Local-first architecture. Your data stays on your machine.
It stays on your machine, encrypted.
Local-first means no cloud syncing.
A license check, and usage stats only if you opt in.
No cookies, no ad pixels, no third-party trackers on our website.
Export, delete, or migrate anytime.
Genesis Platform is built on a local-first, privacy-first architecture. Unlike cloud-based subscription tools, your data stays on YOUR machine. We cannot access your data because we never receive it.
This Privacy Policy explains what minimal data we collect, how we use it, and your rights.
• Your business data (conversations, documents, emails, etc.) - stored locally on your machine
• API keys or OAuth tokens - encrypted and stored in your local SecretVault
• Anything you type, say or store in ARIA - none of it is ever sent to us (section 2b lists every time the app does contact us, and what it sends)
• Usage statistics from the app - unless you turn them on
• Tracking cookies, advertising pixels or third-party trackers - none run on our website
• Behavioral data or profiling - ARIA learns locally, not in our cloud
License & Activation: the email used to buy, your license key, and what the ARIA app sends to activate and check it (section 2b)
Website Analytics (cookieless, first-party, on our own servers): which pages are viewed, how far people scroll, clicks on page elements, page speed and errors, the referring site or campaign tag, country, and device type. Nothing is stored on your device. A visit is recognised only within a single day, through a one-way hash of the IP address and browser made with a key we destroy every 24 hours, so visits cannot be linked across days; raw IP addresses are not kept in analytics. If your browser sends Global Privacy Control or Do Not Track, we only count the visit.
Security Logs: our web servers record requests (including IP address and browser) to protect the site and our downloads from abuse and automated scraping.
Support Requests: Email, name, and message content when you contact us
Payment Information: Handled by Stripe on Stripe’s own checkout page (PCI-compliant). We never see your card details. With a purchase we keep your email, the plan, and where your visit came from (referring site or campaign tag).
ARIA runs on your machine. These are the only times it contacts us, and exactly what it sends. None of them ever carries your conversations, files, memories, contacts, or anything you type.
• Activation — once per device, and once after each new version: your license key (or a free registration), a one-way machine ID (a code made from your hardware that cannot be turned back into it), and your computer’s name with its platform, memory and core count, so you can tell your devices apart. We log the IP address of the request to stop license abuse.
• License check — each time ARIA starts while you are online: your license key, the same one-way machine ID and the app version. It confirms the license is still valid and delivers agents you have bought since. It is never required: without internet, or if our servers are down, ARIA starts and runs everything you bought, with no time limit. No IP address is stored for it.
• Usage statistics — only if you turn them on (Settings → Privacy → Analytics). Once a week: counts of which tools ran and failed, response speed, how many threats ARIA’s defences blocked, and ARIA’s style settings (such as how formal or concise she is), tagged with the one-way machine ID. Versions after 1.1.0 leave this off until you switch it on; ARIA 1.1.0 and earlier have it on by default, and you can switch it off in the same place.
• Feedback — only when you send it (Settings → About): your message, its type and severity, the app version and platform, plus your email address and a screenshot only if you add them.
• Genesis notices — while ARIA’s Operations page is open, it checks every few minutes for notices from us: security advisories, critical fixes, and product proposals you can vote on. Votes and ideas are sent only when you submit them.
• Update check — only when you press “Check for updates”: the app version and platform, nothing else. If you then install an update from inside ARIA, it reports whether the install worked (versions, platform, success or error).
• AETHER, ARIA-to-ARIA messaging — while ARIA runs, it keeps a connection to our relay so other ARIAs can reach yours. Everything that crosses it is end-to-end encrypted with post-quantum keys that never leave your machines; the relay passes along messages it cannot read. It sees your IP address only in memory, to limit abuse, and never stores it.
• AI providers you choose — when ARIA thinks with a cloud model, your message and the context it needs go directly from your machine to the provider you picked (for example OpenAI, Anthropic or DeepSeek), under your own key or account and that provider’s privacy policy. They never pass through us. With a local model, nothing leaves your machine.
Nothing else: no crash reports, no screen or keystroke recording, no location, no advertising identifiers.
License verification: To ensure valid license usage and prevent fraud
Support: To respond to your questions and troubleshoot issues
Product improvement: the usage statistics you chose to share, read as totals across installs (e.g. which tools fail most often)
Legal compliance: As required by law (GDPR, data breach notification, etc.)
Local Storage: All business data, conversations, and learning stored on YOUR machine in encrypted SQLite databases
Encryption: AES-256 for data at rest, TLS 1.3 for API communications
Access Control: Only you can access your data. We have no backdoors or remote access
Backups: YOU control backups. We recommend regular backups of your local data directory
This website sets no cookies and stores nothing on your device. The one exception is signing in to the affiliate or partner dashboard: your browser then keeps a login token, which is strictly necessary for the sign-in, until you sign out.
Fonts and images are served from our own servers. We do not use Google Analytics, the Meta Pixel or any other third-party tracker here — which is why there is no cookie banner. Links to other sites (social networks, Stripe, marketplaces) only contact those sites if you click them.
Genesis integrates with third-party services (Google, Meta, Shopify, etc.) via OAuth. When you authorize these integrations:
• You grant Genesis permission to call APIs on your behalf
• Your credentials are encrypted and stored locally
• Genesis follows the privacy policies of those services
• You can revoke access anytime from your account settings
Right to Access: Request a copy of data we hold about you
Right to Deletion: Request deletion of your license data
Right to Portability: Export your local data anytime (you already own it)
Right to Object: Opt-out of marketing emails (we rarely send any)
Right to Complain: Contact your local data protection authority
Genesis is not intended for users under 18. We do not knowingly collect data from children. If you are a parent and believe your child provided us with personal information, please contact us.
License Data: Retained as long as your license is active, then 7 years for accounting/legal compliance
Activation Logs: the IP address is erased after 180 days
Usage Statistics from the App: 25 months, then deleted
Support Requests and In-App Feedback: Retained for 2 years, screenshots included, then deleted
Website Analytics: 25 months, then deleted
Website Security Logs: 30 days, then deleted
Download Records: the IP address is erased after 180 days; only the count remains
Local Data: YOU control retention. Genesis auto-prunes old data (configurable)
Genesis is local-first software. Your data does not transfer internationally unless YOU explicitly configure integrations that do so (e.g., using Google Workspace in a different region).
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use after changes means acceptance.