Legal
Privacy Policy
Last updated: June 2026
1. What we collect
| Category | Examples | Why |
|---|---|---|
| Account info | Name, email, password (hashed) | Create and secure your account |
| Chat content | Messages, uploaded files, generated responses | Provide the chat service |
| Usage data | Token counts, model used, timestamps, cost | Enforce plan limits, billing |
| Billing info | Subscription status, plan tier | Manage your subscription (full card details are handled by Stripe, not stored by us) |
| Technical data | IP address, browser type, basic logs | Security, abuse prevention, debugging |
2. How your data flows through the Service
Aleo AI is built on Open WebUI (an open-source chat interface, self-hosted by us) and connects to AI language models through OpenCode's API. Understanding this matters for privacy because:
- Your account and chat history live on our own servers, in our own database. We are not affiliated with Open WebUI or OpenCode, and neither of them has direct access to our database.
- Your messages, when you chat, are sent from our servers to OpenCode's API in order to generate a response from the underlying AI model. This is the only point where your message content leaves our infrastructure. OpenCode's handling of that data is governed by their own Privacy Policy, which we encourage you to review.
- We do not share your account information (email, password, billing details) with OpenCode — only the message content necessary to generate a response is transmitted to their API.
3. What we don't do
- We do not sell your personal data or chat content to third parties.
- We do not use your messages to train AI models, ours or anyone else's.
- We do not share your account credentials, email, or billing information with OpenCode or any model provider — only message content needed to generate a response.
- We do not display advertising or share your data with advertisers.
4. Payment processing
Subscriptions are billed through Stripe. We do not store your full credit card number — Stripe handles payment collection and storage directly, and we only retain your subscription status and a reference ID needed to manage your plan. See Stripe's Privacy Policy for how they handle payment data.
5. Cookies and local storage
We use browser local storage (not third-party tracking cookies) to keep you signed in between visits. This stores an authentication token on your device — it is not used for advertising or cross-site tracking.
6. Data retention
We retain your account and chat history for as long as your account is active. If you delete your account, we will delete your associated personal data and chat history within a reasonable period, except where we're required to retain certain records (e.g. billing records) for legal or accounting purposes.
7. Your choices
- You can review and update your account information at any time while signed in.
- You can cancel your subscription at any time through the billing portal on your account page, or by emailing us if you've lost access to your account.
- You can request deletion of your account and associated data by contacting support@aleoai.org.
8. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and hashed password storage. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable steps to protect your information against unauthorized access.
9. Children's privacy
The Service is not directed at children under 13 (or the relevant minimum age in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
11. Contact
Questions about this Privacy Policy or your data can be sent to support@aleoai.org.