Privacy Policy
1. Who we are
IDE ascodex is operated by Aurora Ember Cyber Bio Lab, a registered business name of a sole trader in Ireland (“we”, “us”). We are the data controller for the personal data described in this policy.
| Trader | Aurora Ember Cyber Bio Lab (registered business name) |
| Legal form | Sole trader, Ireland (not a limited company) |
| Postal address | 160 Wolfe Tone Street, Cork, T23 K688, Ireland |
| VAT number | Not registered for VAT |
| [email protected] | |
| Website | ascodex.com · app at ide.ascodex.com |
When you use agents on your own files, code or documents, we process that content only to provide the service you asked for. If that content contains other people's personal data, you are responsible for having a lawful basis to use it.
2. Data we collect
| Category | Examples | Legal basis (GDPR Art. 6) |
|---|---|---|
| Account | Username, email, password hash, session token | Contract (Art. 6(1)(b)) |
| Billing | Email, Stripe customer ID, plan status, invoices, billing country | Contract; legal obligation (Art. 6(1)(c)) |
| Technical logs | IP address, browser type, error logs, request IDs | Legitimate interest: security and reliability (Art. 6(1)(f)) |
| Product usage | Feature use and agent run counts, aggregated where possible | Legitimate interest: improving the service |
| Your content | Workspaces, chats and files you add | Contract — processed only to deliver the service |
| API tokens | Token ID and hash (the token itself is shown to you once) | Contract |
3. How we use data
- Sign you in and keep the web and desktop apps secure
- Run subscriptions, invoices and fraud checks (through Stripe)
- Run the agents, tools and document features you turn on
- Detect abuse, fix outages and improve reliability
- Meet legal and tax obligations and respond to lawful requests
4. Who receives data
- Stripe — payments and tax calculation
- Railway — hosting of the web app and its logs
- Cloudflare — DNS, network security and TLS
- Vercel — hosting of this website
- GitHub — distribution of desktop installers
- AI model providers you connect (for example Anthropic, OpenAI, Google) — receive your prompts and the content you send to them, under their own terms, using your own API keys
Some of these providers process data outside the EEA. Where they do, we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or Standard Contractual Clauses.
Fonts on this website are served from our own domain; we do not load Google Fonts or other third-party font services.
5. How long we keep data
- Account data: until you delete your account, then removed from backups within 30 days
- Billing and tax records: 6 years, as Irish tax law requires
- Security logs: 30–90 days, longer only while investigating an incident
- API tokens: until you revoke them or delete your account
6. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or send it to you in a portable format. Where we rely on consent, you can withdraw it at any time.
Send requests to [email protected]. We reply within one month.
You can also complain to the Irish Data Protection Commission (dataprotection.ie) or to the data protection authority where you live or work.
7. Security
- Sessions use signed JWT tokens in a secure cookie, valid for up to about 30 days
- Passwords are stored only as hashes; changing or resetting your password signs out all sessions
- All traffic is encrypted with TLS; API tokens are stored only as hashes
- Payment webhooks are signature-verified
- Access keys follow least privilege and are never committed to source code
8. Children
IDE ascodex is not intended for anyone under 16, and we do not knowingly collect their data.
9. Changes
If we change this policy we will post the new version here with a new effective date, and email account holders about significant changes.
10. Contact
Aurora Ember Cyber Bio Lab · 160 Wolfe Tone Street, Cork, T23 K688, Ireland · [email protected]