Privacy Policy

Information we collect

We collect only the data the service needs to run. There is no analytics, advertising, or background usage telemetry on this site or in your account.

Account & identity

• person Your name, email, and a public username.
• photo_camera Profile photo — if you upload one, or if you sign up with a provider that supplies one (e.g. Google), we store a copy on our servers so it stays available and loads reliably rather than depending on the provider.
• key Sign-in credentials. Passwords are stored only as a one-way hash — never the raw password. Password-reset links are stored as a hash too; the usable link exists only in the email we send you.
• link If you use social sign-in, the provider and your account id at that provider (see Social sign-in).

Activity & content

• devices Active sessions — each time you sign in we record the device/browser label, IP address, and user-agent so you can see where you're signed in and revoke a device.
• sync Synced requests — only if you turn syncing on. When enabled, the desktop app sends the natural-language requests you run so they're visible across your devices. Syncing is off by default and you control it from the app.
• share Shared chats — if you publish a chat, we store the snapshot you chose to share (title and messages, sanitized) behind an unguessable link until you revoke it.
• mail Contact messages — if you use the contact form, the name, email, subject, and message you send, plus the IP and user-agent of the request for spam triage.
• thumb_up Guide feedback — an anonymous "was this helpful?" vote and optional comment. We don't attach your identity unless you're signed in when you vote.

We do not collect crash reports, usage metrics, or analytics of any kind.

How we use it

To run your account, keep it secure, and power the features you opt into — cross-device session management, request sync, and chat sharing. We do not use your task content to train models without your consent, and we don't profile you for advertising.

Social sign-in

If you sign in with Google, GitHub, X (Twitter), or Telegram, we receive a stable account id from that provider and, where available, your name, email, and profile picture, which we use to create or match your Aero account. Some providers (X and Telegram) don't share an email — in that case we generate a non-deliverable placeholder address internally and never email it.

Data on your device

Aero is an on-device agent. The files, apps, and content it works with stay on your machine unless you explicitly connect an external service or publish a chat.

Cookies

We use a small number of first-party cookies that are essential to keep you signed in, protect forms against cross-site request forgery, and remember a guide vote. We don't use advertising or analytics cookies. See the Cookie Policy for the full list.

Sharing

We share data only with the service providers needed to run Aero (for example, email delivery), or when required by law. We never sell personal data.

Your rights

You can edit your profile, manage connected sign-in methods, revoke devices, and revoke shared chats from your profile. You can permanently delete your account and everything it owns — skills, shares, sessions, synced requests, and connected identities — from Profile → Delete account. Deletion is immediate and not reversible.

Security

We use encryption in transit, store passwords and reset tokens only as hashes, and never expose your API key or password hash through the API. Published chats are reachable only via an unguessable link and can be revoked at any time.

Contact

Questions about this policy? Get in touch.