AIONIX

AIONIX Privacy Policy

Effective Date: March 2026 Last Updated: March 2026

1. INTRODUCTION

This Privacy Policy ("Policy") outlines how A3A Systems Pty Ltd ACN 690 315 381 ("Aionix", "we", "us", "our") collects, uses, discloses, and protects your personal information when you access and use the Aionix platform ("Platform") available at https://aionix.io/.

This Policy is governed by the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable NSW privacy legislation. All terms used herein are consistent with our Terms of Service.

We are committed to managing personal information in accordance with the Australian Privacy Principles and ensuring transparency in our data handling practices.

2. ABOUT US

Legal Entity: A3A Systems Pty Ltd ABN/ACN: ACN 690 315 381 Website: https://aionix.io/ Product: Aionix AI Agent Management Platform

Aionix is a no-code AI agent management platform that enables users to create AI agents, teams, and tasks; manage knowledge bases; monitor costs; and analyze performance across multiple AI models and third-party integrations.

3. COLLECTION OF PERSONAL INFORMATION

3.1 Information You Provide

We collect personal information that you voluntarily provide to us, including:

Account Registration:

Platform Usage:

Connected App Credentials:

Referrals: If you refer other individuals to Aionix, we may collect their personal information (name, email, organization) with your authority and their implied consent.

3.2 Information Collected Automatically

When you access and use the Platform, we automatically collect:

Usage Data:

Analytics Data:

Cookies and Tracking Technologies: We use cookies and similar tracking technologies to enhance your experience, remember your preferences, and analyze Platform usage. You may control cookie settings through your browser, though some functionality may be limited if cookies are disabled.

3.3 Information from Third Parties

We may receive personal information from:

4. USE OF PERSONAL INFORMATION

4.1 Primary Purposes

Account Management:

Platform Operations:

Communication:

4.2 Secondary Purposes

Platform Improvement:

Business Intelligence:

Legal Compliance:

4.3 Anonymized and Aggregated Data

We may use anonymized and aggregated data (data that cannot identify you) for:

This aggregated, anonymized data may be shared with third parties and used without restriction, except that we do not use any data obtained through Google Workspace APIs to train, retrain, or improve our AI models or LLMs.

5. DISCLOSURE AND SHARING OF PERSONAL INFORMATION

5.1 Third-Party Service Providers

We may disclose your personal information to trusted third-party service providers who assist us in operating the Platform, including:

AI Model Providers:

Integration Partners:

Technical Service Providers:

All service providers are contractually obligated to maintain confidentiality and use your information only for specified purposes.

5.2 Organization and Team Administrators

If you are an Additional User within an organization:

5.3 Legal Requirements and Protection

We may disclose your personal information when required or permitted by law, including:

5.4 Business Transfers

If Aionix is involved in a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice before any such transfer and before your information becomes subject to a different privacy policy.

5.5 Restrictions on Disclosure

We do not sell personal information to third parties for marketing purposes. Any disclosure of personal information is limited to the purposes outlined in this Policy and your consent.

6. DATA RETENTION

6.1 Retention Periods

We retain personal information for the period necessary to:

Specific Retention Practices:

6.2 Deletion and Deactivation

Upon account deactivation or deletion:

7. DATA SECURITY AND PROTECTION

7.1 Security Measures

We implement technical, administrative, and physical security measures to protect personal information from unauthorized access, disclosure, alteration, and destruction, including:

Technical Protections:

Administrative Controls:

Account Security:

7.2 Limitations and Risks

While we maintain comprehensive security measures, no system is entirely secure. You acknowledge that:

8. INTERNATIONAL DATA TRANSFERS

8.1 Data Transfer Mechanisms

Your personal information may be transferred to, stored in, and processed in countries outside Australia, including:

8.2 Adequacy and Protections

When transferring personal information internationally, we ensure:

8.3 Your Consent

By using the Aionix Platform, you consent to the transfer of your personal information to countries outside Australia for processing as described in this Policy.

9. COOKIES AND TRACKING TECHNOLOGIES

9.1 Cookie Usage

We use cookies and similar tracking technologies to:

Types of Cookies:

9.2 Third-Party Cookies

Third-party service providers (analytics, advertising, integrations) may also place cookies on your device. We do not control these cookies; refer to their privacy policies for information.

9.3 Cookie Management

You may:

10. THIRD-PARTY INTEGRATIONS

10.1 Integrations and External Services

The Aionix Platform allows you to integrate and allocate third-party LLMs and tools, including:

AI Model Providers:

Communication and File Tools:

10.2 Data Sharing with Integrations

When you use integrated services:

Important Limitation on AI Training:

We do not use any data obtained through Google Workspace APIs to train, retrain, or improve our AI models or LLMs. While we may use aggregated and anonymized data from other Platform activities for model optimization, data accessed through connected Google applications (Gmail, Google Calendar, Google Drive) is strictly excluded from any AI training processes.

10.3 Third-Party Privacy Policies

We recommend reviewing the privacy policies of all integrated services, as they maintain independent privacy practices. Links to key providers' policies:

10.4 Connected Applications and OAuth Authorization

Overview:

The Aionix Platform provides a Connected Applications feature that allows you to securely connect your Google Workspace accounts (Gmail, Google Calendar, Google Drive) and Slack workspaces via OAuth 2.0 authorization. This enables your AI agents and tasks to access and interact with your data within these applications using your authenticated credentials.

How Connected Applications Work:

When you connect an application:

  1. You are redirected to the third-party provider's secure OAuth authorization page
  2. You grant Aionix specific permissions (scopes) to access designated data
  3. The provider issues a secure access token to Aionix
  4. Aionix uses this token to access only the data and perform only the actions you have authorized
  5. You may revoke access at any time through your account settings or the third-party provider's security settings

Data Accessed Through Connected Applications:

Depending on the permissions you grant, Aionix may access:

Google Gmail:

Google Calendar:

Google Drive:

Slack:

Use of Connected Application Data:

Data accessed through connected applications is used solely to:

Data retrieved from connected applications is typically processed in real-time to fulfill your immediate task requirements. When AI agents generate new content based on connected application data (such as email summaries or calendar insights), that generated content is stored as "User Content" and retained according to the standard 12-month retention policy outlined in Section 6.1.

Limiting Use of Connected Application Data:

In accordance with Google API Services User Data Policy and similar requirements:

Aionix's use of information received from Google APIs and other connected applications adheres to the Limited Use requirements, including but not limited to:

Human Review of Connected Application Data:

We do not allow humans to read connected application data unless:

Security and Confidentiality:

Connected application credentials and data are subject to the same security measures outlined in Section 7 of this Policy. OAuth tokens are:

Your Control and Consent:

You maintain full control over connected applications:

Third-Party Responsibility:

Aionix acts as a conduit for accessing data you authorize from connected applications. We are not responsible for:

Compliance and Verification:

Our connected applications feature is designed to comply with:

Aionix is committed to maintaining compliance with Google's OAuth verification requirements and undergoes regular security assessments to ensure the Connected Applications feature meets industry standards.

10.5 GOOGLE API LIMITED USE DISCLOSURE (PROMINENT)

IMPORTANT NOTICE REGARDING GOOGLE USER DATA

Aionix's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Key Commitments:

For more information about how Google user data is handled, please review:

You may revoke Aionix's access to your Google account data at any time through your Google Account Permissions page.

11. YOUR PRIVACY RIGHTS UNDER AUSTRALIAN LAW

11.1 Australian Privacy Principles

You have rights under the Australian Privacy Principles (APPs), including:

APP 1: Open and transparent management of personal information

APP 6: Use or disclosure of personal information

11.2 Access and Correction

Right of Access (APP 12): You have the right to request access to personal information we hold about you. We will:

Right to Correction (APP 13): You may request that we correct inaccurate, incomplete, or out-of-date personal information. If we disagree with your correction request, we will note your request in our records.

Process: To request access or correction, contact us using the details in Section 15 (Contact Information). Include sufficient detail to identify the information you seek.

11.3 Deletion and Erasure

Right to Deletion: You may request deletion of your personal information where:

Limitations on Deletion: We may decline deletion requests where:

11.4 Data Portability

You may request a copy of your personal information in a structured, commonly-used, and machine-readable format (where technically feasible). This enables you to transfer data to another service provider.

11.5 Objection to Processing

You may object to processing of your personal information for:

11.6 Withdrawal of Consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time by contacting us. Withdrawal will not affect the lawfulness of processing before the withdrawal.

11.7 Restriction of Processing

You may request that we restrict processing of your personal information where:

12. COMPLAINTS AND DISPUTE RESOLUTION

12.1 Privacy Concerns

If you believe we have mishandled your personal information or breached the Australian Privacy Principles, you may:

Step 1: Internal Complaint Contact our Privacy Officer (details in Section 15) with:

We will acknowledge receipt within 5 business days and aim to resolve within 30 days.

Step 2: External Complaint If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

12.2 Dispute Resolution

Privacy disputes may be resolved through:

13. DIRECT MARKETING AND COMMUNICATIONS

13.1 Marketing Communications

We may use your contact information (email, phone) to send:

13.2 Opting Out

You may opt out of marketing communications by:

13.3 Transactional Communications

Transactional emails (account confirmations, billing notifications, support responses) are not subject to opt-out and are essential to service delivery.

14. CHILDREN'S PRIVACY

14.1 Age Restrictions

The Aionix Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

14.2 Parental Involvement

If a child under 13 has accessed the Platform, parents or guardians may contact us immediately to request deletion of that child's information.

14.3 Minors and Organizations

If an organization's Additional User is under 18 years, the organization's primary Account holder warrants they have obtained appropriate parental or guardian consent.

15. CONTACT INFORMATION AND PRIVACY INQUIRIES

15.1 Privacy Officer

For privacy-related inquiries, complaints, or to exercise your rights, contact:

A3A Systems Pty Ltd Privacy Officer Email: info@aionix.io Website: https://aionix.io/

Response Time: We aim to respond to privacy inquiries within 10 business days. Complex requests may require up to 30 days.

15.2 Support and Technical Issues

For general support, technical issues, or account-related inquiries:

15.3 Data Breach Notification

If a data breach occurs that affects your personal information, we will notify you without undue delay in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

16. POLICY UPDATES AND CHANGES

16.1 Amendments to This Policy

We may update this Privacy Policy to:

16.2 Notification of Changes

We will notify you of material changes by:

16.3 Continued Use

Your continued use of the Aionix Platform following notification of changes constitutes your acceptance of the updated Privacy Policy.

17. LEGAL BASIS FOR PROCESSING

17.1 Lawful Bases

Under the Privacy Act 1988 (Cth) and Australian Privacy Principles, we process personal information on the basis of:

Consent:

Contractual Necessity:

Legal Obligation:

Legitimate Interests:

18. CONFIDENTIALITY AND CONFIDENTIAL INFORMATION

18.1 Confidential Information

In accordance with our Terms of Service:

Definition: Confidential information includes any information disclosed by you that is designated as confidential, is by its nature confidential, or the other party ought reasonably to know is confidential.

Obligations: Both parties will:

18.2 Exceptions

Confidential information obligations do not apply to information that:

19. AGGREGATED AND ANONYMIZED DATA

19.1 Data Aggregation and Anonymization

We may:

19.2 Uses of Aggregated Data

Aggregated, anonymized data may be used for:

19.3 De-Identification Standards

Aggregated data is considered de-identified when it cannot identify individuals directly or indirectly, in accordance with Privacy Principles and Australian privacy guidelines.

20. GENERAL PROVISIONS

20.1 Consistency with Terms of Service

This Privacy Policy is supplementary to and should be read in conjunction with the Aionix Terms of Service. In the event of conflict, the more protective provision regarding personal information will apply.

20.2 Australian Privacy Principles Precedence

This Policy is designed to comply with the Australian Privacy Principles and the Privacy Act 1988 (Cth). Where this Policy conflicts with mandatory requirements of Australian privacy law, the applicable law will prevail.

20.3 No Personal Legal Advice

This Privacy Policy is informational only and does not constitute legal advice. We recommend you consult with a qualified privacy or legal professional regarding your specific privacy concerns or obligations.

20.4 Policy Effectiveness

This Policy is effective as of the date stated at the top and applies to all personal information collected, used, or disclosed by Aionix before and after this date.

21. DISCLAIMER AND PROFESSIONAL REVIEW RECOMMENDATION

21.1 Legal Review

This Privacy Policy has been prepared to reflect the documented data practices of the Aionix Platform as described in the Aionix Terms of Service and System User Manual. We recommend this policy be reviewed by qualified privacy and legal counsel familiar with Australian privacy law, NSW jurisdiction requirements, Google OAuth verification requirements, and your specific operational context before final deployment.

21.2 Ongoing Compliance

As business practices, technology, and regulations evolve, this Privacy Policy should be reviewed regularly to ensure continued compliance with:

21.3 External Guidance

For further information on Australian privacy compliance, refer to:

END OF PRIVACY POLICY

For additional information or privacy inquiries, please contact info@aionix.io