Privacy Policy
Last updated Oct 22, 2026
Elios provides infrastructure that developers use to build and run applications and agents. This policy explains how Elios Superintelligence, Inc., a Delaware corporation (“Elios”, “we”, “us”), handles personal information when people visit our websites, create or administer an Elios account, contact us, or apply for an Elios program.
Our privacy contact is privacy@elios.ai. Our postal address is 136 Cheyenne Way, Wayne, NJ 07470, United States.
#1. Our role and the information this policy covers
We decide how to use account, billing, website, business-contact and certain security information to operate our business. For that processing, Elios acts as a controller or the equivalent role under applicable law.
Our customers also use the Services to process information about other people. This may include files in a cloud computer, information accessed by an agent, telephone numbers, call audio, recordings, messages, contacts and other application content (“Customer Content”). Where we process personal information in Customer Content on a customer’s instructions, that processing is governed by our agreement with the customer, including our Data Processing Addendum where applicable. The customer determines the purposes for that processing and is responsible for its own privacy notice and lawful instructions.
The label attached to a record does not determine our legal role. For example, a log containing customer application content may remain subject to the Data Processing Addendum. The categories below describe the processing for which we determine the purpose; they do not give us a general right to repurpose Customer Content.
If you interact with an application or agent built by an Elios customer, contact that customer about how it uses your information. If you contact us about information we process for a customer, we will direct the request to the appropriate customer or assist it as required by our agreement and applicable law.
#2. Information we collect
The information collected depends on how you interact with Elios and which features you use.
| Category | Examples | Sources |
|---|---|---|
| Account and contact information | Name, email address, account identifier, authentication information, organization name, role and account settings. You sign in to the console with one-time codes sent to your email through WorkOS; Elios does not use passwords. | You, your organization, and our authentication provider, WorkOS |
| Billing and transaction information | Billing contact and address, tax information where needed, amounts charged, payment status, invoices, credit balances and payment-method references. Card details go to Stripe; Elios does not store full card numbers. | You, your organization, and payment providers |
| Service administration and usage information | Resource identifiers, usage quantities, API request metadata, service events, timestamps and information needed to administer your account and calculate charges | Your use of the Services and our systems |
| Website and device information | IP address, browser and device information, referring page, interactions with our website, and cookie or similar identifiers where used. On elios.ai, analytics use no cookies or identifiers. In the console, analytics cookies and session recordings are used only if you consent. | Your browser or device and our website providers |
| Communications and support information | Messages, attachments, feedback, support history and information you choose to provide | You and people contacting us on your behalf |
| Application information | Startup or enterprise application details, company website, development stage, intended use and estimated usage | You and any representative submitting an application |
| Phone registration information | Business details and use-case information needed to register business texting with the carriers | You and your organization |
| Security and abuse information | Authentication events, suspected misuse, security reports, relevant technical evidence and investigation records | Our systems, customers, service providers, affected people and public sources where relevant |
| Legal and rights reports | Intellectual property complaints, counter-notices, legal requests, reporter contact details and related case records | Reporting parties, customers, representatives and competent authorities |
If you provide information about another person, you should have authority to do so and give them any information required by applicable law. Do not include unnecessary sensitive information in support requests or application forms.
#3. How we use information
We use personal information to:
- Create and administer accounts, authenticate users, operate requested features and communicate about the Services.
- Measure usage, issue credits, calculate charges, process payments, handle billing questions and maintain financial records.
- Respond to questions, provide support and review startup, enterprise or other program applications.
- Register phone numbers and business texting with carriers when you use Phone.
- Maintain and improve the performance, reliability and usability of our websites and Services using information appropriate to those purposes.
- Detect, prevent and investigate fraud, abuse, security incidents and violations of our agreements, and protect people and systems.
- Send product news or other marketing communications where permitted and manage communication preferences.
- Meet legal obligations, handle disputes, establish or defend legal claims and administer business transactions.
Customer Content processed on a customer’s instructions is subject to the purpose restrictions in the applicable customer agreement and Data Processing Addendum. This policy does not authorize its use for unrelated advertising, and Elios never uses Customer Content to train models.
We may use statistics that do not identify an individual. Where applicable law requires safeguards for deidentified information, we will maintain those safeguards and will not attempt to identify individuals except as the law permits to assess whether the deidentification process works.
#4. Legal grounds where required
Where European, UK or another applicable law requires a legal basis, we rely on the basis appropriate to the particular processing:
| Purpose | Legal basis |
|---|---|
| Providing Services requested by an individual customer and taking steps at their request before contracting | Performance of a contract with that individual |
| Administering an organizational customer relationship, supporting its users, operating and improving the business, cookieless website analytics, and maintaining proportionate security and abuse prevention | Our legitimate interests in operating a reliable business and protecting people and systems, after considering the individual’s rights and interests |
| Accounting, tax, valid legal demands and other mandatory duties | Compliance with a legal obligation that applies to us |
| Optional cookies, console session recordings and other processing for which we request consent | Consent, which can be withdrawn for future processing |
| Permitted business marketing | Consent where required, or legitimate interests where permitted and subject to the right to object |
Information needed to create an account, supply a requested service or meet a legal requirement may be required. If you do not provide it, we may be unable to supply that service. Optional information is identified as optional when collected.
#5. How we disclose information
We disclose personal information when appropriate for the purposes above:
- Service providers. Providers that help operate our infrastructure, authentication, payments, support, communications, security, analytics and other business functions receive information needed for their work. Their roles and obligations depend on the service they provide. The list of subprocessors handling Customer Content on our behalf is available at Subprocessors.
- Carriers. To deliver calls and messages, phone numbers, message content and registration information pass to our carrier, BulkVS, and the networks it connects to.
- Your organization. Account owners and authorized administrators may receive information needed to manage their organization, users, resources, usage and charges. An email domain alone does not give an organization access to a separate account.
- Services you choose. If you connect a third-party service or direct an agent to communicate with another system or person, information may be sent as you instruct. Those recipients may process it under their own terms and privacy notices.
- Legal and protective purposes. We may disclose information when required by law or valid legal process, or when reasonably necessary and permitted by law to prevent abuse, protect rights or safety, investigate incidents or establish, exercise or defend a legal claim. Legal requests for information go to legal@elios.ai.
- Complaint and dispute participants. We may provide relevant information in a rights complaint or response to the affected customer, reporting party or their representative so they can address it. A copyright notice or counter-notice may need to include contact information that is shared under the applicable procedure. Do not include unrelated sensitive information in a report.
- Business transactions. Information may be disclosed to advisers, potential counterparties or a successor in connection with a financing, merger, acquisition, restructuring or sale of assets, subject to appropriate confidentiality and applicable law.
- Your direction or permission. We may disclose information when you ask us to do so or authorize a specific disclosure.
Elios has no affiliates that receive personal information.
#6. Cookies, advertising and privacy choices
Our Cookie Policy describes cookies, local storage and similar technologies used on our websites and account interfaces. You can manage optional technologies through the console’s consent banner, and you can withdraw consent at any time by writing to privacy@elios.ai. Our website, elios.ai, uses no analytics cookies, and the console uses analytics cookies or records sessions only if you allow it.
We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, and we do not use advertising pixels.
You can unsubscribe from marketing emails using the link in the email or by contacting us. We may still send necessary service, billing, security and legal communications.
#7. Retention
We retain personal information for as long as reasonably necessary for the stated purpose, taking account of the account relationship, legal obligations, dispute-resolution needs, fraud prevention and the sensitivity of the information. We then delete it or render it nonidentifiable, subject to applicable law.
| Information | Retention period or decision criteria |
|---|---|
| Account and administration records | Kept while the account is open, and deleted within 30 days after it closes |
| Billing, tax and transaction records | Kept for 7 years, as accounting and tax law requires |
| Support and business correspondence | Kept while needed to answer the request and support the account, then deleted on the account schedule above unless it relates to a dispute or legal claim |
| Startup and enterprise applications | Kept while we review the application and any offer that follows; unsuccessful and withdrawn applications are deleted once no longer needed for that review |
| Security and abuse records | Logs are kept for 30 days. Records of a specific incident or abuse case are kept for as long as needed to resolve it and meet legal obligations, with access limited to the people handling it |
| Legal and rights-report records | Kept for the life of the case and any legal retention period that applies to it |
| Website analytics and cookie identifiers | Website analytics hold no identifiers; their daily-rotating visitor hash cannot link visits across days. Console analytics data from consenting users is kept for as long as it is needed to understand how the console is used |
| Backups of the above records | Roll off within 35 days of the deletion of the underlying records |
Retention of personal information in Customer Content is governed by the applicable customer agreement, product settings and Data Processing Addendum. Stopping a workload, releasing a number, closing an account and deleting stored content may have different effects. The applicable product documentation must explain those effects.
#8. International processing
Our operations and providers may process personal information in the United States and the European Union (Germany and Finland), and our content delivery and security provider, Cloudflare, operates a global network. These locations may have data protection laws different from those where you live.
Where applicable law restricts a transfer, we use a permitted mechanism and any additional measures required for that transfer. For transfers from the European Economic Area, the United Kingdom or Switzerland, we use the European Commission’s Standard Contractual Clauses, with the UK Addendum and Swiss adaptations where they apply. Elios is not certified under the EU-U.S. Data Privacy Framework. You can contact us to request information about applicable safeguards, subject to lawful redactions.
#9. Security
We use measures appropriate to the nature of the information and the risks of processing. The applicable measures for Customer Content are described in the agreed Security Measures. No service can guarantee that every incident will be prevented.
#10. Your rights and requests
Depending on the law that applies and any applicable exceptions, you may have rights to request access to personal information, correction, deletion, a portable copy, restriction of processing, withdrawal of consent, or objection to certain processing. You may also have rights to opt out of a sale, certain sharing or targeted advertising, or certain automated decisions, and to limit specified uses of sensitive information.
Send a request to privacy@elios.ai. We may ask for information reasonably needed to verify your identity or the authority of an agent acting for you. We will respond within the period required by applicable law and explain any permitted extension or refusal. We will not unlawfully discriminate against you for exercising a privacy right.
Where a right to appeal applies, you may appeal by contacting the same address with “Privacy appeal” in the subject. We will explain the result and any further complaint route required by law. You can also complain to the regulator responsible for data protection in your jurisdiction. For the EEA, this generally includes the authority where you live, work or believe an infringement occurred. In the UK, you can contact the Information Commissioner’s Office.
Requests concerning Customer Content should generally be sent to the customer controlling it. We assist that customer where required and do not decide the request independently unless applicable law requires us to do so.
#11. Automated decisions
We use automated screening to detect fraud and abuse, for example to block a suspicious signup or a suspicious message. We do not otherwise make decisions with legal or similarly significant effects about people by automated means alone. If an automated decision affects you, you can ask a person to review it by writing to abuse@elios.ai.
Customers can build agents and automation using Elios. Their decisions about people are governed by their own practices and applicable law. The availability of automation infrastructure does not establish that Elios itself makes those decisions.
#12. Age and intended audience
Elios accounts are intended for business and professional use by adults aged 18 or older. We do not direct our account offering to children. If you believe a child has provided account information to us contrary to this policy, contact us so we can investigate and take appropriate action.
This account eligibility rule does not determine whose information a customer may lawfully process in its application. Customers must comply with the specific laws and agreements that apply to their end users and data.
#13. Changes
We may update this policy to reflect changes to our practices or legal requirements. We will publish the updated date and provide additional notice where a change materially affects your rights or where law requires it. Where consent is required for a new use, we will request it; continued use alone is not treated as consent to that use.
#14. Contact
Elios: Elios Superintelligence, Inc.
Address: 136 Cheyenne Way, Wayne, NJ 07470, United States
Privacy contact: privacy@elios.ai