Privacy notice

This notice explains what personal data Ayion collects through this website and by email, why we collect it, who handles it for us, how long we keep it, and what control you have over it. If anything is unclear, write to hello@ayion.ai.

The short version

• The website sets no cookies and runs no advertising trackers.
• If you use a form on this site or email us, we use what you send only to reply to you, and for job applications, to consider you for a role.
• What you send through a form is stored in our database in Mumbai, India, and a copy is emailed to our team inbox.
• We don’t sell personal data, use it for advertising or use it to train AI models.
• Four providers handle it for us: Cloudflare, Supabase, Resend and Google.
• To see, correct or delete what we hold about you, write to hello@ayion.ai.

Who we are

Ayion (“we”, “us”) builds AI-native platforms: Ayion Meru, the platform that runs AI agents on real work and records what they did, and JhiOn, the first vertical platform built on it. This notice covers the website you are reading and the email you send us.

Under India’s Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data this notice describes. We have written this notice to meet that Act and the Digital Personal Data Protection Rules, 2025.

Personal data we handle for a customer inside the platform — during a pilot or a subscription — is a different matter. There we act on that customer’s instructions, and it is covered by our agreement with them and our data processing addendum, not by this notice. Health data in JhiOn also carries the limits set out in our health information disclaimer.

The governing entity’s registered name and address are provided on request.

What we collect, and why

We collect only what we need for each purpose below, and we use it only for that purpose.

When you use a form on this site

The site’s forms — contact, a pilot request, a demo request, a deck request — collect the same shape of information.

• What: your name, work email address and message, your company and role if you give them, anything else the form asks for, and the version of the consent text you agreed to and when you agreed to it.
• Why: to read your message, reply to it, and keep a record of our conversation with you.
• How it’s handled: what you send is stored in our database, which runs in Supabase’s Mumbai region in India, and a copy is sent by email to our team inbox through Resend. Nothing is ever emailed to the address typed into a form, so the form cannot be used to send mail to other people.
• On what basis: your consent. On most forms you give it by sending the form, with the purpose stated next to the button; on the JhiOn waitlist you give it by ticking a box as well. Either way we store the exact wording you saw and when you saw it.

When you email us

• What: your email address and whatever you choose to include.
• Why: to reply to you.

When you apply for a job

• What: your email address and whatever you send with your application, such as a CV or links to your work.
• Why: to consider you for a role and to reply to you.

When you browse this website

The website sets no cookies and runs no advertising trackers, so we don’t follow what you do across other websites. Cloudflare, which hosts the website, handles the technical information that comes with every visit, such as your IP address, to deliver pages and protect the site. If we ever add cookies or product analytics, we will update this notice first and ask for consent where the law requires it.

Who handles it for us

Four service providers process personal data on our behalf, only to do the job described here:

• Cloudflare hosts and protects this website, and routes email sent to hello@ayion.ai to our inbox.
• Supabase stores what you send through a form. The database runs in its Mumbai region, in India.
• Resend delivers messages from the site to our inbox. Delivery may happen outside India.
• Google provides Gmail, where our team reads and keeps email. Email may be stored outside India.

Where processing happens outside India, it happens as the Act permits.

We don’t sell personal data, use it for advertising, or use it to train AI models. What you send us is not used as training data by us or by anyone else.

Who can see it

• The people at Ayion who handle your enquiry or application, and no one else at Ayion.
• The service providers above, only to do their part.
• Authorities, only where the law requires us to share it.

How long we keep it

• Enquiries and emails: 24 months after our last exchange with you. If we go on to work together, our agreement sets out what we keep and for how long.
• Job applications: 12 months after we decide on the role, unless you ask us to keep your application longer or to delete it sooner.

When that time is up, we delete it.

Your rights, and how to use them

You can:

• Access the personal data we hold about you, and find out how we use it and who we have shared it with.
• Correct, complete or update it.
• Erase it, unless the law requires us to keep it.
• Withdraw your consent at any time, as easily as you gave it. Withdrawing doesn’t undo what we did before, but we stop from then on.
• Nominate someone to use these rights for you if you die or become unable to use them yourself.
• Have a grievance addressed by us, and if our answer doesn’t resolve it, complain to the Data Protection Board of India.

To use any of these rights, write to hello@ayion.ai. We may ask you to confirm who you are before we act.

Grievances

If you’re unhappy with how we have handled your personal data, write to hello@ayion.ai. We reply within 30 days, and always within the 90 days the Digital Personal Data Protection Rules, 2025 allow.

If you’re not satisfied with our reply, you can complain to the Data Protection Board of India.

Children

This website is for adults and businesses. We don’t knowingly collect personal data from children. If you believe a child has sent us their personal data, write to hello@ayion.ai and we will delete it.

Security

We protect personal data with:

• encryption in transit and at rest
• access limited to the people who need it
• two-factor authentication on the accounts that hold personal data

We hold no security certifications today, and our data processing addendum says which ones, by name. If a breach affects your personal data, we will tell you and the Data Protection Board of India, as the law requires.

Changes to this notice

When we change this notice, we update the version and effective date at the top of this page. If a change affects how we use personal data you have already given us, we will ask for your consent again where the law requires it.

Your use of this website is also covered by our terms of use.