Privacy policy

This notice explains how Athesus AI handles personal data when you use the website, Athesus Web, account services, downloads, and connected desktop features.

Last updated: 21 August 2026. Athesus AI is the controller for the personal data described in this notice. For privacy questions or rights requests, email support@athesus.co.uk, use the contact form or, if you are signed in, the data-rights page.

Information we process

We process account details such as your name, email address, password hash, company name and account status; security and service information such as login timestamps, verification records, limited abuse-prevention logs and contact-message IP addresses; billing identifiers supplied by the payment provider; and the content you choose to save in Athesus Web, including conversations, uploaded files, workspace tasks, and generated documents.

Provider and plugin keys entered in Athesus Web are encrypted before storage. They are used only to run the provider or plugin you enable for your own signed-in account and are not displayed back to the browser after saving.

Why we use it

We use data to provide and secure your account, deliver downloads and updates, operate the requested AI or connected service, answer support requests, prevent misuse, administer subscriptions, and meet legal obligations. Our usual lawful bases are contract, legitimate interests in operating a secure service, consent where required, and legal obligation.

AI and connected services

When you select a third-party AI provider, search service, plugin, or payment service, the prompt, files, or instruction needed for that request may be sent to that provider. Their own terms and privacy notices apply to their processing. Do not enter personal, confidential, special-category, regulated, or third-party data unless you have a lawful basis and permission to do so.

AI output can be incorrect, incomplete, or unsuitable for a particular purpose. Review it before relying on, publishing, sending, or using it to make a decision about a person.

Retention and security

We keep account and workspace data while your account remains active. When you close an account, access ends immediately and eligible account data enters a 30-day retention hold before permanent deletion. Information that must be retained for legal, accounting, fraud-prevention, or dispute-resolution purposes is kept only for the required period. Contact-message and security metadata are kept only for as long as reasonably necessary for support and protection of the service. We use access controls, encrypted credential storage, password hashing, HTTPS, and server-side controls designed to protect data; no online service can guarantee absolute security.

Cookies

Athesus AI uses a strictly necessary secure session cookie to keep you signed in and protect your account. We do not use advertising cookies. A small browser-storage preference remembers when you close the cookie notice; it does not identify you across websites. If analytics or optional cookies are introduced, we will ask for consent before they are set.

Your rights

Depending on the circumstances, you can ask for access, correction, deletion, restriction, objection, or portability of your personal data, and you can withdraw consent where processing relies on it. Signed-in users can export their available account and web-workspace data or submit a deletion request at Data rights. You may also complain to the UK Information Commissioner's Office.

International transfers and changes

Some selected providers may process data outside the UK. Where this happens, use providers whose safeguards and transfer arrangements are suitable for your use case. We may update this notice as the service changes; the date above shows the latest revision.