**Privacy Policy** Last updated 6 November 2026 ## Who is responsible Prototipo FZE LLC, BLA-BC6-546 - Ajman Boulevard Commercial, Ajman, UAE, operates Eono AI and determines how personal information is used to provide the services at eono.ai. Contact [support@eono.ai](mailto:support@eono.ai) about a privacy right, an account or a mailbox connection. This notice covers the Eono web app, the account and checkout, and the agents and connected features you choose to use. ## 1. Your account, purchases and support When you sign in, we use your email, verification and account identifiers to authenticate you, keep your session secure and connect you to your workspace. If you use Google Sign-In, Google supplies an account identifier, email and verification status under identity, email and basic-profile permissions. Signing in does not grant mailbox access. Another sign-in provider, where offered, supplies the identity fields you authorize. You can revoke a provider connection with that provider. Your Eono account is managed separately. If you pay, checkout and payment providers process payment details, which can include your name, billing address and card or wallet information. Eono uses account and purchase references, payment status, method type and masked card details where available, plan, renewal, balance and usage records to activate access, show your wallet, investigate charges and administer refunds. Support receives your contact details and the information you send with a request. Please do not email full card details or passwords. ## 2. Conversations, projects, files and AI models Eono Assistant uses your message and relevant conversation history to answer you. Depending on the feature, this can include selected project files, prior chats or saved knowledge the assistant is permitted to retrieve. If you configure an agent, we process its name, instructions, selected skills and tools and its conversation and execution records. Material saved in your workspace can provide context in a later conversation. We process file contents and identifiers, names and types when you attach a document, PDF, image or other supported file. Image generation processes your prompt, model and generation settings and stores the result for retrieval. Information about people other than yourself, including sensitive details, can appear in files, audio, images, chats and emails. Share only what you have authority to use and what is needed for the task. Audio and transcripts. An audio file you attach as a workspace file is an upload. Its recording can include other speakers and sounds around you, and the file may remain in your workspace separately from any text generated from it. When a transcription feature is available and you deliberately submit audio for that purpose, the speech provider receives the recording and any supplied language or prompt. A transcript saved in a chat can be used as context for later responses and can contain errors. To request deletion, identify the file and the chat, as deleting one does not necessarily remove the other. A mailbox connection does not give CancelMate microphone access. We route the content and context needed for the requested feature to the AI gateway and the model, media or speech provider serving that request. The recipient can change when the model or feature changes. We store conversations, files, generated results and associated references to provide history and retrieval. Usage records identify the operation, time, model or tool and allowance consumed so we can administer the service and explain usage. When an agent searches the web, a search service receives a query derived from your request. Page-reading services receive the URLs to retrieve. A query or URL can itself contain personal information. Search results, excerpts and source references can enter your chat and be supplied to its model. Routing can include Vercel AI Gateway and search or page-reading services such as Perplexity or Browserbase, depending on configuration. Opening a source link takes you to the publisher’s site. Where a connected desktop document feature is available, the desktop app carries out document actions you approve. Document text, previews or screenshots, tool results and saved-file references used in the task can return to Eono and its model. Consider what is visible in a document before approving access. Closing a document on the device does not remove copies already included in your chat. ## 3. CancelMate and connected mailboxes Connecting a mailbox to CancelMate is optional and separate from signing in or buying an agent plan. Connect only a mailbox you are authorized to use. For Gmail, the connection through Nylas uses the Eono Mail authorization application. The permission screen identifies the account and permissions requested. Read access lets CancelMate search mail for subscription receipts, renewals, trial endings, price changes and merchant replies. Where sending is enabled, a separate sending permission lets the service send a particular draft from your mailbox when you press Send. For Gmail these are Gmail read-only and, where applicable, Gmail send permissions. This connection does not request Google Drive, Calendar or Contacts access. Other mailbox providers, when offered in the connection screen, use the permissions or connection method shown there. Nylas handles the connection and mail API requests. Eono receives the mailbox address and connection reference. A scan can examine senders, recipients, dates, subjects, snippets, message and thread IDs and relevant message bodies. Search results can include unrelated mail before the agent identifies a receipt. From relevant messages we can extract merchant, plan, account or order reference, price, currency, billing interval, renewal date, source and confidence. We use these details to show subscriptions and prepare correspondence. The agent can check new messages, follow an open merchant thread, prepare a reply in the background and alert you while you are away. Relevant excerpts, derived records and conversation context may go through Vercel AI Gateway to the model handling the agent. A merchant search may send a query or page address to a search provider. Eono stores protected connection references, scan state, extracted subscriptions, case history, drafts, sending status and message or thread identifiers. Your chats can contain excerpts and findings. Review the mailbox, recipient, subject and message before sending. If you press Send, the recipient receives the approved message from your mailbox. Preparing a draft does not send it. We handle information obtained via Google APIs in accordance with the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements. We use Gmail data, including derived data, only for the user-facing mailbox features you authorize. We do not sell it, use it for ads, credit decisions or unrelated profiling, or use it to train general-purpose AI models. These limits apply throughout this notice. Access by people and transfers of Google data are subject to the Limited Use restrictions, including the restrictions on reviewing individual messages. For example, support access to a particular message generally requires your specific agreement unless a permitted security or legal exception applies. Disconnect a mailbox on the agent page or revoke Gmail access in your Google Account’s third-party connections. Disconnecting stops access through that connection. The agent’s Your data controls let you export records or delete agent records and connections. Chats are separate and may still contain email-derived information. Copies in your own mailbox or the recipient’s mailbox are under their respective control. To request removal of retained information, including copies in Eono chats, email [support@eono.ai](mailto:support@eono.ai). ## 4. Notifications, security and browser storage Eono uses technical information such as IP address, device and browser information, requests, timestamps and errors to deliver and secure sessions, diagnose issues and prevent abuse. Agent notifications can be kept in your in-app inbox. If you enable web push, your browser and push service process a subscription endpoint, keys and notification content. An alert may identify a merchant or a case update on your device’s screen. You can change notification preferences in Eono or revoke browser permission. Turning off alerts is separate from disconnecting a mailbox. On eono.ai, session cookies keep you signed in. Browser storage also holds preferences, cached workspace information and the versioned analytics choice until replaced or cleared. Checkout can store the purchase reference needed to attach a purchase to your account. Clearing browser data can sign you out or remove local preferences. It does not delete your server-side account or cancel a purchase. On the app’s public entry page, choose Accept analytics or Reject optional. With acceptance, Eono uses PostHog to count page visits and sign-in events, including the sign-in method and a random identifier for that page load. Those entry-page events exclude chat text, files, your email and private page URLs. The app remembers the choice on this browser. When signed in, open Cookie settings under Help & legal in your wallet preferences to change it. If you are browsing as a guest and cannot find that control, clearing site data for eono.ai in your browser resets the saved choice and shows the prompt again. This can also clear local preferences or sign you out. Withdrawal stops new optional entry-page analytics. It does not recall events already sent. Payment and security processing needed to complete a purchase is separate. For privacy choices or opt-outs available under local law, contact [support@eono.ai](mailto:support@eono.ai). ## 5. Purposes, recipients and international processing We use information to perform the services you request, including operating your account, generating responses, managing connections and fulfilling purchases. Where applicable, we rely on performance of our contract for these functions, legitimate interests in keeping the service secure and diagnosing failures, and legal obligations for required financial records and lawful requests. We rely on consent where required, including for optional browser analytics and applicable marketing. You can withdraw consent for future processing and unsubscribe from marketing. We may still send service and billing notices. Mailbox authorization gives the technical permissions described above. Recipients include hosting and storage services, authentication services, AI and search providers, Nylas, payment and billing providers, support, optional analytics and browser push services, according to the feature you use. We may disclose information when required by law or to protect legal rights. In a business transfer, the handling of information remains subject to applicable law and to the more specific Google data restrictions above. We do not sell, trade or rent your personal information. Eono operates from the UAE. Providers may process information in other countries, including the United States. Where transfer safeguards are required, they depend on the transfer and applicable law and may include an adequacy decision or contractual safeguards such as standard contractual clauses. Contact us for information about the safeguards applicable to your data or a copy where available. ## 6. Retention, security and deletion We keep active workspace content to provide history, files, retrieval and connected features. Chats placed in the Eono archive can be restored during a 30-day archive window and are then scheduled for deletion from active chat history. Archiving a chat is separate from deleting agent records, saved files or an account. We keep purchase, usage, fraud-prevention and support records as needed for billing, legal recordkeeping and disputes. Residual backup copies may remain until their retention cycle ends. We use access restrictions and security measures appropriate to the data. No technical measure eliminates all risk. Use the available account deletion control or write to [support@eono.ai](mailto:support@eono.ai). Identify the account and the data concerned so we can verify and handle your request. If you also want to stop recurring billing, manage each subscription as explained in the [Subscription and Refund Policy](https://eono.ai/subscription). You may request privacy assistance even when a subscription is active. ## 7. Rights, children and updates Depending on the law that applies, you can request access, a copy, correction, deletion, restriction or portability, object to processing, withdraw consent or complain to a data protection authority. US state residents may also have rights concerning sale, sharing or targeted advertising and, where applicable, a right to appeal a decision on a request. Contact [support@eono.ai](mailto:support@eono.ai) and tell us which right you want to exercise. We may request proportionate information to verify your identity. Withdrawing consent does not affect earlier lawful processing. Our Terms explain who may use Eono and when verified parent or guardian consent is required. We do not knowingly solicit children’s personal information below the applicable minimum age. A parent or guardian who believes a child provided information without the required authorization can contact [support@eono.ai](mailto:support@eono.ai) for removal. We will date revisions to this notice and provide any additional notice or obtain consent when required. For privacy inquiries or account deletion, email [support@eono.ai](mailto:support@eono.ai) or write to the operator at the address above.
Eono AI