Privacy Policy

aityx, a product of Aletyx, Inc. Tech preview. Last updated October 7, 2026.

This Privacy Policy describes how Aletyx, Inc. (“Aletyx,” “we,” or “us”) collects, uses, and discloses personal data in connection with aityx (the “Service”), the website at aityx.ai, and the Console at console.aityx.ai.

This Policy covers personal data where Aletyx acts as controller, primarily account and visitor data described below. It does not cover personal data contained within Content, as defined in the Terms of Service at aletyx.ai/legal/aityx-terms/, which you submit to the Service. Aletyx processes that data as a processor on your behalf, governed by the Terms and the Data Processing Addendum at aletyx.ai/legal/aityx-dpa/, not by this Policy. If you are an individual whose personal data appears within another organization’s Content, that organization, not Aletyx, is responsible for responding to your request; see Section 6(d) of the DPA.

1. Personal Data We Collect

Account Information. When you request Tech Preview access or sign in, we collect your email address, name, and organization. Sign-in codes are sent to your email and expire after a short period.

Credentials and Usage Records. We maintain API keys, access records, and usage and billing records associated with your account, consistent with Section 8 of the Terms.

Communications. If you contact us for support or otherwise, we retain the content of that communication and your contact details.

Device and Log Data. We automatically collect standard technical data about your use of the Console and API, such as IP address, browser type, and timestamps, for security and operational purposes.

Cookies and Analytics. We use Google Tag Manager and associated analytics cookies on the Website to understand aggregate usage of our marketing pages. These cookies do not operate on the Console or API.

2. Content You Submit to the Service

States, Questions, Documents, Models, Decision Definitions, and Receipts, collectively Content as defined in the Terms, may contain personal data you choose to include. Aletyx processes that personal data solely as described in Section 4 of the Terms and the DPA, not as described in this Policy. The Console retains Content for the duration of your session; generated Models may be held in the Cache as described in Section 5 of the Terms. The Service does not provide durable, long-term storage of Content; see Section 5 and Section 16 of the Terms for what that means for your responsibility to export what you need to keep.

3. How We Use Personal Data

We use the personal data described in Section 1 to operate the Console and API, authenticate your account, process billing against your Credit balance, provide support, and contact you about the Tech Preview, including operational notices about changes to the Service. We send marketing email only if you opt in, and no more than a few times a year.

4. How We Disclose Personal Data

We disclose personal data to the subprocessors listed at aletyx.ai/legal/aityx-subprocessors/, each engaged solely to help operate the Service. We do not sell personal data. We may disclose personal data if required by law, to protect the rights, property, or safety of Aletyx or others, or in connection with a merger, acquisition, or sale of assets, in which case this Policy would continue to apply to the data involved.

5. Data Retention

Account Information, credentials, and usage and billing records are retained for the duration of your account and for a reasonable period afterward for legal, accounting, and security purposes. Content is retained only as described in Section 2 above. To request deletion of your account, contact [email protected].

6. Security

Aletyx maintains the security measures described in Section 9 of the Terms, including a SOC 2 compliance program at the organizational level.

7. Your Choices

You can unsubscribe from marketing email using the link in those emails; you will continue to receive operational messages related to your account. To request access to, correction of, or deletion of your Account Information, contact [email protected].

8. Children’s Privacy

The Service is not directed to children and is not available to anyone under 18, consistent with Section 3 of the Terms. We do not knowingly collect personal data from anyone under 18.

9. International Visitors

The Service is operated from the United States. If you access the Service from outside the United States, your personal data will be transferred to and processed in the United States. Where Content containing personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland, that transfer is governed by Section 7 of the DPA.

10. Changes to This Policy

We may update this Policy from time to time; the “Last updated” date above reflects the most recent revision. Material changes will be reflected on this page.

11. Contact

Questions about this Policy: [email protected].

Last modified: October 7, 2026