This Privacy Policy describes how Epithre. ("we", "us", or "our") collects, uses, and protects your information when you use the IsonAI service ("IsonAI"), including the IsonAI web application at isonai.net, the Ison Slate research workspace at slate.isonai.net, and the IsonForge command-line tool.
What you should know at a glance
This summary is for orientation only - the full policy below is what applies.
1. Information We Collect
When you use IsonAI, we may collect the following information:
- Account Information: Email address, name, and password when you create an account. If you sign in via Google OAuth, we receive your name, email address, and profile picture from Google.
- Conversation Data: Messages you send and receive within IsonAI, stored on our servers to provide conversation history.
- Temporary Chats: When you use a temporary (Incognito) chat, it does not appear in your conversation history and is not used to personalize IsonAI.
- Memory Data: If you enable the Memory feature, IsonAI automatically extracts and stores key facts from your conversations to personalize future responses. You can view, edit, or delete individual memories at any time from your account settings.
- Research Data (Ison Slate): If you use Ison Slate, we store your research topics and generated reports, documents you upload and the figures extracted from them, your collections, and any share links you create for your reports.
- Usage Data: Token usage, feature interactions, model selection, and performance metrics.
- Device Information: Device type, operating system version, and browser or app version for troubleshooting and compatibility.
- Preferences: Custom instructions, response style, connected third-party services, and other settings you configure.
- Location Data: Approximate city-level location derived from your IP address, used solely to provide localized responses such as local time, weather context, and regional information. This data is processed in real time and is not stored permanently or linked to your account.
- Connected Services Data: If you connect third-party services such as Google Calendar, Gmail, or Google Drive through IsonAI, we access data from those services only within the scope of permissions you have granted. This data is processed in real time to respond to your requests and is not stored beyond the duration of your session, except where explicitly required to fulfill a feature you have enabled.
Your password is stored in encrypted form and is never readable by anyone, including us. The vast majority of processing of your data is performed automatically by the system itself. Access to your conversations by our team is limited to the specific cases described in Sections 2 and 3 — for example, investigating a reported abuse case, complying with the law, or improving the quality, accuracy, and safety of our services.
2. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve IsonAI
- Process your messages and generate AI responses
- Store your conversation history, memories, and preferences
- Retrieve and display information from connected third-party services at your request
- Enforce usage limits based on your account tier
- Send important service updates and security notifications
- Monitor and prevent abuse of the service
- Analyze aggregated and anonymized usage patterns to understand user needs and improve our services. This analysis is performed on anonymized data only and cannot be used to identify individual users.
3. How IsonAI Processes Your Conversations
When you send a message, IsonAI processes it in real time to generate a response. Depending on your request, the AI may autonomously perform additional actions such as searching the web, retrieving full web pages, or querying connected third-party services to provide a more complete answer. These actions are performed automatically on your behalf and the retrieved data is used solely to generate your response.
Your conversation history is stored on our servers to allow you to continue previous conversations across sessions. If you enable the Memory feature, IsonAI may retain certain information you share to personalize future responses. You can view, manage, or delete your memories at any time from your account settings.
We never sell your conversations or share them with third parties for advertising. Your conversations and content may be processed automatically — and, in limited cases, reviewed by our team — to operate, secure, and improve the quality, accuracy, and safety of IsonAI and the models that power it. Where practical we minimize and de-identify content used for these purposes. If you would prefer that your content not be used to improve our models, you can opt out at any time by contacting privacy@isonai.net, and you can delete your data whenever you wish.
4. Data Storage and Security
Your data is stored on our own server infrastructure located in Indonesia. We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure password hashing, and access controls to protect your information. We do not use third-party cloud providers for primary data storage.
We recommend that you keep your account credentials confidential, avoid using IsonAI on shared or public devices without logging out, and contact us immediately if you suspect unauthorized access to your account.
In the event of a data breach or security incident that may affect your personal data, we will notify affected users within 3x24 hours of becoming aware of the incident, in accordance with applicable Indonesian data protection regulations.
5. Cookies and Session Data
IsonAI uses cookies and session tokens to keep you logged in and maintain your preferences. These are stored locally in your browser and are used solely for authentication and session management purposes. We do not use cookies for advertising or cross-site tracking. You can clear cookies at any time through your browser settings, which will log you out of IsonAI.
6. Data Sharing and Third-Party Services
We do not sell, rent, trade, or share your personal information with third parties for advertising or marketing purposes. As described in Section 3, your content may be used to operate, secure, and improve our services and the models that power them; you can object to its use for improving our models at any time by contacting privacy@isonai.net.
In the course of providing our service, limited data may be transmitted to third parties in the following circumstances:
- Web Search: When IsonAI performs a web search on your behalf, your search query (not your conversation history or account information) is sent to third-party search engines to retrieve results. Search queries are not linked to your identity.
- Academic Search (Ison Slate): When you run a research request in Ison Slate, your research query (not your account information) is sent to third-party academic indexes to retrieve results, including arXiv, Semantic Scholar, PubMed/NCBI, OpenAlex, DOAJ, CrossRef, Europe PMC, BASE, Garuda Kemdikbud, and BPS. Several of these services are operated outside Indonesia, so your research queries may be processed on servers abroad. Queries are not linked to your identity.
- Google Connected Services: If you connect your Google account, IsonAI accesses Google Calendar, Gmail, and/or Google Drive data through Google's APIs in accordance with the permissions you grant. This data is processed in real time and is not permanently stored on our servers. You can revoke access at any time from your IsonAI account settings or from your Google account permissions page.
- Authentication: If you sign in via Google OAuth, your authentication is processed through Google's services and subject to Google's Privacy Policy.
Image generation and all AI inference are processed entirely on our own servers. No conversation data, prompts, or account information is sent to external AI providers.
7. Guest Mode
You can use IsonAI in Guest mode without creating an account. In Guest mode we do not collect any account information — no name, no email — and Memory and personalization stay off. Guest conversations cannot be reopened once the session ends, and guest users have limited daily usage. For the full experience — saved history, Memory, and a larger daily quota — create a free account.
8. IsonForge CLI
IsonForge is a command-line tool that connects to IsonAI's servers to provide AI-assisted coding capabilities. When you use IsonForge, your prompts and selected code context are transmitted to our servers for processing. IsonForge authenticates using your IsonAI account credentials. The same data handling practices described in this Privacy Policy apply to data processed through IsonForge.
9. Communications
We may send you emails related to your account, including security alerts, verification codes, and significant service updates. We do not send promotional or marketing emails without your explicit consent. You can manage your notification preferences from your account settings.
10. Data Retention and Deletion
Your data is retained as long as your account is active. You can permanently delete your account and all associated data, including conversations, memories, preferences, and connected service authorizations, directly through www.isonai.net. Upon deletion, all your data will be permanently and irreversibly removed from our servers within 30 days. During this period, your account will be deactivated and inaccessible.
Account deletion also removes your Ison Slate research data (topics, reports, and collections), uploaded documents and extracted figures, share links you created, your active sessions, and connected-service tokens, in addition to conversations, memories, and preferences.
Limited exceptions to the 30-day removal apply: (a) security audit log entries (action metadata such as action type, IP address, and user agent, never the contents of your reports or conversations) are retained for up to 365 days for security and forensic purposes; (b) promotional claim records are retained to prevent abuse of promotional offers; and (c) deleted data may remain in system backups for a short period and leaves backup rotation within approximately one week.
You may also delete individual conversations or memories at any time without deleting your entire account.
11. Your Rights
In accordance with applicable data protection laws, including Indonesia's Personal Data Protection Law (UU PDP), you have the right to:
- Access and view your personal data
- Update or correct your account information
- Delete individual conversations, memories, or your entire account
- Withdraw consent for optional data processing (such as Memory or connected services)
- Request information about how your data is processed
All of the above can be managed directly from your account settings at www.isonai.net. For any other inquiries or to exercise rights not available through the interface, you may contact us at privacy@isonai.net.
12. Children's Privacy
IsonAI is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any significant changes through IsonAI or via email. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of IsonAI after changes constitutes acceptance of the updated policy.
14. Contact Us
Email: privacy@isonai.net
Website: www.isonai.net
Operator: Epithre.