with the AERIOX agent

If your business is an AERIOX client, the Help page in your AERIOX portal at app.aeriox.co has the AERIOX agent: an AI that answers questions about your AERIOX services at any hour and sends what it can’t answer to the AERIOX team. Under the message box, the portal tells you that you’re chatting with an AI, that our AI provider processes your messages, and how long chats are kept, and it links to this section. The agent tells you it’s an AI whenever you ask and never claims to be a person. Using it is up to you: you can always message the AERIOX team from the same page instead.

• What we collect: the messages you send and the agent’s replies; which portal account wrote them, for which business; how the agent sorted the chat for the AERIOX team (a topic, a priority, a title, and a short summary); and records about the chat: when it started, when its last message was, how many messages it had, and what it cost to run.
• What the agent answers from: AERIOX’s help articles, and your own account as your portal role shows it to you: your business’s name, the AERIOX services you have, their status and dates, your voice lines, and the titles of your open requests. A team member who doesn’t see billing in the portal doesn’t get billing details from the agent either.
• Emails, phone numbers, cards and passwords: don’t share passwords or card numbers in a chat; the agent never asks for them. If you type something that looks like a card number or a Social Security number, our server replaces it with “[removed]” before the agent sees your message and before anything is stored. Email addresses and phone numbers you type are hidden from our AI provider, which sees “[email removed]” or “[phone removed]” instead (except billing@aeriox.co and your business’s own phone lines). The AERIOX team sees them as you typed them, so it can reply.
• How it is used: to answer your questions and, when something needs a person, to send it to the AERIOX team: the agent opens a request in your portal with your words, and the AERIOX team gets an email alert about it with its topic, priority, and summary. We also review chats to improve our help articles.
• Who sees it: you and the AERIOX team. A request the agent opens for you is in your portal’s Requests, where the people at your business who can see requests see it.
• Who processes it: AERIOX, and Anthropic, whose Claude models sort the chat and write the agent’s replies. Anthropic receives the conversation (with emails and phone numbers hidden), the help articles, and the account details above, and processes them for us as our service provider under its Data Processing Addendum. Anthropic may keep the messages for up to 30 days. If its safety systems flag a chat for breaking its Usage Policy, Anthropic may keep those messages for up to 2 years, and its safety scores for them for up to 7 years. We can’t ask Anthropic to delete a single chat sooner. Anthropic doesn’t train its models on them.
• How long we keep it: the chat’s messages and the records about it, for 12 months after its last message. The working copy used to run the chat (what the AI read and wrote), for 30 days after its last message. A request the agent sends to the AERIOX team becomes part of your account’s requests and is kept with them.
• Your rights: AERIOX decides how this information is used. To get a copy of your chats, or to have them corrected or deleted, write to joshua@aeriox.co (see Section 11).

5. Calendars and Google User Data

A business can share its Google Calendar with AERIOX’s booking account (a Google service account), so that bookings made through AERIOX, online, in a chat or by phone, use its real availability and appear on its calendar. The business doesn’t sign in to AERIOX with Google, and we hold no Google sign-in tokens for it.

• What we access: the free and busy times on the calendars the business shares with our booking account, and the events AERIOX creates for its bookings. We do not read the titles, descriptions, or attendees of other events.
• What we do with it: show open times, check for conflicts, and create, change, and cancel booking events. Nothing else.
• Sharing and stopping: the business chooses which calendars to share, and can stop sharing any time in its Google Calendar settings. After that, we can no longer see or change those calendars.
• What we never do: sell Google user data, use it for advertising, or let people read it, except with the business’s permission, for security or legal reasons, or when it has been aggregated and made anonymous for internal operations.

AERIOX’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

A business that books through Square or another booking platform doesn’t connect that account to AERIOX. Our agents send its customers the business’s booking link, and they book on that platform. We don’t access the business’s account there, or create bookings or customer records in it.

6. The Voice Demo on aeriox.co

The “Talk to it” demo on our homepage uses your microphone only after you press the button. Your voice streams from your browser through our server to xAI’s Grok, which turns it into text, writes the replies, and speaks them. The demo opens with a short recording notice. AERIOX doesn’t keep a recording or transcript of it. xAI may keep the conversation for up to 30 days to check for abuse, and doesn’t use it for training. Demo calls end after 3 minutes. To limit abuse, we keep a one-way hash of your IP address for up to 24 hours to count the demo calls you start and the minutes they use. Please don’t share sensitive personal information in the demo.

7. The AERIOX App and the AERIOX Shop

The AERIOX app for iPhone and Android is the AERIOX Shop on your phone: the same clothing, drops and journal as shop.aeriox.co, with our own cart and Shopify’s checkout. You can browse and buy as a guest, or sign in with an AERIOX account. This section covers the app and the parts of the shop it uses. Buying on the shop’s website is covered by the AERIOX Shop privacy policy, which also covers that website’s cookie banner, cookies and pixels, and describes the app the same way. For anything in this section, write to shop@aeriox.co.

Browsing and your cart

• Products: the app loads products, images, drops, the journal and the shop’s policies straight from Shopify, which receives your phone’s IP address and basic request details, as it does for any visitor. The app keeps a copy of the catalogue on your phone so it opens offline.
• Your cart: the cart lives in Shopify. The app keeps its ID in your phone’s secure storage and marks the cart as one made in the app. If you’re signed in, the app puts your account’s email address on the cart, so checkout is filled in with it. When you sign out, the app makes a new cart with the same items and no email address, so the next person to use the phone doesn’t get yours.

Checkout

• Shopify’s page: checkout is Shopify’s own checkout page, shown inside the app. What you enter there, such as your name, email address, phone number, addresses and payment details, goes to Shopify and to the payment option you choose (Shop Pay, Apple Pay, Google Pay or PayPal), as it does on the web. AERIOX never receives your full card number. We get your order as we get every Shopify order.
• After you order: the app shows you the email address checkout used, and tells you if it differs from your account’s, because My orders finds orders by your account’s email address. That address stays on your phone.
• Ad pixels and server-side events: our Shopify store has Meta’s and TikTok’s pixels and Printful’s tag installed on its checkout, through Shopify apps, for checkout on the shop’s website. Shopify doesn’t run them on checkout inside the app, so they don’t report what you do there. Shopify’s Meta and TikTok integrations may send your order from Shopify’s servers to Meta and TikTok, including an order placed in the app, with details you give at checkout, such as your name, email address, phone number and location, in hashed form (turned into a code they compare with their own records). The app passes your choices to checkout (below), and Shopify applies its own privacy rules to these events; after an opt-out, those rules may still let Shopify send Meta limited data, in a restricted mode Meta calls Limited Data Use. Meta and TikTok use what they receive to measure our ads and choose who sees them, and for their own purposes under their own privacy policies. The app itself sends nothing to Meta or TikTok, contains none of their code, and doesn’t read your phone’s advertising ID.
• The choices the app passes to checkout: until you say yes, every checkout in the app, on iPhone and Android, turns analytics, marketing and sale and sharing off, and leaves preferences on. On iPhone, the app asks Apple’s question about tracking at your first checkout, after a one-line note with a Continue button. Only Allow turns all four on. On Android, the app asks once before your first checkout, “Share my app purchases with Meta and TikTok to measure ads?”, with Allow and Don’t allow as equal buttons. Allow turns all four on. Don’t allow keeps analytics, marketing and sale and sharing off, and so does closing the question; the app then asks again before a checkout the next time it starts. “Don’t sell or share my personal information” in the app’s Settings › Privacy always turns analytics, marketing and sale and sharing off, on iPhone and Android, even after an Allow. On Android, the switch shows your answer to that question: it’s on until you choose Allow, and turning it changes your answer. These are only the choices the app passes; Shopify’s own rules decide what they change in the server-side events above.

Your AERIOX account

• Signing in: an account is optional. To make one, you enter your email address and the code we email you. You can also set a password. It’s the same AERIOX login as our client portal at app.aeriox.co, and it’s separate from Shopify’s customer accounts at account.aeriox.co.
• What it holds: your email address; your name, if you add it; your profile photo, if you add one; the items you save; your sizes; and your choices for drop emails, including how often you’d like them.
• The terms you accept: when you first sign in from the app, we keep a record of the versions of our Terms of Service and this Privacy Policy you accepted, and when.
• Profile photo: the app opens your camera only when you choose Take photo; otherwise it uses your phone’s photo picker, which gives the app only the photo you pick. Before it uploads, the app shrinks the photo to a small JPEG, which drops its location and camera details. It’s stored privately, and only you can see it, through links that expire after a short time. Remove it and it’s deleted.
• Saved items and sizes: as a guest, they stay on your phone. When you sign in, they join your account. When you sign out, the phone’s copy is cleared, and your account keeps its list.
• Security: we keep a list of your signed-in devices, which you can see and end in Settings › Account › Devices, and a log of sign-ins and account changes with the app or browser they came from and a one-way code (a hash) of the IP address, never the address itself. Changing your email address or password asks you to confirm it’s you with a fresh emailed code.
• Unconfirmed sign-ups: a sign-up that never confirms its email address, and holds nothing else, is deleted after 7 days.

My orders

If you’re signed in, My orders asks Shopify for the orders placed with your account’s verified email address in the last 60 days. It does this through a private app of ours in our Shopify store, which can read orders and the email address on them, but not names, addresses or phone numbers, and can create discount codes. It uses only your account’s own verified address, matched without regard to capital letters, never an address typed into the request, and it keeps an order only if the order’s email address is that address. It reads each order’s number, dates, status, total, items, tracking and order status link. We don’t store the answer, and our logs never record your email address. An order placed with a different email address, for example one changed at checkout or your Shop Pay email, doesn’t show, and the screen says which address it searched.

Drop alerts

• Only if you turn them on: the Drop alerts screen explains what we send, and your phone asks for permission when you tap Continue. The app never asks when it opens, and the welcome code never depends on it. Until you turn alerts on, the app sends nothing about them to us or to Expo, and on Android, Firebase makes no push token for it.
• Push tokens: when you turn alerts on, the app gets your phone’s push token from Apple on iPhone, or on Android from Google’s Firebase Cloud Messaging, which makes a Firebase installation ID for it at the same time. The app then asks Expo for an Expo push token, which sends Expo the phone’s push token, an installation ID that Expo’s notifications code makes and keeps on your phone, and the app’s ID; Expo also sees your phone’s IP address. While alerts are on, the app does this once each time it starts (and again if the phone’s push token changes), and gives our server only the Expo push token.
• What we keep: your phone’s Expo push token, the app’s random install ID, iPhone or Android, the app version, whether alerts are on and how often, when and with what wording you agreed, when we last sent you an alert, and, if a phone stops taking our alerts, when and why. While you’re signed in, they’re linked to your account, with when the link was made, and alerts follow the frequency you choose for your account.
• Signing out: signing out unlinks them, and nothing in our drop-alert records shows they were linked; if your phone is offline, the app unlinks them once it’s back online. Alerts carry on for the phone, as a guest’s, until you turn them off. If you turn alerts off while they’re linked, the app unlinks them the next time it starts, or you sign in or out, with one last request, to our server and, if needed, to Expo.
• How they’re sent: through Expo’s push service, which passes each alert to Apple’s or Google’s notification service. They receive your push token and the alert itself, such as which drop is live.
• Turning them off: in the app’s Settings › Notifications, or in your phone’s settings. If you turn them off in your phone’s settings, the app turns them off with us too the next time it starts; to get them again, allow them there, then turn them on in the app. When Expo, Apple or Google tell us a phone can’t take our alerts, for example because the app is no longer on it, we stop sending to it.

The welcome code and drop emails

• Signing up: the welcome screen offers 10% off your first order if you sign up for drops and news, and asks how often you’d like the Dispatch, our drops and news email: every drop, weekly, every two weeks (pre-selected), monthly, or no emails. Any of the first four gets you the code, and signing up is signing in: you enter your email address and the code we send. No emails gets no code and asks for no sign-in: we record no consent to marketing email and add your address to no list, and if you’d turned the Dispatch email on, it goes off, and we record that. Signing up on shop.aeriox.co has no frequency to choose: you get the Dispatch whenever we send one. The welcome email we send then has an Email preferences link, which needs no login and offers Drops only, Monthly or Unsubscribe (which works like the unsubscribe link); we keep that choice too, but for now the Dispatch may not follow it either.
• What we keep: each time you sign up, turn the Dispatch on or off, or change how often while it’s on, a record of the wording you saw, your email address, your frequency, where you made the choice (the welcome screen or Settings) and when. While the Dispatch is on, your email address is on our Resend list, and Resend keeps your frequency with it, in the same place as a choice made on that Email preferences page: turning the Dispatch on in the app, or changing how often while it’s on, replaces a choice made on the page, pausing it or turning it off clears it, and a choice made on the page replaces the app’s with Resend, though the app goes on showing the one you chose in it. If Resend refuses your address, we keep its answer, and when, on your account, so we can put it right. If an email change turns the Dispatch off, we keep a note of when on your account, so the app can tell you, until you next turn it on or off. When we’re to delete your old address from our list, we keep it with your account until we have, or until we find another AERIOX account has it; if Resend refuses to delete it, we keep it, with Resend’s answer, until we’ve put it right.
• The welcome email: when the app adds an address our list doesn’t have, we send it the shop’s welcome email, as we do for a sign-up on shop.aeriox.co. If the Dispatch is paused when you turn it on, your address joins the list when the pause ends, and the welcome email waits until then.
• The code: we create one single-use 10% code for your first order in Shopify, email it to you through Resend, show it in the app and add it to your cart. One code per email address. Before we create it, we ask Shopify, through the private app My orders uses, whether your address has an order with us from the last 60 days. If it has, or if the address had a code with an earlier AERIOX account (one we asked Shopify to create counts, even if it never reached you), there’s no code, and the app says which. We also ask Shopify whether your code has been used. Drop alerts are a separate choice and never a condition of the code.
• Your choices: in Settings › Notifications, change how often you’d like the Dispatch, pause it for 30 days, or turn it off. Pausing or turning it off takes your address off our list and clears the frequency kept with it; when a pause ends, it goes back on at your earlier frequency. If you change your account’s email address, the app turns the Dispatch off and doesn’t sign up the new address until you turn it on there, because a choice made for one address, yes or no, doesn’t carry to another. If it was on, Settings › Notifications says so; turning it on there records your consent for that address and adds it to our list, with the welcome email if our list doesn’t have it. No sign-up or unsubscribe carries over from the old address. Your frequency stays with your account (it sets your drop alerts too), so the new address gets the Dispatch at that frequency once you turn it on, or when a pause ends. The new address keeps whatever it already has on our list: if it already gets the Dispatch (from signing up on shop.aeriox.co, say), it still does, though the app shows it off. If the Dispatch was on at any point while your account had the old address, we delete that address from our list, unsubscribe and all, usually within half an hour of the change; until then, it may still get a Dispatch. We don’t delete it if another AERIOX account has it by then (it’s theirs, so we leave it as it is), or if your account has it again and you’ve turned the Dispatch on for it first. We keep the frequency you choose, but we don’t promise it: for now, the Dispatch may not follow it. Every drop email has an unsubscribe link. Sign-in codes, the welcome code email and Shopify’s order and shipping emails aren’t marketing, and your frequency doesn’t limit them.
• If you unsubscribe by email: the unsubscribe link marks your address unsubscribed with Resend, which stops the Dispatch; a spam report or an email that bounced marks it the same way. While the Dispatch is on in the app, we ask Resend about it when you open Settings › Notifications, and the app shows the Dispatch as off. Signing up again on the welcome screen can still get you the code, but while our list has your address marked unsubscribed, neither that nor the app’s switch restarts the Dispatch there: to get it again, write to shop@aeriox.co. The unsubscribe belongs to that address and doesn’t carry to a new one when your account’s email changes.

The app’s own analytics

• What’s sent: the app sends usage events to our own server, app.aeriox.co, and nowhere else: opening the app, the screens and products you view, adding to and removing from your cart, searches, filters, starting and closing checkout, purchases (the total, and the order ID when checkout gives one), saving an item, turning drop alerts on or off, signing in, and changing the theme.
• What each event carries: its name and details (such as the product or the screen), the app’s random install ID, your account ID while you’re signed in, and when it happened. Events never carry your name, email address, street address or payment details. Search text is cut to 64 characters, and anything that looks like an email address or phone number is removed first. Signing out stops the account ID.
• Other companies’ code: apart from Shopify’s checkout, the app contains no analytics, advertising or crash-reporting code from other companies, and shows no ads. If you’ve chosen in your phone’s settings to share diagnostics with app developers, Apple or Google may send us crash reports under their own terms.
• Turning it off: Settings › Privacy › Analytics stops this phone sending events.
• How long: 12 months, then deleted.

On your phone

• What the app keeps there: your settings (mode, theme, motion and haptics, the Analytics and “Don’t sell or share” switches and, on Android, your answer to the question before your first checkout), your recent searches (Settings › Shopping clears them), a guest’s saved items and sizes, events waiting to be sent (at most 500), a copy of the catalogue, and, in your phone’s secure storage, your sign-in, the cart’s ID, the app’s install ID and, once you’ve turned drop alerts on, a note of whether they’re on and linked to your account, which signing out keeps so the app can unlink them. From then on, Expo’s notifications code also keeps its installation ID on the phone (on iPhone, in the secure storage), and on Android, Firebase keeps the push token and its installation ID in the app’s storage. Deleting the app removes them, except that an iPhone can keep the secure storage after the app is gone; the next install clears it, Expo’s installation ID included, before reading anything, and makes a new install ID.
• Permissions: notifications, if you turn on drop alerts; the camera, if you choose Take photo; and, on iPhone, Apple’s question about tracking, at your first checkout (see Checkout). Android’s question before your first checkout is the app’s own screen and asks for no permission. The app doesn’t ask for your location, contacts or microphone, and checkout’s location requests are turned off.
• Abuse limits: our server counts requests by IP address, by email address and by account, using one-way codes, kept for up to 8 days, never the addresses themselves. Vercel, which runs app.aeriox.co, receives each request’s IP address and details.

Who processes it

• Shopify: the store, cart, checkout, payments, discount codes and order records, and the products the app shows. Shopify also uses some of what it receives for its own purposes; the AERIOX Shop privacy policy explains how.
• Printful: prints and ships your order, with your name, shipping address, email address, phone number if you give one, and what you ordered.
• Vercel and Supabase: our servers, database and photo storage, in the US.
• Resend: our email list, with the frequency you chose, and the emails we send.
• Expo, Apple and Google: drop alerts, with the push tokens and installation IDs described under Drop alerts (on Android, through Google’s Firebase Cloud Messaging).
• Meta and TikTok: what Shopify’s server-side events may send them about your order, used for advertising and for their own purposes (see Don’t sell or share, below). Their pixels don’t run on checkout inside the app.

Don’t sell or share my personal information

California’s privacy law and similar laws in other states can call what Meta and TikTok receive from our checkout, and Shopify’s use of activity on our store for advertising, a “sale” of personal information or “sharing” it for targeted advertising, even though no one pays us for it. We treat it that way for everyone in the US. To opt out in the app, turn on “Don’t sell or share my personal information” in Settings › Privacy; it applies to checkout on that phone. On Android, choosing Don’t allow at the question before your first checkout turns it on too. On the shop’s website, use its Your privacy choices page or Global Privacy Control. To opt out your email address as well, email shop@aeriox.co, and we’ll record the opt-out against that address in Shopify within 15 business days. To manage Shopify’s own use of your data, go to privacy.shopify.com.

How long we keep it

Deleting your account

In the app, go to Settings › Account › Delete account. Without the app, use app.aeriox.co/delete-account, which confirms it’s you with a code sent to your email address. We finish within 30 days, or up to 30 more days if something has to be handed over first, such as a business you own on the same login, and we email you when it’s done. We delete your login, your profile, photo, saved items and sizes, the record of the terms you accepted, every drop-alert record linked to your account, the app’s usage events tied to your account or to those records, the records of your drop-email choices, and your address on our email list, with the frequency kept with it, and any earlier address of your account still waiting to come off it. A phone you’d signed out of isn’t linked to your account any more, so its drop-alert record, which holds nothing of the account, stays until 12 months after its alerts stop. We keep your orders in Shopify as our sales and tax records, the security log for its 2 years, the deletion request itself, and the one-way code of your email address described above. Deleting the app from your phone doesn’t delete your account. Your rights in Section 11 apply to everything in this section.

8. Third-Party Services

AERIOX Studio, the AERIOX app and the AERIOX Shop work with the following third-party services. Each service has its own privacy policy. The full list is on our Subprocessors page.

We don’t sell personal data for money. Meta and TikTok also use what the AERIOX Shop’s checkout pixels and Shopify’s server-side events send them for their own purposes, which some US state laws call a “sale” or “sharing” of personal information; Section 7 says how to opt out. Other data shared with these services is limited to what is necessary for their function.

Information from a call, chat, or booking we handle for a business goes to that business (see Section 4). Phone calls for our AI front desk services run on Twilio or Telnyx, our phone carriers, with xAI’s Grok as the voice AI. Website chats and the AERIOX agent run on Anthropic’s Claude. The AERIOX app and the AERIOX Shop run on Shopify, with Printful, Vercel, Supabase, Resend and Expo (see Section 7).

9. Data Storage

• Database: Account data, project metadata, and application state are stored in Supabase Postgres with Row Level Security (RLS) ensuring users can only access their own data.
• Media assets: Generated images, videos, and audio files are stored in Cloudflare R2 object storage with signed URLs for secure access.
• Profile photos: photos added in the AERIOX app are kept in a private Supabase Storage bucket and shown only to their owner, through links that expire after a short time.
• Region: Primary data is stored in US data centers. If you are located in the EU/EEA, see Section 15 regarding international transfers.

10. Cookie Policy

aeriox.co and AERIOX Studio use minimal cookies. They don’t use advertising or third-party tracking cookies.

• Authentication session cookie: Required to keep you logged in. This is a first-party, secure, HTTP-only cookie that expires when your session ends or after a set period of inactivity.
• No tracking cookies: aeriox.co and AERIOX Studio don’t use Google Analytics, Facebook Pixel, or any similar third-party tracking tools.
• No advertising cookies: aeriox.co and AERIOX Studio don’t serve ads or share data with advertising networks.
• The AERIOX app and the AERIOX Shop: the app sets no cookies and has no third-party tracking code of its own. The shop’s website and its Shopify checkout use cookies and Meta’s and TikTok’s pixels. Checkout inside the app sets Shopify’s own cookies, but Shopify doesn’t run those pixels there. Section 7 and the AERIOX Shop privacy policy describe both.

11. Your Rights

We support user data rights in compliance with GDPR (EU), CCPA (California), and similar privacy regulations. You have the right to:

• Access: Request a copy of all personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data and account. We will process deletion requests within 30 days.
• Export: Request an export of your data in a portable, machine-readable format (JSON).
• Opt out of AI training: Opt out of having your anonymized data used to improve AI models.
• Restrict processing: Request that we limit how we process your data.
• Withdraw consent: Withdraw consent for data processing at any time where consent is the legal basis.

To exercise any of these rights, contact us at joshua@aeriox.co. We will respond within 30 days.

For the AERIOX app and the AERIOX Shop, write to shop@aeriox.co. You can delete your AERIOX account in the app or at app.aeriox.co/delete-account, and opt out of the sale or sharing of your personal information in the app’s Settings › Privacy (see Section 7).

If your information came from a call, chat, or booking with a business we serve, you can also contact that business directly, and we will help it respond (see Section 4).

12. Children's Privacy

AERIOX Studio and the AERIOX app are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will promptly delete that information.

If you are a parent or guardian and believe your child has provided us with personal information, contact us at joshua@aeriox.co.

13. Data Retention

• Account data: Retained for the lifetime of your account plus 30 days after deletion.
• Generated content: Retained until you delete it or close your account. Permanently removed within 30 days of account deletion.
• Usage analytics: Aggregated analytics are retained indefinitely. Individual session data is retained for 90 days.
• Payment records: Retained for 7 years as required by tax and financial regulations.
• Error logs: Retained for 90 days via Sentry.
• AI front desk calls: Call records and messages are kept for 2 years, unless the business deletes them sooner or its agreement with us says otherwise. AERIOX doesn’t record calls or keep transcripts of them. xAI may keep a call’s conversation for up to 30 days to check for abuse.
• AI chat agent conversations: Kept for 12 months, unless the business asks us to delete them sooner or its agreement with us says otherwise. The working copy used to run a chat is deleted within 24 hours after it ends. Demo chats on previews of a business’s new website, and chats with businesses that see patients, are deleted within 24 hours after they end; the records about them are kept for 90 days (demo) or 12 months. The one-way IP hashes used to limit chats are kept for up to 24 hours. The full table is in Section 4, under Website chats. Anthropic may keep chat messages for up to 30 days, or up to 2 years if its safety systems flag them for breaking its Usage Policy.
• Support chats with the AERIOX agent: Kept for 12 months after a chat’s last message; the working copy used to run it is deleted 30 days after its last message. A request the agent sends to the AERIOX team is kept with your account’s requests. The details are in Section 4, under Support chats with the AERIOX agent. Anthropic may keep chat messages for up to 30 days, or up to 2 years if its safety systems flag them for breaking its Usage Policy.
• Voice demo conversations: AERIOX doesn’t keep recordings or transcripts of the voice demo. xAI may keep them for up to 30 days to check for abuse. The one-way IP hashes used to limit demo calls are kept for up to 24 hours.
• The AERIOX app: Your account, profile photo, saved items and sizes are kept while you have the account. The app’s usage events are kept for 12 months. Drop-alert records are deleted 12 months after alerts stop for a phone. The full list is in Section 7, under How long we keep it. Your orders stay in Shopify as our sales and tax records.

14. Security Measures

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted via TLS 1.3.
• Data at rest is encrypted using AES-256.
• Row Level Security (RLS) in Supabase ensures data isolation between users.
• API keys and secrets are managed through environment variables and never exposed to clients.
• Regular security reviews and dependency audits.
• Signed URLs for all media asset access with expiration.
• Rate limiting and abuse detection on all API endpoints.

No system is 100% secure. If you discover a security vulnerability, please report it to joshua@aeriox.co.

15. International Data Transfers

If you access AERIOX Studio from outside the United States, your data may be transferred to and processed in the United States. We rely on standard contractual clauses and/or your explicit consent as the legal basis for such transfers, in compliance with GDPR.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a prominent notice on the Platform at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

17. Text Messages (SMS)

What we text, and for whom. If a business that uses AERIOX’s Launch package turns on review requests, we send its customers a text after a job the business marks done, asking for a review. Each text is sent on behalf of that business, in its name, through AERIOX. We text only customers who gave that business their express written consent to get those texts. We don’t send other marketing texts.

Frequency and cost. Message frequency varies (usually one text after each job). Msg & data rates may apply.

Opting out and help. Reply STOP to any text to opt out; you get one text confirming it, and no more texts from us for that business. Reply HELP for help, or email joshua@aeriox.co. Consent isn’t a condition of any purchase.

We never share or sell your mobile number or SMS consent. Mobile numbers, SMS opt-in data and consent are never shared with, sold to or rented to third parties or affiliates for their marketing or promotional purposes. We share them only with the service providers that deliver the texts for us (such as our SMS carrier and messaging platform), and only to send them.

Consent records. The business collects each customer’s consent and keeps a record of it: when and how it was given and the wording agreed to. We keep a record of each number we text for a business, its consent and any STOP or HELP reply, for as long as the business uses review requests and then as section 13 says, so we can honor opt-outs and show consent if asked.

18. Contact

For privacy-related questions, data requests, or concerns, contact us at: