1. Personal data we collect
We collect three kinds of data: what you give us, what your device tells us automatically, and what we receive from the services you choose to connect.
1.1 Data you provide
- Account data: your email address, your name if you give one, and your password in hashed form. If you sign in with Google we receive your email address, name and profile picture from Google instead.
- Inputs: the prompts, files, images and instructions you send to Alias.
- Outputs: what the models return in response, and the record of which route produced them.
- Payment data: handled by our payment processor. We receive the last four digits, card brand, expiry and billing country. We never hold your full card number.
- Support and feedback: what you write to us, including anything you attach.
1.2 Data collected automatically
- Device and browser data: type, operating system, language, screen size, and approximate location derived from your IP address.
- Usage data: pages visited, features used, sessions started, and token counts metered against your plan.
- Diagnostic data: errors, latency and crash reports.
- Cookies: a session cookie that keeps you signed in, and a small number of preference cookies. Alias sets no advertising cookies and runs no third-party ad trackers.
1.3 Data from services you connect
If you connect a source (a document store, a repository, a calendar, a messaging tool) we receive what that connection is scoped to, and only that. Alias reads with your permissions, never above them: if you cannot see a file in the source system, Alias cannot see it either. You can disconnect a source at any time, which revokes our access to it.
2. How we use personal data
- To run the service: routing your request to a model, returning the answer, keeping your sessions and projects.
- To meter usage against your plan and to bill you.
- To keep the service safe: detecting abuse, fraud, and attempts to extract other people's data.
- To support you when you write in.
- To improve the product in aggregate: which features are used, where requests fail, how long things take.
- To meet legal obligations.
We do not sell personal data, and we do not share it with advertisers.
3. Training
We do not use your inputs or outputs to train models. Alias does not train models at all.
This is worth stating separately from the rest of this policy because it is the question people most often mean when they ask about privacy, and because our answer is simpler than most: we are not a model developer, so we have nothing to train.
What we cannot promise on anyone else's behalf is what the model providers do. We contract for zero-retention and no-training handling where a provider offers it, and section 4 explains what travels to them and why. Each provider's own terms govern their side.
4. Model providers, and what leaves for them
Alias is a router. It does not make the models it answers with; it decides which third-party model is the right one for a given request and sends the request there. That is the product, and it has a consequence for your data that a general "we use service providers" clause does not capture.
When you send a request, the following leaves our systems for the provider chosen for it: your prompt, any files or images attached to it, and the conversation context needed to answer. Your name, your email address, your account identifier and your payment data do not.
Which provider handles a given request depends on the routing, and may differ between two consecutive messages in the same conversation. If you need a request handled by a specific provider, or by none of them, you can pick the model yourself in the composer.
The current list of providers Alias can route to is maintained on our Models page, which is the authoritative version. A list copied into this document would go stale the moment a provider is added or removed.
5. Other recipients
- Infrastructure and hosting providers that run the service.
- Our payment processor, for subscriptions and invoices.
- Email delivery providers, for account and transactional mail.
- Analytics and error-reporting providers, for aggregate product data and diagnostics.
- Professional advisers, where they need it and under a duty of confidence.
- An acquirer, if the business or part of it is ever sold, merged or reorganised. You would be told before your data became subject to a different policy.
- Authorities, where the law requires it. We will tell you unless we are legally barred from doing so.
6. Your rights and choices
Depending on where you live, you may have the right to access your personal data, correct it, delete it, object to or restrict how we use it, receive a portable copy, and withdraw consent where consent is what we relied on.
To exercise any of these, write to privacy@digitalnetworks.ai. We will respond within 30 days, and will tell you if we need longer and why. We will not charge you for a request or treat you differently for making one.
Some of it you can do without asking us. You can delete a conversation or a project from the workspace, disconnect a source from Connectors, and delete your account from Settings. Deleting your account removes your conversations, projects and connections; backups age out within 30 days.
7. International transfers
We are based in the United States, and our infrastructure and model providers operate in several countries. If you are in the European Economic Area, the United Kingdom or Switzerland, your personal data will be transferred outside it.
Where it is, we rely on an adequacy decision where one exists, and on Standard Contractual Clauses with appropriate additional safeguards where one does not.
8. Retention and security
- Account data: kept while your account exists, and deleted within 30 days of you closing it.
- Conversations, projects and files: kept until you delete them, or until your account is closed.
- Usage and billing records: kept for as long as tax and accounting law requires, typically seven years.
- Diagnostic logs: kept for 90 days.
We protect personal data with encryption in transit and at rest, access controls on the systems that hold it, and review of who has that access. No service can promise perfect security, and we will not pretend otherwise; we will tell you and the relevant regulator if a breach affects you, within the time the law allows.
9. Children
Alias is not directed at, and may not be used by, anyone under 18. We do not knowingly collect personal data from children. If we learn that we have, we delete the account and its data. If you believe a child has given us data, write to privacy@digitalnetworks.ai.
10. Legal bases (EEA and UK)
If you are in the EEA or the UK, we rely on the following bases under the GDPR.
| What we do | Basis |
|---|---|
| Provide the service, meter it and bill you | Performance of a contract |
| Route your request to a model provider | Performance of a contract |
| Keep the service safe from abuse and fraud | Legitimate interests |
| Improve the product from aggregate usage | Legitimate interests |
| Send product email you have opted into | Consent |
| Keep tax and accounting records | Legal obligation |
Where we rely on legitimate interests, we have weighed them against your rights and can describe that assessment on request.
11. Regional disclosures
11.1 California
Under the CCPA as amended, California residents may request to know the categories and specific pieces of personal information collected, to delete it, to correct it, and to opt out of sale or sharing.
We do not sell or share personal information as those terms are defined by the CCPA, and we do not use it for cross-context behavioural advertising. We do not use or disclose sensitive personal information beyond the purposes permitted without a right to limit.
11.2 EEA and UK
You may lodge a complaint with your local supervisory authority. We would prefer you raised it with us first, and we will treat it seriously either way.
11.3 Canada
You may withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide parts of the service. Your personal data may be processed outside Canada and be accessible to authorities there under their law.
12. Changes to this policy
If we make a material change we will tell you before it takes effect (by email or in the product) and update the date at the top of this page. Continuing to use Alias after a change takes effect means you accept the updated policy.
13. Contact us
Digital Networks AI LLC, [REGISTERED ADDRESS].
Privacy enquiries and rights requests: privacy@digitalnetworks.ai. Everything else legal: legal@digitalnetworks.ai.
See also Terms of Service and our security practices.