Privacy Policy

Effective date: October 14, 2026

This Privacy Policy explains how Ipsion Inc. ("Ipsion", "we", "us" or "our") collects, uses, shares and protects personal information when you use the Ipsion AI agent system. That includes the website at ipsion.ai, our sign-up pages, the web console, the Ipsion mobile and desktop apps, the cloud server we provision for your account, and related services (together, the "Service"). Capitalized terms not defined here have the meaning given in our Terms of Service.

1. Summary

• Each customer account runs on its own cloud server, provisioned and managed by Ipsion. Your conversations, files and agent memory are stored on that server, and your agents keep and use that history to work better for you.
• To answer you and complete tasks, your agents send your content to AI model providers and to the tools and services your agents use.
• We do not sell your personal information.
• Authorized Ipsion personnel and our automated operations tools can access your account and server to run, support, secure and improve the Service.
• You can ask us to access, correct, delete or export your information by emailing support@ipsion.ai.

2. Information we collect

Information you give us

• Account information: your email address, password (stored by our sign-in provider in hashed form), display name, organization, and plan details.
• Sign-up and waitlist information: what you enter on our sign-up and waitlist forms, such as your name, email address, messaging handle (for example WeChat ID), role, background, intended use, and, for trial sign-up, optional files such as a photo, résumé or LinkedIn profile PDF.
• Your Content: the messages you send, files you upload, voice notes you record, instructions and schedules you set, and everything your agents create or record for you, including conversation transcripts, agent memory and notes, documents, images, audio and video.
• Connected accounts and credentials: when you connect a third-party account (for example Google, LinkedIn or X), the access tokens that service provides; if you choose to give us a username, password, two-factor secret or API credential so an agent can sign in for you, those credentials.
• Browser sessions on your server: when you or your agents sign into websites using the browser on your server, that browser stores cookies, saved sign-ins and browsing history.
• Calls: where the calling feature is enabled, the phone numbers involved and a transcript of each call.
• Communications: messages you send us, such as support requests and feedback.

Information collected automatically

• Log and device information: IP address, browser type and user agent, device identifiers, app version, the pages and features you use, request times, and error information.
• Notification tokens: push-notification tokens for your devices, if you enable notifications.
• Browser storage: the console and desktop app store your sign-in session and settings (such as drafts and unread counts) in your browser or app storage on your device.
• Advertising measurement: our /alpha sign-up page uses a Google Ads conversion tag, which lets Google record that a visitor who saw our ad signed up. Our pages load fonts from Google Fonts, which receives your IP address. We do not use advertising or crash-reporting software in the console or our apps.
• Usage records: the console and our apps record how the interface is used: clicks, navigation, and screen recordings of the interface. Typed text, chat content, file names, pictures and the screens your agents work on are hidden or left out before a record leaves your device, so these records do not contain what you write or what your agents produce. They are tied to your server's identifier, not to your account's email address or the name on your account, and we use them only to improve the product. Your browser's Do Not Track or Global Privacy Control setting turns them off in the web console.

Information from other sources

• Connected services: information from the third-party accounts you connect, such as emails, calendar events or posts that your agents read at your direction.
• Publicly available information: when you sign up for a trial, we may review information you point us to, or that is publicly available, such as your professional profile, to set up your agents.
• People in Your Content: Your Content may include personal information about other people, such as the people you email, meet with or call. See Section 9.

3. How we use information

We use personal information to:

• provide the Service, including provisioning your server, running your agents, processing your content through AI models and tools, transcribing voice notes and calls, sending notifications, and performing the actions you or your agents request;
• operate, support and improve the Service, including troubleshooting, responding to requests, and reviewing agent activity and conversations, by authorized personnel or automated tools, to fix problems and improve quality. Your agents also use the records of their own work, such as conversations, run records and logs, to find and fix their mistakes and to work better for you;
• secure the Service, including authenticating users, preventing fraud and abuse, and enforcing our Terms;
• communicate with you, including sign-in links, service and security notices, and, where permitted, updates about Ipsion (you can opt out of marketing emails at any time);
• measure our marketing, for example how many people sign up from an ad; and
• comply with law and protect the rights, property and safety of Ipsion, our users and others.

Third-party model providers handle content under their own terms; see Section 4.

Legal bases (EEA, UK and similar laws). Where these laws apply, we process personal information to perform our contract with you; for our legitimate interests in operating, securing and improving the Service and marketing it, where those interests are not overridden by your rights; with your consent, where we ask for it (you may withdraw it at any time); and to comply with legal obligations.

4. How we share information

We share personal information only as described here:

• Service providers that process information on our behalf, including:
• cloud hosting (Microsoft Azure hosts customer servers; Hostinger hosts our website);
• AI model and transcription providers (including Anthropic, Microsoft Azure OpenAI and OpenAI), which receive the content needed to generate responses, transcribe audio and run calls;
• tool providers your agents use, such as web search, media generation and browsing services, which receive the input of the request (for example a search query);
• sign-in and account infrastructure (Google Firebase);
• communications (email delivery providers such as Mailgun, and push-notification services from Expo, Apple and Google, which carry a short preview of agent replies);
• monitoring and debugging tools, which may receive records of agent runs to help us diagnose problems; and
• product usage tools (PostHog), which receive the usage records described in Section 2.
• Services you direct us to use. When you connect a third-party account or instruct an agent to send a message, post content, place a call or visit a website, we share information with that service or person as you direct. Their own privacy policies govern what they do with it.
• Advertising measurement. As described in Section 2, Google receives information from our /alpha sign-up page.
• Improvement signals. We share de-identified improvement signals learned on your server (general rules and fixes for how agents work, never your messages, files, contacts or credentials) across the Service to improve it.
• Legal and safety. We may disclose information if we believe in good faith it is required by law or legal process, or necessary to protect the rights, property or safety of Ipsion, our users or others, or to investigate fraud or security issues.
• Business transfers. If Ipsion is involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
• With your consent, or at your direction.

We do not sell personal information for money. Under some state laws, including California's, letting an advertising partner such as Google collect information on our /alpha page may count as "sharing" for cross-context behavioral advertising. You can opt out as described in Section 7.

5. How long we keep information

We keep personal information for as long as your account is active or as needed to provide the Service, and after that for as long as needed for the purposes in this Policy, including to comply with legal obligations, resolve disputes and enforce our agreements.

• Account information and Your Content are kept while your account is open. After your account is closed, or after we verify a deletion request, we delete your server and your account records within 30 days.
• Waitlist and sign-up information is kept until you ask us to remove it or we no longer need it to contact you about the Service.
• Logs, records of agent runs and backups are kept while your account is open. Your agents and our operations tools use them to diagnose problems, restore your server, and improve how your agents work for you.
• Residual copies of information may remain in encrypted backups and system logs after deletion, until they expire or are overwritten in the ordinary course, which may take up to 24 months. We do not use residual copies except for security, backup restoration and legal purposes.
• Information you share with third-party services at your direction, and information on your own devices, is kept by those services or on those devices, outside our control.

6. Security

We use administrative, technical and physical safeguards designed to protect personal information, including a dedicated server for each customer account, encryption in transit and at rest, and restricted operator access. Our Security page describes them. No system is completely secure, and we cannot guarantee the security of information you send to the Service. You are responsible for keeping your password, sign-in links and devices secure, and for choosing what accounts and abilities you give your agents.

7. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy, including in a portable format;
• correct inaccurate information;
• delete your information;
• object to or restrict certain processing, and withdraw consent where we rely on it;
• opt out of "sharing" for cross-context behavioral advertising, or of targeted advertising; and
• appeal our decision on your request.

How to make a request. Email support@ipsion.ai from the email address on your account, with the subject "Privacy request". We will verify your identity before acting, and we respond within the time the law requires (for example, 45 days under California law, or one month under the GDPR, extendable where permitted). You may use an authorized agent where the law allows; we may ask for proof of their authority. Apart from account deletion (below), requests are handled by our team rather than through a self-serve tool; we will confirm what we did when your request is complete.

Deleting your account. You can delete your Ipsion AI account at any time, from the app itself. In the phone app, or in the web console or the desktop app, open Account → Delete account and confirm. The same steps are at https://ipsion.ai/delete-account/. If you can no longer sign in, email support@ipsion.ai from the email address on your account, with the subject "Delete my account". Within 30 days of your request we delete your account and sign-in records, the cloud server we provisioned for your account, and your agents. Residual copies may remain in encrypted backups and system logs until they expire or are overwritten in the ordinary course, which may take up to 24 months.

Marketing. You can unsubscribe from marketing emails using the link in the email or by contacting us. We will still send service and security messages.

Advertising opt-out. To opt out of the Google Ads measurement on our /alpha page, email us with the subject "Do not share", and you can also block third-party cookies in your browser or adjust your settings at Google's ad settings page. Our marketing pages do not respond to browser "Do Not Track" signals. The web console does: see Section 2.

California residents. In the past 12 months we have collected the categories of personal information described in Section 2: identifiers (such as name, email, IP address, device identifiers); customer records; commercial information (plan details); internet or network activity; audio and electronic information (voice notes and call transcripts); professional information (role and background); and account login credentials, which are sensitive personal information that we use only to provide the Service. We collect them from the sources and for the purposes described in Sections 2 and 3, and disclose them to the categories of recipients in Section 4. We do not sell personal information, and we do not knowingly sell or share the personal information of anyone under 16. We will not discriminate against you for exercising your rights.

EEA and UK residents. You may also lodge a complaint with your local data protection authority.

8. Our apps

• Permissions. The mobile app asks for access to your microphone (to record voice notes), camera and photos (to attach images), and notifications. On Android it may also ask for storage access. You can change these in your device settings; some features will not work without them.
• Voice notes are uploaded to your server, stored with your other content, and transcribed by our transcription provider.
• On your device, the apps keep your sign-in session and some cached content, such as recent voice notes and documents you opened, until you sign out, clear the app's data, or uninstall it.
• Notifications can include a short preview of your agent's reply, which passes through Apple's or Google's notification service.
• The apps contain no advertising or crash-reporting software and do not track you across other companies' apps or websites. They make the usage records described in Section 2, with typed text and chat content hidden.

9. Information about other people

When you use the Service to process information about other people (for example the contacts in a connected email account, the people your agent messages or calls, or the participants in a meeting), you are responsible for having a lawful basis to do so and for giving any notice or obtaining any consent the law requires. If you believe the Service holds your information because an Ipsion customer used it, you may contact us and we will work with that customer to address your request.

10. International users

Ipsion is based in the United States, and the Service is hosted primarily in the United States. If you use the Service from outside the United States, your information will be transferred to, stored and processed in the United States and other countries where our service providers operate. Their data protection laws may differ from those of your country.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction). If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy. We will post the updated Policy with a new effective date, and if we make material changes we will notify you in the Service or by email before they take effect.

13. Contact us

Ipsion Inc. Email: support@ipsion.ai (subject "Privacy")