Privacy Policy

Last updated: October 4, 2026

Plain-language summary. We collect the minimum data needed to run AidaIDE: your account email and name, your license activations, and basic billing records. We use website analytics (Google Analytics 4) on aidaide.app and may collect limited first-party product analytics from the desktop app (for example, whether you completed a first SSH or SFTP session) tied to your account id — never the contents of your sessions, files, or vault. We do not sell your data. AI prompts you type into AidaIDE go directly from your machine to whichever AI provider you configure — they do not pass through our servers.

1. Who we are

The data controller for the Service is Laing Labs. You can reach us at electronyxinc@gmail.com for any privacy question or to exercise your rights.

2. What we collect

Category	Examples	Why
Account	Email, first/last name, password hash	To create and authenticate your account.
Billing	Order ID, plan, amount, country (from Lemon Squeezy)	To fulfill your purchase and meet tax obligations.
Device activations	SHA-256 hash of MAC + hostname, OS family, first/last seen timestamps	To enforce the device cap on your license and let you revoke devices from your dashboard.
Support	Ticket contents, screenshots and log excerpts you choose to attach	To answer your support requests.
Marketplace	Items you publish, names of items you install	To run the marketplace and prevent abuse.
Website analytics	Page-view and click events on aidaide.app via Google Analytics 4	To understand how the website is used and where it is broken.
Product analytics (desktop)	First-party events such as `app_activated` and `aha_moment`, stitched to your internal account id	To measure onboarding and Free→Pro conversion. Never session contents, files, or vault data.

3. What we do not collect

We do not log the contents of AI prompts or code edits made inside AidaIDE.
We do not see the contents of files you transfer over SSH/SFTP using AidaIDE.
We do not have access to credentials saved in your AidaIDE vault — the vault is encrypted with a key derived from your local passphrase and never leaves your machine.
Product analytics events do not include hostname, IP address, username, file paths, filenames, commands, or vault contents.
Desktop product analytics are not sent to Google Analytics 4 or Google Ads.
We do not sell personal data to advertisers or data brokers.

4. Third-party processors

We use a small set of third parties to run the Service. Each one only sees the slice of data they need.

Lemon Squeezy — payment processing and tax. They receive your name, email, and billing country.
Vercel — web hosting and serverless functions. They host the website and the AidaIDE API.
Neon / Cloudflare R2 — database and binary storage.
Google Analytics 4 — website analytics on aidaide.app only. We do not currently honor browser "Do Not Track" or "Global Privacy Control" signals, and we do not show a cookie banner. If we add that later we will update this Policy. Google Ads tags are not used on aidaide.app as of this revision. First-party product analytics stay on our systems (API and database) and are not sent to Google.
AI providers (Anthropic, OpenAI, Google, others) — only when you configure your own API key in AidaIDE. Requests flow directly from your computer to the provider; we never see the content.

5. How long we keep your data

Account and license data is kept for as long as your account is active. Billing records are kept for seven (7) years to satisfy accounting and tax obligations. Support tickets are kept for two (2) years from resolution. Google Analytics 4 events are retained for fourteen (14) months. First-party product analytics are retained for twenty-four (24) months and then deleted or aggregated. You can ask us to delete your account and the personal data tied to it at any time; we will delete within thirty (30) days, except for records we are legally required to retain.

6. Your rights

Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you, to receive a copy in a portable format, and to object to certain uses. To exercise any of these rights, email electronyxinc@gmail.com from the address tied to your account and we will respond within thirty (30) days.

You can opt out of desktop product analytics in Settings → Privacy when that control is available.

7. Children

AidaIDE is not directed at children under thirteen (13). If you believe a child has created an account, contact us and we will delete it.

8. International transfers

The Service is hosted in the United States. If you access it from outside the US, your data will be transferred to and processed in the US under appropriate safeguards. For European customers, we plan to offer EU-jurisdiction data storage; that work is tracked on our roadmap.

9. Security

We use TLS for all data in transit, hashed passwords (bcrypt), and the vault encrypts secrets at rest on your machine. No system is perfect; if you discover a security issue, please report it to electronyxinc@gmail.com before disclosing publicly so we can fix it.

10. Changes to this Policy

If we make a material change to this Policy we will email account holders thirty (30) days before it takes effect. Minor wording fixes are made without notice; the "Last updated" date at the top of this page always reflects the latest revision.

Heads up. This document is a working draft pending legal review. If anything here conflicts with applicable law in your jurisdiction, the law controls and we will update the policy accordingly.