Legal
Privacy Policy
aeuix one is the client portal of Aeuix LLC (“Aeuix”, “we”, “us”). It is available on the web at aeuix.com and as an app for iPhone, iPad and Apple Watch. This policy explains what information the service collects, why, who can see it, how long we keep it, and the choices and rights you have. It applies to everyone who signs in: people at client companies and members of the Aeuix team.
1. Who we are and who this covers
Aeuix LLC, Scottsdale, Arizona, operates aeuix one. When you use the portal as an employee or contractor of a client company, Aeuix processes most of your information on that company’s behalf (see the Data Processing Addendum). For your own account details, and for the Aeuix team, Aeuix decides how information is used and is the “controller” in the language of privacy laws.
Accounts are created by the Aeuix team for its clients and staff. There is no public sign-up. The service is for business use by adults. We do not knowingly collect information from anyone under 16; if you believe we have, email us and we will delete it.
2. What we collect
| Information | Examples | Why we collect it |
|---|---|---|
| Account details | Name, email address, job title, @handle, profile photo, time zone, the company or companies you belong to | To sign you in, show who is who, and route notifications |
| Optional profile details | Phone number, birthday, social handles, mailing or shipping address, sizes for branded gear, a short bio | Only if you enter them, so Aeuix can reach you and send you things |
| Content you add | Project requests and files, chat messages, notes, social post assets, files in aeuix Drive, photo shoots, Spark boards, share links you create | This is the work itself; it is stored so you and your team can see and use it |
| Photos and camera | Images or videos you choose to attach; images you choose to save to your camera roll | Only when you pick a file or tap Save; the app never reads your photo library in the background |
| Face data | Face positions and face-matching numbers derived from photos in a shoot | So Photos can group every picture of a person. Covered in detail in the Face Data Notice |
| Billing records | Plan name, invoices and their status, payment method type | So you can see what you have been billed. Card and bank details are entered on Stripe’s pages and never reach our systems |
| A connected Instagram account | If you or your company connect an Instagram professional account: its Instagram ID, username, name, bio, website and profile picture; follower, following and post counts; account insights such as reach, views, accounts engaged, interactions and link taps; recent posts with their captions, links, thumbnails and their likes, comments, views, saves and shares; and an access token that Instagram issues to us. We never receive or store your Instagram password | To record how the account grows over time (Instagram itself keeps very little history), and to publish the posts scheduled for it on the Social Calendar. Connecting is optional and can be undone at any time |
| Public information about Instagram professional accounts | For Business and Creator accounts in the direct sales industry that Aeuix chooses to follow: username, name, bio, website, profile picture, follower, following and post counts, and recent public posts with their like, comment and view counts. We receive this from Meta’s official API (Business Discovery), never by scraping, and it does not work for personal or private accounts | Industry research and benchmarking by the Aeuix team. It is not shown to clients, not sold, and not combined with information from other sources to build a profile of a person |
| Business contacts Aeuix keeps | For people and organisations Aeuix may want to work with: name, company, role, Instagram handle, email, phone, city and our own notes, typed in by Aeuix staff from direct contact or from what the person or company publishes about their business | Ordinary business development. Instagram statistics are never copied into these records |
| Device and push tokens | An Apple push notification token for each device you sign in on, the device type | To deliver the notifications you have turned on |
| Usage and activity | Sign-in times, roughly how long you are active, and a log of changes made to shared records (who changed what, when) | To keep an accurate, restorable history of your projects and to understand whether the portal is being used |
| Agreement records | That you agreed to the Terms of Service and Privacy Policy: the version, date and time, the platform, device type, operating system and app version you used, and the IP address of that request | To prove that each person using the portal accepted the terms in force, and to ask again when they change |
| Crash and performance reports | When the app hits an error, crashes, freezes or a screen loads slowly: the error message and code location, the screen, app version, operating system version and device type (for example “iPhone”). Never your name, account, or content | To find and fix problems. Switch it off under Settings → “Share crash and performance reports” |
| Technical logs | IP address, browser or app version, request timestamps, error reports | Security, fraud prevention and fixing problems. Kept for a short period by our hosting providers |
| Support email | Messages you send us | To answer you |
We do not collect your precise location, contacts, calendar, health information, browsing history, or any advertising identifier, and we do not use third-party analytics, crash-reporting or advertising SDKs. We never ask for or store the password to your Instagram or any other social account. Crash and performance reports go only to our own systems and carry no account identity.
3. How we use information
- To provide the portal: projects, calendar, Drive, Photos, Notes, Billing, notifications and share links.
- To send the notifications you have enabled (push, email, or both). You control these per type in Settings.
- To make your files searchable: text is read from PDFs and design files in your browser; images and scanned documents may be sent to an AI provider (see Section 6) to extract their text. Only the text is kept and it is used only for search inside your portal.
- To record a daily history of a connected Instagram account’s public numbers and insights, and to publish to that account the posts that were scheduled for it, at the scheduled time, using the permission the account owner gave.
- To understand the direct sales industry on Instagram, using only public information about professional accounts that Meta makes available through its API.
- To keep an activity history so changes to shared work can be reviewed or restored, and a Trash so deleted items can be recovered for 30 days.
- To keep the service secure, prevent abuse, and investigate problems.
- To bill client companies and keep the accounting records the law requires.
- To tell you about changes to the service or these policies.
We do not use your information for advertising, we do not build marketing profiles, we do not sell or rent it, and we do not use your content to train AI models.
Legal bases (where they apply). We process information to perform our agreement with your company and with you, to meet legal obligations (such as tax records), and for our legitimate interests in running a secure, reliable service. Optional profile details are processed with your consent, which you can withdraw by removing them.
4. Who can see your information
- Members of your company see the work that belongs to your company.
- Aeuix team members can see all client work in order to do it, including personal notes you keep in the portal; the app tells you this when you create one.
- Nothing you add is visible to other Aeuix clients.
- Instagram statistics are currently visible to the Aeuix team only. Posts published for you appear on your Instagram account, where Instagram’s own settings decide who sees them.
- Share links you create for a file or folder are visible to anyone with the link until you switch the link off or delete it.
- We disclose information to a court, regulator or law enforcement agency only when the law requires it, and only after the steps in Government and legal requests: review for legality, challenge where unlawful, the minimum necessary, a written record, and notice to you unless prohibited.
- An Aeuix administrator can open a read-only preview of a client user’s view to help with support. Nothing can be changed from that preview, it does not count as your activity, and every use is logged.
5. App Store reviewers
Apple reviews our apps using a separate demo company filled with made-up data. Reviewers never see real client information.
6. Service providers
We use a small number of providers to run the service. Each processes information only on our instructions and under a written agreement. The current list, with what each one does and where it processes data, is kept up to date at aeuix.com/subprocessors. In summary: Supabase (database, sign-in, file storage), Vercel (web hosting), Stripe (invoices and payments), Resend (email), Apple (push notifications and the App Store), Anthropic (reading text in uploaded images and documents for search; not used for model training under our API terms) and Google Fonts (typefaces).
Meta Platforms (Instagram). When an Instagram account is connected, we send Meta the content to be published (the photo or video, caption, hashtags, tagged collaborators, alt text and any first comment) and we receive the account information described in Section 2. Meta handles that information under its own terms and privacy policy as an independent company, not as our service provider. Our use of information received from Meta follows the Meta Platform Terms: we do not sell it, we do not use it for advertising, and we delete it when it is no longer needed or when the account owner asks.
We may also disclose information if the law requires it, to protect the rights, property or safety of Aeuix, our clients or others, or as part of a sale or merger of Aeuix, in which case this policy continues to apply to your information.
7. Where information is stored and international transfers
Our systems are hosted in the United States. If you use the service from elsewhere, your information is transferred to and stored in the United States, where privacy laws may differ from those in your country. Where required, we rely on our providers’ standard contractual clauses and equivalent safeguards for those transfers.
8. How long we keep it
| Information | Kept for |
|---|---|
| Your account and the material your company uploaded | As long as your company works with Aeuix, then a 30-day hand-over period, unless you or your company ask for earlier deletion |
| Work Aeuix created for your company | Aeuix may keep it for as long as it chooses as jointly owned work and business records, and may show it in its portfolio; it is not obliged to keep it. See the Terms of Service. Personal details are still deleted as above |
| Items you delete | 30 days in Trash, then permanently removed together with their files |
| Face data | Until the shoot or the person is deleted, face grouping is turned off for the shoot, or you ask us; at the latest when the company relationship ends. See the Face Data Notice |
| Instagram access tokens | Until the account is disconnected in aeuix one, access is removed inside Instagram, or the token expires; then deleted. Tokens are held where no person, including Aeuix staff, can read them |
| Recorded history of a connected Instagram account | While your company works with Aeuix, then the same 30-day hand-over period as the rest of your material. Deleted earlier if you ask |
| Public information about professional accounts Aeuix follows | While Aeuix follows the account. Deleted, with its recorded history, when Aeuix stops following it or when its owner asks |
| Business contacts Aeuix keeps | Until they are no longer useful to Aeuix or the person asks us to remove them |
| Activity log | 12 months in the live log, then archived; removed with the company account |
| Push tokens and sign-in sessions | Removed when you sign out, delete the app, or your account is deleted |
| Invoices and payment records | As long as accounting and tax rules require (generally seven years) |
| Crash and performance reports | 90 days |
| Agreement records | For as long as your account exists, then removed with it, unless we need them to establish or defend a legal claim |
| Backups | Database backups are kept for seven days and then overwritten |
9. Security
Data is encrypted in transit and at rest, every request is checked against row-level permissions so you can only reach your own company’s work, and access to production systems is limited to the Aeuix team. Our full practices are described on the Security page. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the authorities the law requires, without undue delay.
10. Your choices
Every choice, with where to make it, is listed on Your Privacy Choices. In short:
- Notifications: turn push or email notifications off per type in Settings, or turn all push off in iOS Settings for the app.
- Camera and Photos: the app only asks when you attach or save a file; you can revoke access in iOS Settings at any time.
- Profile details: edit or remove them yourself from Profile.
- Face grouping: ask us to turn it off for a shoot, to forget a person, or to delete a shoot’s face data.
- Share links: switch off or delete any link you created from Shared links.
- Instagram: disconnect the account in Settings → Instagram, or remove “aeuix One” inside Instagram under Apps and websites. Either one stops all reading and publishing at once. Email us to have the recorded history deleted as well.
11. Your rights
Depending on where you live, you may have the right to know what personal information we hold about you, to receive a copy, to correct it, to have it deleted, to restrict or object to certain processing, to data portability, and to withdraw consent. You also have the right not to be discriminated against for exercising these rights.
To exercise any of them, email will@aeuix.com with “Privacy request” in the subject, or use the steps on Delete your account. We will verify the request using your account email and respond within 30 days (45 days where the law allows an extension, which we will tell you about). You may use an authorized agent; we will ask for proof of authorization. If we decline a request we will explain why and how to appeal, and you may complain to your local data protection authority.
If Aeuix follows your professional Instagram account, or holds your business contact details. You do not need an aeuix one account to ask what we hold, to have it corrected, or to have it deleted and your account no longer followed. Email the address above with “Instagram request” in the subject and your Instagram username.
California residents. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months. The categories we collect are listed in Section 2, the purposes in Section 3, and the recipients in Section 6. We honor Global Privacy Control signals as an opt-out where one would apply.
Europe, the UK and Switzerland. Aeuix LLC is the controller for your account details. Transfers are described in Section 7. You can lodge a complaint with your supervisory authority; we would appreciate the chance to address your concern first.
Illinois, Texas, Washington and other states with biometric laws. Our written retention and destruction schedule for face data is published in the Face Data Notice.
12. Do Not Track
We do not track you across third-party sites, so there is nothing for a Do Not Track signal to switch off. We treat Global Privacy Control signals as described above.
13. Changes to this policy
If we change this policy in a way that matters, we will post the new version here with a new effective date and the app will show you what changed and ask you to agree again the next time you open it. Earlier versions are available on request.
14. Contact
Aeuix LLC
Scottsdale, Arizona, United States
will@aeuix.com