Aicon-Platform
Privacy Policy
Effective date: 16 September 2026
This Privacy Policy explains what personal data Aicon-Platform ("the Service") collects, why, and what rights you have over it. The data controller is Jarkko Laaksonen, trading as a Swedish sole proprietorship (enskild näringsverksamhet) ("we", "us", "our"), reachable at info@aicon-platform.com.
1. What we collect
| Data | Why |
|---|---|
| Email address | To create your account and sign you in via a one-time email link (no password). |
| Project data you submit or generate | The project inputs you enter (vendor, industry, equipment counts, etc.) and the designs, I/O lists, diagrams, and reports generated for you, so you can save and return to your projects. |
| Billing information | Handled entirely by our payment processor, Stripe — we never see or store your card details. We keep a record of your subscription status and Stripe customer ID to manage your plan. |
| Team data (Team plan only) | If you use the Team plan, your teammates' email addresses, roles, and the projects you share with your team are stored so the team feature can work. |
| Basic usage events | A small number of anonymous, first-party events (e.g. that a page was viewed) tied to a random session identifier, plus campaign attribution tags if you arrived via a tracked link. No advertising or cross-site tracking cookies are used. |
| Server logs | Our infrastructure and its providers keep standard technical logs (such as IP address, timestamp, and request metadata) for a limited period, for security, debugging, and abuse prevention. |
2. How we use your data
- To provide, operate, and maintain the Service, including your saved projects;
- to process payments and manage your subscription;
- to send you service-related emails (sign-in links, receipts, team invites);
- to enforce usage limits associated with your plan;
- to detect, prevent, and respond to fraud, abuse, or security issues;
- to improve the Service.
We do not sell your personal data, and we do not use it for advertising.
3. Who we share it with
We use a small number of service providers ("processors") to run Aicon-Platform. Each only receives the data it needs to perform its function:
- Supabase — database hosting and account authentication.
- Stripe — payment processing and subscription billing.
- OpenAI — processes the technical project description you submit (e.g. vendor, industry, equipment counts) in order to generate a design. We do not send your name, email address, or account identifiers as part of this request.
- Amazon Web Services — hosting infrastructure.
- Our transactional email provider — delivers sign-in links and, if you use the Team plan, invite emails.
Some of these providers may process data outside the EU/EEA (for example, OpenAI's infrastructure). Where that happens, it is done under that provider's standard contractual safeguards for international transfers. We do not otherwise share your personal data with third parties, except where required by law.
4. Legal basis for processing (GDPR)
We process account, project, and billing data because it is necessary to perform our contract with you (providing the Service you signed up for). We process security and abuse logs on the basis of our legitimate interest in keeping the Service secure and reliable. Where we ever ask for consent for anything else, you may withdraw it at any time.
5. Data retention
We keep your account and project data for as long as your account is active. If you delete your account, we delete your profile and project data within a reasonable period, except where we are required to retain billing records for tax/accounting purposes, or data we must keep to comply with law. Server logs are retained for a limited period (in the order of weeks to a few months) before routine deletion.
6. Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- request deletion of your data;
- restrict or object to certain processing;
- receive your data in a portable format;
- lodge a complaint with a data protection authority — in Sweden, the Swedish Authority for Privacy Protection (IMY), or your own country's equivalent authority.
To exercise any of these rights, contact info@aicon-platform.com.
7. Cookies and local storage
We do not use advertising or cross-site tracking cookies. The Service uses your browser's local storage to keep you signed in between visits, and a randomly generated, non-identifying session identifier for the basic usage events described above.
8. Children
The Service is intended for professional use and is not directed at children. We do not knowingly collect personal data from anyone under 16.
9. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you by email or through the Service.
10. Contact
Questions about this Privacy Policy or your data can be sent to info@aicon-platform.com.