Privacy Policy

How Aion Labs collects, uses, and protects your information.

This Privacy Policy describes how Deep Forge sp. z o.o. (NIP: 1231533694) ("Aion Labs," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you access or use the Aion Labs platform, including our website, LLM API, Email Agent services, browser-based chat interface, and associated services (collectively, the "Platform").

We are committed to protecting your privacy and ensuring transparency about our data practices. By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our Platform.


1. Consent

By using our Platform, you hereby consent to this Privacy Policy and agree to its terms.

2. Definitions

In this Privacy Policy, the following capitalized terms have the following meanings:

  • "Platform" refers to the Aion Labs website (www.aionlabs.ai), LLM API (api.aionlabs.ai), Email Agent services, and browser-based chat interface, including all associated services and features.
  • "Services" refers to all services, products, tools, and features provided or made available by Aion Labs through the Platform.
  • "Account" means the unique account you create to access and use the Platform.
  • "Personal Data" means any information that identifies, relates to, describes, or could reasonably be linked to you as an individual.
  • "Usage Data" means information collected automatically through your use of the Platform, including technical and behavioral data.
  • "User Content" means any text, prompts, instructions, messages, or other materials you submit to the Platform.
  • "Cookie" means a small text file placed on your computer by this Platform when you visit certain parts of it and/or when you use certain features.
  • The terms "we," "us," or "our" refer to Deep Forge sp. z o.o. (NIP: 1231533694), the company operating the Platform and providing the Services.
  • The terms "you," "User," or "Customer" refer to you or anyone who accesses or uses the Platform and Services.

3. Scope of This Policy

This Policy applies exclusively to actions taken by you and us while using the Platform or Services. It does not extend to any third-party websites accessible from the Platform, including any links we may provide.

4. Information We Collect

4.1 Information You Provide Directly

We collect information you voluntarily provide when you:

  • Account Registration: Email address, username, and account credentials.
  • Payment and Billing: Billing address, payment method details (processed securely by our payment processors), and transaction history.
  • User Content: Prompts, messages, agent instructions, and other content you submit via the Platform, including API requests. We collect and store this content only as necessary to provide the Services.
  • Communications: Information you provide when contacting our support team.
  • Feedback: When provided, we may collect and use your feedback to improve our Services.

4.2 Information Collected Automatically

When you use our Platform, we automatically collect:

  • Usage Data: Features used, API call patterns, time spent on the Platform, and interaction data.
  • Metered Usage Data: To ensure accurate billing and adherence to usage limits, we track usage frequency, volume of data processed, token consumption, and other metrics necessary to correctly charge and enforce service limits.
  • Device and Technical Information: IP address, browser type and version, operating system, and device type.
  • Location Data: Approximate geographic location derived from your IP address.
  • Security Logs: We gather security logs to track system activities, ensure integrity of our Services, and meet relevant security and regulatory obligations. These logs may include IP addresses, timestamps, user actions, and device information.

4.3 Cookies and Tracking Technologies

The Platform may place and access certain cookies on your computer. We use first-party cookies to maintain your session, remember your preferences, and analyze Platform usage. We may also use third-party cookies for payment processing and authentication. You can manage cookie preferences through your browser settings. We recommend keeping your browser up-to-date and reviewing its privacy and cookie guidance.

5. How We Use Your Information

5.1 Providing and Improving Our Services

  • Operating, maintaining, and improving the Platform and its features.
  • Processing your transactions, managing your Account, and enforcing usage limits.
  • Routing API requests to upstream AI model providers on your behalf.
  • Processing and responding to inbound emails through the Email Agent service.
  • Personalizing your experience and providing usage analytics.

5.2 Safety and Security

  • Enforcing our Terms of Service and Acceptable Use Policy.
  • Detecting, investigating, and preventing fraud, abuse, and security incidents.
  • Protecting the rights, property, and safety of Aion Labs, our users, and the public.

5.3 Communications

  • Responding to your inquiries and providing customer support.
  • Sending service-related notices, including security alerts and administrative messages.
  • With your consent, sending promotional communications about new features or services.

6. Upstream AI Provider Processing

The Aion Labs Platform routes your requests to upstream AI model providers to generate completions and power the Email Agent service. When you use these features, your prompts, conversation context, and related inputs are transmitted to one or more upstream providers for processing.

We work with upstream AI infrastructure providers including, but not limited to, providers accessible via OpenRouter. The specific providers serving a given model may change over time. Each provider has their own data handling policies. We encourage you to review the privacy policies of any upstream providers whose services you use through our Platform.

We do not sell your data to anyone. We do not review the content of your prompts or generated outputs unless required for safety, legal compliance, or at your explicit request.

7. Disclosure of Your Information

We may share your information in the following circumstances:

7.1 Service Providers

We engage trusted third-party companies to perform services on our behalf, including hosting, analytics, payment processing, and AI model routing. These providers have access only to the information necessary to perform their functions and are prohibited from using it for other purposes.

7.2 Legal Requirements

We may disclose your information when we believe in good faith that disclosure is necessary to comply with applicable laws, enforce our Terms of Service, protect the rights and safety of Aion Labs or others, or detect and prevent fraud.

7.3 Business Transfers

In connection with any merger, acquisition, or sale of assets, your information may be transferred to a successor entity, subject to the same privacy protections described in this Policy.

8. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When you delete your account, we will begin to delete data that does not have a justifiable business reason to retain (such as billing records required for legal compliance). If you are in a GDPR jurisdiction and request to be forgotten, we will process your request as soon as possible.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

  • Access and Portability: Request access to and a copy of your Personal Data.
  • Correction: Request correction of inaccurate or incomplete Personal Data.
  • Deletion: Request deletion of your Personal Data. You may also delete your account through your account settings.
  • Restriction and Objection: Request restriction of processing or object to processing in certain circumstances.
  • Withdrawal of Consent: Withdraw your consent at any time where processing is based on consent. Note that withdrawal does not affect the lawfulness of processing prior to withdrawal.
  • Marketing Communications: Opt out of promotional emails at any time via the unsubscribe link or by contacting us.

To exercise any of these rights, please contact us at [email protected] with "Privacy Request" in the subject line.

10. Data Security

We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and secure development practices. All user data, including stored content, is held in encrypted databases.

However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and API keys.

11. Age Restriction

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect Personal Data from anyone under 18 years of age. If we learn that we have collected Personal Data from a child under 18, we will take prompt steps to delete such information. If you believe we may have inadvertently collected such data, please contact us immediately at [email protected].

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and similar laws, including all rights described in Section 9 above. You also have the right to lodge a complaint with your local supervisory authority if you believe our processing of your Personal Data violates applicable law.

The legal bases on which we rely to process your Personal Data include: performance of a contract (providing the Services), compliance with legal obligations, our legitimate interests (security, fraud prevention, service improvement), and, where required, your consent.

13. International Data Transfers

Your information may be transferred to, stored, and processed in countries that may have different data protection laws than your country of residence. When we transfer Personal Data across borders, we implement appropriate safeguards — such as standard contractual clauses — to ensure your data receives adequate protection.

14. Third-Party Links

Our Platform may contain links to third-party websites or services not operated by us. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services you access.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated Policy on our Platform with a new effective date, and where required by law, by email notification. Your continued use of the Platform after any changes constitutes your acceptance of the updated Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Aion Labs / Deep Forge sp. z o.o.
Email: [email protected]

For privacy-related requests including data access, correction, or deletion, please include "Privacy Request" in your email subject line.


Effective date: March 15, 2026. By using Aion Labs, you acknowledge that you have read and understood this Privacy Policy.