Privacy Policy
Last updated: July 1, 2026
This Privacy Policy explains how Studio Aices (“Studio Aices”, “we”, “us”) handles information in connection with The Beacon (the “Service”) — our desktop application and this website. The Beacon is designed to keep your sensitive data on your own device; this policy describes the limited information we do process and the choices you have.
The short version
- Your AI provider API keys are encrypted and stored on your device. We never receive or store them.
- Your prompts, generated content, and the data your tools return are processed on your device and sent directly to the AI provider and third-party services you choose — not to us.
- We collect only what we need to run your account and subscription: your sign-in email and billing status.
- We do not sell your personal information.
Information we collect
Account information. When you create an account we process your email address and a sign-in identifier through Google Cloud Identity Platform (Firebase Authentication). If you sign in with Google or Microsoft, we receive basic profile information from that provider.
Subscription & billing. Payments are processed by Stripe. We do not receive or store your full card details. We store your subscription status and the identifiers Stripe uses for your customer and subscription so we can grant access and manage billing.
Operational data. Our servers keep limited technical logs (such as request metadata and errors) needed to operate and secure the Service.
Information that stays on your device
The following are stored locally, encrypted at rest using your operating system’s secure storage, and are not transmitted to or stored by Studio Aices:
- Your AI provider API keys (OpenAI, Anthropic, Google, DeepSeek, and others you add).
- Your tool and integration configuration, including any local MCP server settings and secrets.
- Access and refresh tokens for third-party accounts you connect (e.g. Google, Slack, LinkedIn).
- Your intents, conversations, generated interfaces, and the results returned by tools.
AI requests are sent directly from your device to the AI provider you select, using your own key. When a connected tool runs, it calls that third-party service directly from your device using the token stored on your device.
Connecting third-party accounts (OAuth)
When you connect an account, you authorize it in your browser and the authorization is returned to the app. For providers we broker on your behalf, our server performs the OAuth token exchange so that a client secret does not need to live on your device. In that step our server transiently handles the authorization code and returns the resulting tokens to your device for storage there; we do not persist your access or refresh tokens on our servers. You can disconnect an account at any time in the app, which removes its stored tokens from your device.
Instagram and other platform data
If you connect an Instagram account, The Beacon uses Instagram’s official API with the permissions you grant at the consent screen. It reads only your own profile details and media, in order to show them to you and answer requests you make in the app. Instagram data is processed on your device and is not stored on our servers, not used to train any model, not sold, and not shared with third parties. Your Instagram access token is stored encrypted on your device. Disconnecting the integration deletes that token and any cached Instagram content from your device — see our Data Deletion page for step-by-step instructions and how to revoke access from Instagram’s own settings. The same principles apply to every other account you connect.
Service providers
We rely on a small number of processors to run the Service: Google Cloud (hosting, authentication, and database), and Stripe (payments). The AI providers and third-party services you connect are independent controllers of the data you send them, governed by their own privacy policies.
How we use information
- To create and authenticate your account.
- To provide and manage your subscription and access.
- To operate, secure, debug, and improve the Service.
- To comply with legal obligations.
Data retention
We keep account and billing information for as long as your account is active and as required to meet legal, accounting, or reporting obligations. On-device data is retained on your device until you delete it or uninstall the app.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, or to delete your account, contact us at privacy@studioaices.com.
International transfers
We may process information in countries other than your own, including the United States and the European Union, using appropriate safeguards where required.
Children
The Service is not directed to children under 16, and we do not knowingly collect their personal information.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, by additional notice.
Contact
Studio Aices — privacy@studioaices.com