Privacy policy
Last updated 10 June 2026. Ahel is built and operated by Ahel Technologies OÜ, registered in Estonia. Our infrastructure runs in the European Union.
What we store
Your account (email address, password hash or sign-in tokens), your workspace settings (the providers and tools you connect and the agents you configure), your API keys (stored in a form that cannot be turned back into the key; the full key is shown once and never kept), and run records (which jobs ran and when). If you connect your own provider keys, they are encrypted at rest with a key held separately from the database, and we never display them back.
What we do with the work you run
The instructions and inputs you give an agent are forwarded to the providers and tools you connected so the job can run, and the run is recorded in your history so its receipts stay auditable. We do not sell or share your prompts or results, and we do not use them to train models.
Third parties
Payments are processed by Stripe (we never see card numbers). Transactional email is sent through SendGrid. Work that runs on a provider or tool you connect is subject to that service’s own terms.
Where data lives
Application data is hosted on infrastructure in the European Union. We retain usage records for as long as your account is active; delete your account and we delete your workspace data.
Your rights
Under the GDPR you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to privacy@ahel.ai and we will respond within 30 days. You can also complain to the Estonian Data Protection Inspectorate (AKI).
Cookies
We use a session cookie to keep you signed in and a preference cookie for your theme. No advertising trackers.
Data processing agreement (DPA)
If you process personal data through Ahel on behalf of your own customers, we offer a GDPR Article 28 Data Processing Agreement. It’s available on request — email privacy@ahel.ai and we’ll send the current version.
Questions? ahel.ai · privacy@ahel.ai