Privacy Policy
This Privacy Policy explains how Aristotto, Inc. (“Aristotto”, “we”, “us”) collects, uses, and shares information when you use aristotto.ai and related services (the “Service”).
Aristotto, Inc.
1401 21st ST, #14283
Sacramento, CA 95811
United States
Support: support@aristotto.ai
Privacy: info@aristotto.com
Account information: email address, username (if set), and profile details you provide.
Content and metadata: prompts, settings/parameters, uploads, generated outputs, and any visibility choices (public/private/team) associated with your content.
Usage data: interactions with the Service (features used, pages viewed), diagnostic logs, and approximate device/network information (such as IP address and user agent). If your account receives a moderation action for violating our Terms (including a warning, suspension, or ban), we may retain associated IP addresses in our moderation records; where the account is suspended or banned, we may also use them to decline new account sign-ups that attempt to evade that action.
Cookies and similar technologies: used to keep you signed in, remember preferences, and understand usage patterns. If you arrive through an affiliate referral link, first-party referral cookies (_fprom_tid, _fprom_ref) are set for up to 30 days so the referring affiliate can be credited; they do not track your browsing on other websites and are not used to build advertising profiles.
Referral invitation cookies (only with your consent). When you open a member's invite link, we do not store the invite on your device until you make your cookie choice; until then the invite is carried only in the page address. If you allow the marketing (advertising) category, we set two first-party cookies for up to 30 days: aristotto_ref, which records in signed form who invited you and when you opened their link, and aristotto_ref_pending, which tells the site an invite is waiting so it can be applied after you sign in. We remove both once the invite is applied or when you withdraw that consent. If you decline, the invite is not credited.
Payments: website payments are processed by Stripe, and iOS in-app purchases by Apple with RevenueCat validating the purchases. We receive limited information (such as subscription status, purchase history and payment identifiers) but do not store your full card number.
Support and safety information: correspondence, reports, relevant content and account activity, moderation decisions, and appeals used to address requests, investigate abuse, and protect the Service.
Connected services and collaboration: account and connection identifiers, permissions and tokens, organization membership and roles, and files or content you choose to share, import, or export through enabled features.
We receive information directly from you, through your use of the Service, and from sources such as payment and sign-in providers, connected services you authorize, collaborators, and reports. Content submitted by you or another user may include images, voices, or personal or sensitive information about other people. Submit such information only when you have the necessary permission or other lawful authority.
Provide, operate, and maintain the Service (including generating outputs you request).
Process transactions, manage subscriptions, and provide customer support.
Improve and develop the Service, including reliability, performance, and safety.
Prevent abuse, enforce our Terms, and comply with legal obligations.
Communicate with you about the Service (including important updates).
Operate our affiliate program: attributing account signups and purchases to the referring affiliate, calculating commissions, and preventing referral fraud.
We use payment status and transaction identifiers received from our payment processor to manage subscriptions, payment recovery, and subscription credits.
For individual subscriptions, if a renewal payment fails, your subscription becomes past due. We may retry payment for a limited recovery period and restrict paid features while payment remains outstanding. New credits for the unpaid renewal period are issued only after payment succeeds. If payment remains unsuccessful after the recovery attempts, the subscription is canceled.
You may cancel an individual subscription during payment recovery. Cancellation while your renewal is overdue takes effect immediately and stops further automatic collection for that subscription. If your current billing period has already been paid, cancellation takes effect at the end of that paid period and access continues until then.
Aristotto does not currently use customer prompts, uploads, or generated content to train models. This includes public content, private content, and team workspace content.
Processing your content to generate an output or perform a safety check is different from using it to train a model.
The training preferences in Settings → Privacy relate to a possible future program. When you change these settings, we store a preference version and timestamp. An existing default or timestamp does not by itself establish that you affirmatively agreed to join a training program.
Before introducing customer-content training, we will explain its purposes, eligible content, recipients, retention, and withdrawal controls, and ask for a new, specific opt-in before including your content. Publishing content or leaving a preference enabled does not by itself enroll you. Team workspace content remains excluded unless separately agreed with the organization.
You may withdraw an optional training consent for future use. Any future program will explain how withdrawal applies to data already processed and any applicable limitations, subject to your legal rights.
This describes Aristotto’s own training practices. Third-party AI providers process information to fulfill generation and safety requests; our training preferences do not determine those providers’ independent retention or data-use practices. See the Privacy Policy’s sharing information and contact us for details about the provider used for a feature.
Your generations are private by default. Making content public is optional and depends on your plan. When you first publish, we record that you accepted the publishing rules in our Terms, together with the version of those rules and the time, so we can show that you agreed to them. Content you publish may be viewed, copied, downloaded, or indexed by others. Making it private or removing it does not retrieve independent copies already received elsewhere. Private and team content is subject to the permissions of the relevant account, workspace, and sharing features.
Authorized personnel and providers may process relevant content, including private content, to deliver requested features, provide support, investigate reports, and meet legal obligations. Where we find apparent child sexual abuse material we report it to the National Center for Missing & Exploited Children (NCMEC) as United States law requires, and we may report other apparently unlawful activity to law enforcement. Such a report can include the content, related prompts and uploads, account details, IP addresses, and activity logs, and we preserve that information for as long as the law requires or permits. Automated safety checks may block a request, withhold an output, or refer activity for review. If you believe an action is mistaken, use the appeal channel described in our Terms. Applicable rights concerning automated decisions remain available.
Where EU/EEA or UK data-protection law applies, the basis for processing depends on the purpose: contractual necessity for requested account, generation, and purchase functions; applicable legal obligations for required records and disclosures; legitimate interests, subject to the required balancing and safeguards, for reliability, safety, and support; and consent where required for optional uses. Special-category or other specially protected information requires an additional applicable legal condition. Information necessary for a requested feature is needed for that feature to work; optional consent is separate from accepting our Terms.
Aristotto is based in the United States. Providers and authorized personnel may process information in the United States and other countries, whose laws may differ from those where you live. Contact info@aristotto.com for information about relevant recipients, processing countries, and applicable transfer safeguards, or to request a copy of a safeguard where available. International processing remains subject to applicable data-protection requirements; using the Service is not a blanket waiver of those protections.
App-store purchases and RevenueCat: Apple processes payments for credit packs purchased in the iOS app, and Google Play processes payments for credit packs purchased in the Android app. RevenueCat validates purchases and sends transaction information to our server so we can grant credits and handle refunds. Information includes your Aristotto account identifier, product and transaction identifiers, purchase history, and app/device information. We do not receive your full payment-card number from Apple or Google Play.
Crash reporting with Sentry: we use crash reports, error diagnostics and release-health information to find and fix app failures. Reports can include your account identifier, app version, device and operating-system information, locale and time zone. The app does not enable Sentry session replay, performance tracing, profiling or advertising tracking. We filter sensitive diagnostic data and configure Sentry not to store IP addresses.
Notifications through Expo, Apple and Google: We use Expo's push service with Apple Push Notification service on iOS and Google's Firebase Cloud Messaging on Android. These services process notification content and installation/device/push identifiers to operate the notification service and deliver updates such as generation completion. We associate the device registration with your Aristotto account. When you allow notifications, we can send these updates to that device. You can turn notifications off in your device settings. Firebase Cloud Messaging may initialize installation identifiers independently of the operating system's notification permission. Aristotto does not enable Firebase Analytics for this Android app.
Sign-in providers and Supabase: Supabase manages account authentication. When you choose Apple, Google or another supported sign-in provider, we process the identity information and credentials needed to authenticate you, which can include a provider identifier, email address and name. Apple can provide a private relay email address when you choose Hide My Email. The information shared depends on your provider and choices.
After an account deletion completes, we request deletion of its RevenueCat customer record. We retain the deleted account identifier in a restricted cleanup record and repeat erasure requests because an app still open on another device can recreate the provider record. Provider processing and repeat requests may take additional time. This does not erase records that Apple, Google Play or payment providers retain for their own accounting, fraud prevention or legal obligations, or records we must retain as described below. Deleting a RevenueCat customer record does not itself cancel a subscription billed by Apple or Stripe.
When you sign out or delete your account in the app, we remove or deactivate the account's push-device registration and request deletion of the device's messaging token. Deleting a messaging token is different from deleting a Firebase installation identifier. Google can retain installation identifiers and service records under its own processing and retention policies; account deletion does not promise immediate deletion of all provider-held records.
You can connect your account to an AI assistant or another app that supports the Model Context Protocol. A connection starts on our consent screen, which names the app and lists what it can do: see the model catalog and prices, generate images and videos with your credits, generate audio with your credits when that permission is shown, and view, list, and cancel your generations. The app receives access to your account only after you allow the connection.
What the app receives: the results of requests it makes on your behalf, including the catalog and prices, quotes and started jobs with their credit cost, and your generation jobs (their status, model and task, and links to their outputs), together with an account identifier that is not your email address. It never receives your password.
What we receive: requests the app sends on your behalf, including prompts and settings, and the app’s registration details (its name, logo, and redirect address). Generations started through an app run on your account, use your credits, and are covered by this Policy, including the current training information above, like generations you start directly on the Service.
The app operator: what the app does with results it receives, including what it stores or shows in its own product, is governed by its operator’s privacy policy.
Your controls: Settings → Connected apps lists every active connection and lets you disconnect it. Disconnecting ends the app’s access immediately. It does not delete information or outputs the app already received; contact its operator about those copies.
We retain information for as long as necessary to provide the Service and for legitimate business and legal purposes. If you delete content or close your account, we will take steps to delete or de-identify data as appropriate, subject to technical and legal constraints (including backups).
Retention depends on the type of information and its purpose: account and content records support your use of the Service; payment and credit records support accounting and disputes; support records support case handling; and relevant safety and security records support investigation, appeals, and proportionate prevention of repeat abuse. Hiding content or suspending an account is different from deleting the underlying information.
Deletion and access requests are subject to applicable exceptions, including valid preservation obligations. For material covered by the report-related preservation requirements of 18 U.S.C. §2258A, the statutory preservation period is one year after a qualifying CyberTipline submission, with the required protection of preserved material. Additional lawful preservation obligations may apply. This is not a general one-year retention rule for all customer content.
For connected apps: an access token is valid for one hour, and a refresh token for 30 days, renewed each time the app uses it. A daily cleanup deletes sign-in codes and price quotes once a day has passed since they expired, so within two days of expiry, and deletes a self-registered app that never completed a connection once 30 days have passed since it registered. A replaced refresh token is kept for about 30 days so that any reuse of it can be detected.
The record of a connection, including when you disconnected it, is kept while your account exists.
Update your profile and privacy settings in your account settings.
Review the current training information and preferences in Settings → Privacy.
Review and disconnect connected apps in Settings → Connected apps.
Opt out of marketing emails using the unsubscribe link (where available). Necessary account, billing, and safety messages may continue.
Use available cookie preferences and browser controls to manage cookies. The applicable choices depend on the technology, its purpose, and the law that applies.
You can contact info@aristotto.com about personal information, including if your account is suspended or closed or you do not have an account. We may request proportionate information to verify your identity or a representative’s authority. Please do not send passwords, full payment-card numbers, or unnecessary identity documents. An account restriction does not remove applicable privacy rights.
If you are a California resident, you may have rights to request access to, deletion of, or correction of certain personal information, subject to exceptions. To exercise these rights, contact us at info@aristotto.com.
Depending on your state and whether its law applies, you may also have rights to a portable copy, to opt out of specified uses such as sale, sharing, targeted advertising or certain profiling, to limit certain uses of sensitive information, or to appeal a denied request. We do not unlawfully discriminate against people for exercising applicable privacy rights. These rights and their conditions vary by jurisdiction.
Where applicable data-protection law covers our processing, you may request access, correction, erasure, restriction, or portability, subject to the relevant conditions and exceptions. You may object to processing based on legitimate interests and to direct marketing, and withdraw consent without affecting the lawfulness of earlier consent-based processing. You may complain to your competent data-protection authority. Requests are handled within applicable legal time limits, with any permitted extension explained.
To raise a UK data-protection complaint, contact info@aristotto.com and describe your concern. Where the UK complaint requirements apply, we acknowledge receipt within 30 days, investigate appropriately without undue delay, keep you informed, and communicate the outcome. You may also contact the Information Commissioner’s Office. This complaint process is separate from data-rights requests, which have their own legal deadlines.
Where the Australian Privacy Act applies, you may request access to or correction of your personal information and complain about its handling. Contact info@aristotto.com with enough information to identify the concern. We will review the complaint and communicate the outcome and applicable escalation options, including the Office of the Australian Information Commissioner.
The Service is not intended for anyone under 18.
If you believe a minor is using an account or that we have mishandled a child’s information, contact info@aristotto.com. We will review the concern and take the steps required by applicable law. To report prohibited content involving minors, identify its location; do not send suspected child sexual abuse material as an attachment.
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date. We will provide additional notice or obtain consent when required. A policy update does not itself authorize an incompatible new use of previously collected information.