Privacy Policy

1. Who we are and what this policy covers

AI AIDE LLC ("AI AIDE", "we", "us", "our") is a Texas limited liability company based in Dallas, Texas, USA. This Privacy Policy explains how we collect, use, share and protect personal information when you use any of our products and services, including:

• Co-Create, our AI app studio: the website at co-create.build, the Co-Create web app, and the Co-Create apps for iPhone and Android;
• our websites, including aiaide.io;
• our consulting, automation and AI assistant services ("Consulting Services"); and
• any other product or service that links to this policy (together, the "Services").

For the personal information described in this policy, AI AIDE is the "controller" (or "business"). When a business customer uses the Services to process personal information about other people, for example the end users of an app built with Co-Create, we act as that customer's "processor" (or "service provider") under our Data Processing Addendum, and the customer's own privacy notice governs that information.

This policy is part of, and should be read with, the terms that apply to the Service you use, such as the Co-Create Terms of Service, our Website Terms of Use and our Consulting Services Agreement.

2. Information we collect

2.1 Information you give us

• Account details. Your name, email address, password (stored by our authentication provider in hashed form, never readable by us), profile photo, time zone, and an optional public handle.
• What you create. Projects and documents (including the Slop, Stacks and Output tabs in Co-Create), notes, pins, voice notes and recordings and their transcripts, chat messages (including messages to other people and to our AI assistant), images, screenshots, files, designs and mockups, prompts and instructions, and the apps, code, databases and settings built for you.
• Content about other people. Email addresses of people you invite to a project or chat, and anything you write about others.
• Phone number, if you add one, used for verification codes, two-step sign-in and the account and security texts you opt into.
• Billing details. Your plan, purchases, credit balance and usage, billing address and tax location. Card details are collected and stored by Stripe, Apple or Google. We never see or store your full card number.
• Keys and connected accounts. API keys or settings you add for an app you build, and access to accounts you connect (for example GitHub). These are stored encrypted and used only to do what you asked.
• Feedback and support. Ratings you give AI replies, bug reports, screenshots you attach, survey answers and anything you send when you contact us.
• Consulting information. For Consulting Services: business contact details, information about your organization, systems and processes, and any data or system access you give us so we can do the work.
• Content you publish. Anything you choose to make public, such as an app on the Co-Create showcase, a leaderboard handle, or a submission to a promotion.

2.2 Information collected automatically

• Device and connection information. Device type and model, operating system, browser, app version, IP address, approximate location derived from the IP address, language and time zone.
• Sign-in and security information. Sign-in times and methods, signed-in sessions and devices, two-step sign-in events, and security signals used to detect abuse.
• Usage and activity information. When you open the app, which screens you use, how long you are active, which features and actions you use (for example edits, approvals, builds and messages sent), errors and performance data. We use this to run, secure, support and improve the Services.
• Push notification tokens for the devices you allow to receive notifications.
• Website analytics. On co-create.build we use Google Analytics to understand which pages help people. Visitors in Europe are asked first. Advertising features are switched off. See our Cookie Policy.
• Attribution. If you arrive through one of our links (for example a referral link or a social post), we record where you came from when you sign up.

2.3 Information from others

• Sign-in providers. If you sign in with Google or Apple, we receive your name and email address (or Apple's private relay address) from them.
• Payment providers. Stripe, Apple, Google and RevenueCat tell us whether a payment succeeded, your subscription status and limited billing details.
• Collaborators. A person who invites you gives us your email address, and collaborators can add content that mentions you.
• Connected services. If you connect an account such as GitHub, we receive the information that service shares with your permission (for example repository contents you choose to import).

We do not intentionally collect sensitive personal information (such as health, biometric, racial or ethnic, religious, or precise geolocation information). Please do not put it in your content unless your use requires it, and if it does, you are responsible for having the right to do so.

3. How we use information

• To provide the Services: create and secure your account, store and sync your work, build, run and host the apps you make, deliver messages and notifications, and carry out the AI features you use.
• To power AI features: send your prompts and the relevant content to AI model providers to generate questions, plans, designs, replies, transcripts and code (see Section 5).
• To bill you, manage credits and plans, calculate tax, and prevent fraud, payment abuse and misuse of free trials, starter credits and promotions.
• To keep the Services safe and secure: detect and investigate abuse, security incidents and violations of our Usage Policy, and protect our users, our systems and the public.
• To support you: answer questions, investigate problems you report, and help recover your work where we can.
• To understand and improve the Services: measure what is used, find and fix errors, and test and develop features. We use aggregated or de-identified information where we can.
• To communicate with you about your account, security, billing, changes to the Services or our terms, and, where allowed, product news. You can opt out of non-essential emails.
• To comply with the law, enforce our terms, and establish or defend legal claims.

Staff access. A small number of authorized AI AIDE personnel can access account information and content, including projects and messages, when it is needed for a purpose listed above, for example to answer a support request, investigate an error or a report of abuse, keep the Services secure, or meet a legal obligation. Access is limited to the people who need it for that purpose.

4. Legal bases for processing (EEA, UK and Switzerland)

If the GDPR or UK GDPR applies to you, we rely on these legal bases: contract (to provide the Services you signed up for); legitimate interests (to secure, support and improve the Services, prevent fraud and communicate with you, where those interests are not overridden by your rights); consent (for analytics cookies where required, text messages and optional features, which you can withdraw at any time); and legal obligation (for tax, accounting and lawful requests).

5. AI features and model providers

Many features of the Services use AI models. To make them work, the content a feature needs (your request, the relevant parts of a project, document or conversation, attached images or audio, and code) is sent to an AI model provider, the provider generates a response, and the response is returned to you.

• Providers. We currently use models from Anthropic and OpenAI, and we may route requests through OpenRouter, a service that connects to model providers, as a backup. The current list is on our Subprocessors page.
• Training. We do not use your content to train our own AI models. Under the business terms we use with providers, data sent through their APIs is not used to train their models by default. Where a provider account we control offers a choice about training, we set it so that customer content is not used for training.
• Provider retention. Providers may keep inputs and outputs for a limited period (often up to 30 days) to operate their services and detect abuse, under their own terms.
• AI memory. Our AI assistant can remember context from your conversations and projects so it can help you better. This memory is stored on infrastructure we operate. It is limited to conversations you are part of, and it is deleted with your account.
• Transcription. Voice notes and recordings are transcribed on systems we operate or, if those are unavailable, by OpenAI.
• Accuracy. AI output can be wrong. See our Responsible AI page and the AI terms for each product.

6. Text messages (SMS)

IMPORTANT: SMS CONSENT DISCLOSURE. AI AIDE LLC sends text messages using Twilio, Inc. Our toll-free number is +1 (877) 326-4106. AI AIDE LLC provides separate opt-in choices for marketing messages and non-marketing transactional/security messages. Consent is not a condition of purchasing any product or service. Message and data rates may apply. Reply STOP to cancel at any time. Reply HELP for help.

6.1 Our SMS program

AI AIDE sends text messages exclusively through Twilio, Inc., a licensed cloud communications platform. All outbound SMS originate from our Twilio-provisioned toll-free number: +1 (877) 326-4106. AI AIDE LLC may send SMS messages to users who have provided express consent. AI AIDE LLC uses separate opt-in choices for marketing messages and non-marketing transactional/security messages.

6.2 Transactional, account, service and security messages

AI AIDE LLC may send non-marketing SMS messages related to a user's account, requested services, authentication, security, support, or active use of AI AIDE LLC products and services. These messages may include verification codes, two-factor authentication codes, account notifications, password change alerts, login alerts, unrecognized device alerts, appointment or consultation reminders, service-related updates, support communications, and security alerts. AI AIDE LLC does not use this SMS program to send marketing, promotional, advertising, coupon, sales, or solicitation text messages.

6.3 How to opt in

Users may enroll in SMS communications only through affirmative opt-in methods, including selecting an SMS consent checkbox on a website form, application signup flow, onboarding screen, or account settings page; completing an in-app SMS opt-in flow and selecting text messaging as a communication preference; providing documented consent during a client engagement, followed by a confirmation text if double opt-in is used; or texting a designated keyword to +1 (877) 326-4106 and completing any required confirmation step, if keyword opt-in is enabled. SMS consent checkboxes are not preselected. The user must actively select the checkbox or otherwise provide affirmative consent. Providing a phone number alone does not constitute SMS consent. SMS consent is not bundled with acceptance of this Privacy Policy or our Terms.

6.4 SMS consent records

AI AIDE LLC may record and retain SMS consent information, including the user's mobile phone number; the date and time of opt-in; the opt-in method used; the source page, application screen, or signup workflow where consent was collected; the exact consent language shown at the time of opt-in; IP address, account ID, or device identifier, where technically available; opt-out timestamps and opt-out method; and Twilio message metadata, delivery status codes, and message identifiers where applicable.

6.5 How to opt out, and help

Users may withdraw SMS consent at any time by replying STOP to any message sent from +1 (877) 326-4106, texting STOP to +1 (877) 326-4106 at any time, updating communication preferences in account settings, where available, or emailing cyberdesigner@aiaide.io and requesting removal from SMS communications. After a valid STOP request, AI AIDE LLC will send no further SMS messages to that number except a single opt-out confirmation and any messages required by law. Text HELP to +1 (877) 326-4106 at any time to receive contact information, opt-out instructions, and a link to this Policy. Users may also email cyberdesigner@aiaide.io for SMS-related assistance.

6.6 Frequency, carrier costs and what is collected

Message frequency varies based on account activity, service activity, login activity, authentication events, support activity, and security events. Message and data rates may apply based on the user's mobile carrier and plan. AI AIDE LLC is not responsible for charges imposed by a wireless carrier. Enrollment in SMS communications may result in collection of the user's mobile telephone number, mobile carrier information, opt-in consent records, opt-out records, message delivery status, Twilio message identifiers, and the content of inbound messages sent to our toll-free number. This information is stored in AI AIDE LLC systems and may also be processed by Twilio for message delivery, routing, logging, compliance, and support purposes. Twilio processes mobile numbers, message content, message metadata, and delivery information on AI AIDE LLC's behalf as a data sub-processor.

6.7 No sale or sharing of SMS consent

AI AIDE LLC does not sell, rent, share, or transfer SMS opt-in data, SMS consent, or phone numbers collected for SMS purposes with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent will not be shared with any third parties, except as necessary to provide the SMS service, comply with applicable law, maintain suppression lists, process opt-out requests, respond to support requests, or satisfy carrier, platform, or legal requirements.

Our toll-free SMS program is supported by major U.S. wireless carriers including AT&T, T-Mobile, Verizon, and others. Carrier support may vary. The full SMS terms are in our SMS Terms, and our opt-in record is in our SMS Opt-In Documentation.

7. How we share information

We share personal information only as described here:

• Service providers (subprocessors) who host, store, transmit, analyze or otherwise process information for us under contracts that limit their use of it. They are listed on our Subprocessors page.
• People you work with. Collaborators on a project or members of a chat see the content shared there, along with your name and email address. If you build an app, the people you give access to it can see what it shows them.
• The public, when you choose. Apps you publish to the showcase or make live, a leaderboard handle and its stats, and promotion entries you submit are visible to anyone.
• Payment and app store providers to process payments and subscriptions.
• Legal and safety reasons. When we believe in good faith it is required by law or legal process, or needed to protect the rights, property or safety of AI AIDE, our users or others, including to detect and prevent fraud and abuse. We report child sexual abuse material to the National Center for Missing and Exploited Children as the law requires.
• Business transfers. As part of a merger, acquisition, financing, reorganization or sale of assets, in which case your information remains subject to this policy and we will tell you before it becomes subject to a different one.
• With your consent or at your direction.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising, as those terms are defined by US state privacy laws. We do not knowingly sell or share the personal information of anyone under 16.

8. Apps you build with Co-Create

When you build and run an app with Co-Create, the app's own users may give it personal information. For that information you are the controller and we process it on your behalf under our Data Processing Addendum. You are responsible for telling your app's users how their information is used, for having a lawful basis to collect it, and for responding to their requests. We will help you where the law requires.

9. Cookies and similar technologies

We use cookies, local storage and similar technologies to keep you signed in, remember your choices, secure the Services and, on co-create.build, measure how our website is used. Details and controls are in our Cookie Policy.

10. How long we keep information

We keep personal information for as long as we need it for the purposes in this policy, and then delete or de-identify it.

We may keep information longer when the law requires it, to resolve disputes, to enforce our agreements, or to prevent fraud and abuse. Detailed retention rules for Co-Create are in its Data Retention and Deletion terms.

11. Security

We protect information with encryption in transit (HTTPS), encryption of stored keys and secrets, access controls, separate databases for the apps you build, session controls and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password, keep your sign-in details private and tell us promptly about any suspected problem. More detail is in our Trust Center. If a breach affects your personal information, we will notify you and the authorities as the law requires.

12. Your rights and choices

12.1 Everyone

You can update your account details in the product settings, delete content, delete your Co-Create account (Settings, or https://co-create.build/delete-account), delete some of your data (https://co-create.build/delete-data), download your apps' code, opt out of non-essential emails using the unsubscribe link, opt out of texts by replying STOP, and turn off push notifications in your device settings.

12.2 United States residents

Depending on your state (including Texas, California, Colorado, Connecticut, Virginia, Utah, Oregon and others with similar laws), you may have the right to: know and access the personal information we hold about you; correct inaccurate information; delete it; obtain a portable copy; opt out of the sale of personal information, targeted advertising and certain profiling (we do none of these); limit the use of sensitive personal information (we do not use it to infer characteristics); and not be discriminated against for using your rights.

Texas residents (Texas Data Privacy and Security Act). You have the rights above. If we decline your request, you may appeal by replying to our decision or emailing cyberdesigner@aiaide.io with the subject "Privacy appeal". We will respond to an appeal within 60 days. If you are not satisfied, you may contact the Texas Attorney General at https://www.texasattorneygeneral.gov.

California residents (CCPA/CPRA). In the past 12 months we collected the categories of personal information described in Section 2 (identifiers, customer records, commercial information, internet and device activity, approximate location derived from IP address, audio recordings you upload, professional information for consulting clients, and inferences about product use), from the sources in Section 2, for the purposes in Section 3, and disclosed them to the categories of recipients in Section 7 for business purposes. We have not sold or shared personal information. You may use an authorized agent. Our Your Privacy Choices page explains how.

12.3 EEA, UK and Swiss residents

You have the right to access, correct, delete or port your personal information, to restrict or object to processing, to withdraw consent at any time, and to complain to your data protection authority.

12.4 Making a request

See Your Privacy Choices or email cyberdesigner@aiaide.io with the subject "Privacy request". We will verify your identity (usually by confirming control of your account email) and respond within the time the law requires, normally 45 days in the US and one month in the EEA and UK.

13. Children

The Services are for adults. Co-Create requires users to be at least 18. Our Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email us and we will delete it.

14. International transfers

We are based in the United States, and our primary systems are located there. Your information is processed in the United States and wherever our service providers operate. When we transfer personal information from the EEA, the UK or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses, as described in our Data Processing Addendum.

15. Third-party links and services

The Services may link to or integrate with websites and services we do not control, such as app stores, sign-in providers, or services you connect to an app you build. Their privacy practices are governed by their own policies.

16. Changes to this policy

We may update this policy from time to time. If we make material changes, we will tell you in the product or by email before they take effect, and we will update the dates at the top of this page. Previous versions are listed in the Legal Center.

17. Contact us

AI AIDE LLC, Dallas, Texas, USA. Email cyberdesigner@aiaide.io. For privacy requests, use the subject "Privacy request".