Privacy Policy

What we collect

• Account information: your email, account ID, display name, sign-in provider, plan, access status, and settings.
• Project content: project names, graphs, nodes, parameters, custom nodes, shaders, uploads, graph snapshots, thumbnails, renders, exports, and synchronization history.
• Agents and integrations: messages, responses, tool calls and results, selected models, connected applications, permissions, and connection records.
• Usage information: features used, diagnostics, errors, performance, browser and device type, IP address, and security logs.
• Payments and communications: your plan and transaction status and any messages, files, or diagnostics you send us.

We receive this information from you, your browser or device, sign-in and payment providers, and connected applications.

How we use information

We use information to provide, support, improve, and secure Aqueduct; manage accounts and payments; communicate with you; and comply with law.

When required, our legal bases are our contract with you, our legitimate interests in operating, improving, and securing Aqueduct, your consent, and our legal obligations.

Agents and model training

When you use Aqueduct's Agent feature, content needed for your request may be processed by Anthropic, OpenAI, or Google. An external agent, MCP client, or other connected application handles information it receives under its own privacy policy.

Iliad does not use private or public Aqueduct content to train or fine-tune generative models. Publishing is not consent to training. Any future training program involving user content will require a separate opt-in and will not apply retroactively.

Public graph snapshots and asset URLs

A graph snapshot is private unless you make it publicly accessible. While it is public, anyone can view it, users with Aqueduct access can duplicate it, and Iliad may feature it in marketing for Aqueduct. If you make it private again, Iliad will not use it in new marketing. Copies already downloaded, cached, shared, or included in existing marketing may remain.

Uploaded bitmaps and graph snapshot thumbnails are stored at URLs that do not require sign-in. Anyone who obtains a URL can open the file, even if the project or graph snapshot is private. Identical files may share the same stored object. Export links may also be accessible to anyone with the link until they expire.

Providers and other disclosures

We use service providers for authentication, email, database hosting, storage and networking, analytics and session replay, internal administration and support, payments, and Agent or model features. These providers include Aiven, Anthropic, Basedash, Cloudflare, Google, OpenAI, PostHog, Resend, and Stripe.

These providers process information to perform services for us. We may also disclose information when you direct us to, when required by law, to protect people or Aqueduct, to confidential professional advisers, or as part of a financing, acquisition, or sale.

Iliad does not sell personal information or share it for cross-context behavioral advertising.

Analytics and browser storage

Aqueduct uses cookies and browser storage for authentication, security, preferences, editor state, caching, and analytics. PostHog records product activity and may associate it with your account. Its session replay may capture text or other content visible or entered during a recorded session. We do not use third-party advertising cookies.

Retention

We generally keep your account and projects while your account is active and until you delete them or request account deletion. Graph snapshots remain until deleted, and deleting a project does not necessarily delete its separate graph snapshots. Shared objects may remain while another project or graph snapshot uses them.

We keep payment, security, support, and legal records as long as reasonably needed. Deleted information may remain in backups.

Your choices and rights

Depending on where you live, you may have rights over your personal information. These may include accessing, correcting, deleting, or exporting it, and restricting or objecting to its use. You may also withdraw consent, appeal a denied request, or complain to a privacy regulator. We will not treat you unfairly for exercising your rights.

Use Aqueduct's controls where available or email [email protected]. We may need to verify your identity.

International processing

Iliad and its providers may process information in the United States and other countries. For international transfers, we use contracts or other safeguards recognized by applicable law.

Children

Aqueduct is not for children under 13. We do not knowingly collect personal information from children under 13.

Changes and contact

We may update this policy by posting a revised version with a new effective date. If a new use of information requires consent, we will ask for it.

Questions, complaints, and privacy requests may be sent to [email protected].