Privacy Policy

AIsh.li respects your privacy and is committed to protecting your personal data and ensuring transparency.

Overview

This Privacy Policy explains how AIsh.li collects, uses, and safeguards information when you visit our website, use our AI agent runtime services, embed our chat widgets, or access our APIs.

When you use AIsh.li directly as a registered user, AIsh.li acts as the data controller for your account data. When you embed an AIsh.li chat widget on your own website, you act as the data controller for your website visitors, and AIsh.li processes visitor chat interactions as a service provider on your behalf.

Information We Collect

  1. Account Information: When you sign in to AIsh.li (via our authentication provider, Clerk), we receive basic profile information such as your email address and authentication identifier.
  2. Conversation, Usage & Session Data: To provide multi-turn conversational continuity, manage your configured agents, and prevent abuse, we process and store agent configurations, conversation session messages, token counts, request timestamps, client IP/origin metadata, and credit consumption.
  3. Widget Site Domains: When you whitelist website domains to embed chat widgets, we store the allowed origin URLs to verify authorized embedding requests.

How We Use Your Data

  • To authenticate your access and manage your subscription credits.
  • To process and maintain conversations with your configured AI agents and connected tools.
  • To enforce domain origin security, rate limits, and abuse prevention for APIs and embeddable widgets.
  • To monitor platform performance, analyze aggregated usage trends, and provide customer support.

AI Model Processing & Zero-Training Commitment

Important

Zero Training on Your Data: Your conversation prompts, inputs, and visitor messages are processed to generate AI responses and maintain your session history via commercial inference APIs (such as Google Gemini). AIsh.li does not use your prompts, conversations, or proprietary configurations to train or fine-tune AI models.

Upstream AI providers process inference requests under commercial data protection terms that prohibit training foundation models on paid API traffic (subject to standard provider safety and abuse monitoring). If you configure your own third-party API keys (BYOK) or external tools/webhooks, requests routed through those credentials are governed by your respective agreements with those providers.

Third-Party Infrastructure Providers

We rely on trusted cloud infrastructure partners to operate our platform:

  • Stripe: Secure payment processing for billing.
  • Clerk: Secure identity management and user authentication.
  • Cloudflare: Global content delivery network (CDN), DDoS mitigation, and edge worker routing.
  • Google Cloud: Application hosting (Cloud Run), managed database storage (Firestore), and commercial AI inference APIs (Gemini) subject to commercial zero-training data protection terms.
  • Google Analytics: Aggregated website traffic and interaction telemetry on our web portal.

Cookies & Local Storage

AIsh.li uses browser local storage and cookies to operate and improve the service:

  • Essential Storage & Authentication: We use session tokens and localStorage keys (including a random anonymous_id UUID, language locale, and currency preference) to maintain your signed-in state, preserve anonymous widget chat sessions, and remember UI preferences.
  • Analytics: Our website uses Google Analytics (gtag.js) cookies to understand aggregated page traffic. You can block or disable analytics cookies at any time via your browser settings or content blockers.

We do not sell your data to advertisers ourselves.

Data Retention & Your Rights

We implement technical and organizational security measures to protect your data, though no network transmission or electronic storage can be guaranteed to be 100% secure. Our services are not directed to children under 16.

You have the right to request access to, correction of, or deletion of your personal account data, subject to applicable legal exceptions (such as retaining mandatory billing/tax records, credit ledger audit logs, and security or fraud-prevention identifiers).

If you have questions about this policy or wish to request data deletion, please contact us at .