Privacy
What we collect, and what we do with it. Plain language first, the legal detail after. Last updated 25 September 2026.
The short version
We set no cookies on the pages of this site and store nothing that identifies you, though our host adds a monitoring script of its own, described below. My Agent sets only the cookies it needs to work. If you open an account in My Agent, we keep what you give us so that we can run your agents and bill you: your contact and billing details, the connection to your property management system, the files, notes and Google Drive links you add, your onboarding survey answers, and your invoices and payments. If the chat assistant in My Agent gives AI answers, your messages and your onboarding progress are sent to Anthropic to write them, never the contents of your files. Card payments go through Stripe, which holds your card details. A USDC payment is public on the Ethereum blockchain. We do not sell any of it, and you can delete your account yourself at any time.
Who we are
Aonios Limited (trading as Aonios), registration number HE 475524, registered office Atlantidon 8, 6058 Larnaca, Cyprus. We are the data controller for the information described on this page. For anything to do with your data, including deletion, write to elias@aonios.ai.
Reading this site
Apart from My Agent, whose cookies are listed below, we set no cookies on the pages of this site, and nothing of ours tracks you across other websites. There is no Google Analytics and no advertising pixel. The fonts are served from our own server, so opening a page sends nothing to Google.
One script is not ours. Our host, GoDaddy, adds its own performance-monitoring script to the pages it serves. It loads from GoDaddy’s servers (img1.wsimg.com) and, for each page you open, sends GoDaddy (csp.secureserver.net) the page address, the address you came from, your browser type, screen size and loading times, with a visitor number that it keeps in the cookie _tccl_visitor for a year. It also sets _tccl_visit (30 minutes) and _scc_session (20 minutes). Blocking the script does not affect this site.
We do count page views, because otherwise we have no idea whether any of this is working. That counter runs on our own server and records four things: the page, the host of the site you arrived from (never the full address), your browser width, and a one-way hash.
The hash is made from your IP address, your browser's user-agent string, today's date and a secret held on our server. It lets us tell one visit from two without ever storing who you are. The salt changes at midnight, so today's hash cannot be linked to tomorrow's, and none of it can be turned back into an IP address. The counter never writes your IP address to disk. Because nothing identifiable is stored, this needs no consent banner, and you will not see one.
Your account in My Agent
My Agent is the client portal where you create your account, connect your property management system, brief your agent and pay. This is what it keeps.
| What | Why | Legal basis |
|---|---|---|
| Name, company, email address, phone, country, VAT number and billing address | To open your account, invoice you and contact you | Contract; keeping invoices is a legal obligation |
| Number of properties and which property management system you use | To bill you per property and connect your agents | Contract |
| Your password, and the links we email to confirm your address or reset your password | To sign you in. We store only a salted hash of the password, never the password itself, and only a hash of each link, which works once and then expires | Contract |
| The connection to your property management system, including any keys or passwords you enter | To connect your agents to it. Encrypted at rest. A Hostaway key is checked with Hostaway once, when you save it | Contract |
| Files and notes you upload for your agent: house rules, access details, door codes, and any guest documents you choose to add | To brief your agent. Encrypted at rest; titles, file names and sizes are kept so that you can find them | Contract |
| Copilot cards you submit, your business library, and white glove requests (the topic and the times that suit you) | To shape how your agent works, and to schedule your onboarding hour | Contract |
| Your onboarding survey answers, and your progress through the setup steps | To set your agents up the way you run your stays. The answers are encrypted at rest | Contract |
| Google Drive links you add, with the name you give them | So that our team can import what you shared. We keep only a clean link to the folder or file, and My Agent itself never opens it | Contract |
| Requests for help: the topic, and a message if you write one | To answer you. The message is encrypted at rest and is not put in our notification emails | Contract |
| A Slack connection, only if you make one: the workspace and channel names and Slack’s access token for them, or, if you ask us to connect it, the workspace address, the channel and your note | So that your agents can post to the channel you chose. The token and your note are encrypted at rest and never shown again | Contract |
| Your conversations with the Aonios assistant, and survey answers it prepares for you to confirm | To help you with the setup steps and answer your questions. Messages are encrypted at rest. Nothing it prepares is saved to your survey until you confirm it | Contract |
| Notifications in My Agent about your account, payments and library, and whether you have read them | To keep you informed in the portal. They are never sent as emails | Contract |
| Your plan, add-ons, white glove setting, the currency you choose for your invoices, invoices and payments, with the exchange rate used on each invoice and the Stripe payment reference or Ethereum transaction hash | Billing and accounting | Contract; legal obligation |
| A card you choose to save: its brand, last four digits and expiry, and Stripe's references for it | To show which card pays automatically, and to charge it when you have asked us to | Contract |
| A USDC payment: the amount, the transaction hash, the wallet address you paid from and the block number | To match the payment to your invoice | Contract |
| Security records: the IP address of your last sign-in and of the actions in your account log, a record of what was done on the account and when (sign-ins, payments, plan changes, deletions), and short-lived counters of sign-in attempts | To stop abuse and fraud, and to settle disputes | Legitimate interests: keeping accounts and payments safe |
My Agent makes no automated decisions about you that have legal or similarly significant effects.
Paying
By card. You enter your card on Stripe's own payment page. The full card number and security code go to Stripe and never reach us; of a card you choose to save we keep only what the table above lists. Stripe receives your name, email address, and the invoice amount and number. It acts as our processor for the payment, and as an independent controller under its own privacy policy.
In USDC. A USDC payment is a public transaction on the Ethereum blockchain: the sending and receiving addresses, the amount and the time can be seen by anyone, permanently, and neither we nor anyone else can delete them. We record the wallet address you pay from so that we can match the payment to your invoice. To confirm it, our server (not your browser) looks the transaction up with two independent Ethereum node providers, today PublicNode and dRPC. If it is not found on Ethereum, the public nodes of Base, Arbitrum, Optimism, Polygon, BNB Chain and Avalanche are asked too. They receive only the transaction details, which are public anyway. We never hold your keys and never send transactions; your wallet handles the payment under its own terms.
Currencies. You choose the currency of your invoices. Prices are set in US dollars; for euros, pounds sterling, Australian or Canadian dollars, our server downloads the European Central Bank’s public daily reference rates once a day and fixes the rate on each invoice. That download sends nothing about you or your account.
With WalletConnect. Only if the account page shows a WalletConnect button and you use it: your browser then loads WalletConnect’s code (Reown AppKit) from the jsDelivr network, and the connection to your wallet runs through Reown’s WalletConnect servers, under Reown’s own terms. Without that button, nothing on the account page loads from either.
Cookies in My Agent
My Agent sets only the cookies it needs to work. All of them are our own, none of them tracks you, and so none needs a consent banner. Our host’s script, described above, can add its own.
| Cookie | What it does | How long |
|---|---|---|
| aon_portal | Keeps you signed in. It holds a random session number | Until you sign out. A session ends after 8 hours without use, and 7 days after you signed in at the latest |
| aon_portal_dev | Recognises a browser you have signed in from before, so that you can still sign in while someone elsewhere is guessing your password. It holds your user number, a random number and a signature: nothing readable about you | 180 days, or until you change your password |
| aon_portal_pre | Protects the sign-in and registration forms against forged requests from other sites. It is set when you open My Agent without being signed in, and holds a random number | Until you close your browser |
While you pay from a wallet, the page also keeps the transaction hash in your browser's local storage until My Agent has received it, so that a payment is not lost if the page closes at the wrong moment. It is removed as soon as it has been sent. My Agent also remembers there whether you keep the assistant’s column open (aon.chat.open); it holds nothing else.
What we do not do
- We do not sell your data, rent it, or pass it to advertisers.
- We do not add you to a marketing list. We email you about your account only: confirmations, invoices, receipts, reminders and security notices.
- We do not use your data to train a model.
- We do not run advertising trackers or third-party analytics. The one outside script on our pages is our host’s, described above.
Who else can see it
- GoDaddy hosts this website and My Agent. Everything My Agent stores is on its servers, and its mail server sends our emails to you. Its own script reports each page you open, as described under Reading this site.
- Google provides our mailbox. Your emails to us land there, and so do our own notices about accounts: new registrations with their details, payments, plan changes, white glove requests, and cancellations with their reasons. They never include your keys or passwords.
- Stripe handles card payments, as described under Paying.
- The Ethereum network and the node providers named under Paying see USDC payments.
- Hostaway, only if you use it: the account id and key you save are checked with Hostaway once, to confirm that they work.
- jsDelivr and Reown, only if you pay with WalletConnect, as described under Paying.
- Anthropic, only while we have switched on AI answers in the chat assistant, and only for accounts whose email address is confirmed. To write each answer, Anthropic, a US company that provides the AI model, receives your message, up to 20 earlier messages of the same conversation, and your onboarding context: your company name, account status, number of properties, currency, agents and white glove setting, how far you are through the setup steps, which property management system you use, your survey answers, the names, types, topics, sizes and dates of your uploads and notes, the names of your Google Drive links and the page you are on. It never receives the contents of your files or Drive links, the text of your notes, keys or passwords, Slack tokens, payment details or anything about other clients. Without AI answers, the assistant answers from your progress and a fixed list of questions and answers, and nothing is sent anywhere.
- Slack, only if you connect it: Slack issues the access token when you approve the connection in Slack, your agents can then post to the channel you chose, and when you disconnect we ask Slack to cancel the token. Slack handles your workspace under its own terms.
- Google Drive, only for the links you add: our team opens them in Google Drive to import what you shared. My Agent never opens them.
- The European Central Bank publishes the exchange rates our server downloads, as described under Paying. It receives nothing about you.
GoDaddy and Google may process data outside the EEA. Where they do, transfers rely on the European Commission’s Standard Contractual Clauses. The people running Aonios can see your account in our admin area, and can see your keys and passwords only through a deliberate step that is logged. Nobody else receives your information from us: there is no CRM, no email marketing platform and, apart from our host’s own script, no analytics provider in the chain.
How long we keep it
| What | Kept until |
|---|---|
| An account that is never paid for | Erased 30 days after registering, with a warning 7 days before |
| An account that stops being paid | After 60 days unpaid, and two email warnings, the account is closed and your uploads, notes, keys, white glove requests, Copilot cards, survey answers, Drive links, help requests, chat, notifications and Slack connection are deleted. The rest is kept as for a cancelled account |
| A cancelled or closed account | Erased 12 months after it ends |
| Invoices and payment records, with the billing name, country, VAT number and address on them | As long as accounting and tax law requires, even after the account is erased |
| IP addresses | 90 days, or at once when the account is erased |
| A file, note, Drive link or system connection you delete | Deleted at once. Disconnecting Slack deletes its token at once and asks Slack to cancel it |
| Chat messages with the Aonios assistant | 180 days after they were written. Survey answers it prepared expire after 24 hours if you do not decide on them, and are deleted 180 days after they were made |
| Notifications in My Agent | Read ones for 180 days; at most 300 per account |
| Your account’s activity log | The newest 1,000 entries, and none older than 400 days |
| Sign-in and password reset attempts for addresses with no account | 90 days |
| Anything on the Ethereum blockchain | Permanently, outside our control or anyone else’s |
Erased data can survive in our host’s backups until they are overwritten.
Your rights under the GDPR
You can:
- See and correct most of your details yourself in My Agent.
- Ask for a copy of everything we hold about you, in a machine-readable format if you want to take it elsewhere.
- Have it corrected if it is wrong.
- Have it erased. We will do it and confirm when it is done, apart from the records the law requires us to keep.
- Object to how we are using it, or ask us to restrict that use.
- Withdraw consent where you gave it.
Deleting your account yourself. In My Agent, open your account’s profile, choose Delete your account and enter your password. It takes effect at once: the subscription ends there and then, and nothing more is charged. We erase your uploads, notes, keys, white glove requests, Copilot cards and business library, your survey answers, Drive links, help requests, conversations with the assistant, notifications and Slack connection, your sign-in, your phone number, your saved card details, and anything you typed to us in the account, such as a cancellation reason. If you have ever paid, your invoices stay, with the billing name, country, VAT number and address on them, because the law requires us to keep them. If Stripe holds a customer record for you, we delete it there when you ask.
For anything else, write to elias@aonios.ai. We answer within 30 days, and usually the same week. If you think we have handled your data badly, you can complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy), or to the supervisory authority where you live or work, such as the Hellenic Data Protection Authority (dpa.gr) in Greece.
Security
My Agent works only over HTTPS. Passwords are stored only as salted hashes, and your keys, uploaded files, notes, survey answers, chat messages and Slack tokens are encrypted at rest. Our admin area sits behind its own passphrase, and every payment, deletion and look at your keys is logged. Access to our mailbox is limited to named people with two-factor authentication. If a breach ever affects your data and creates a real risk to you, we will tell you and the authority within 72 hours of becoming aware of it.
A separate thing worth saying
This page covers you: an operator using our product. It does not cover the guests of anyone who becomes a customer. If you run our agents on your portfolio, or upload guest documents to My Agent, you remain the controller of your guests’ data and we act as your processor under a separate agreement, which we will sign with you before anything connects to your systems.