Privacy and cookies
Last updated 2 November 2026.
Who we are
duvon.ai and AiNAD are run by DUVON Technologies Ltd, Andrea Avraamide 47, M10, 2024 Strovolos, Nicosia, Cyprus. We are the data controller for the personal data described here. For any privacy question or request, write to privacy@duvon.ai.
This website
duvon.ai sets no cookies and uses no analytics, advertising or tracking tools. Fonts and images are served from our own server, so your browser does not contact third parties when you read the site. Like any web server, ours briefly records technical request data (IP address, time, page requested) to keep the service secure and working. These logs are kept for a short time and are not used to profile you.
AiNAD accounts
When you sign in to AiNAD Studio at ainad.duvon.ai we process:
- Account data: your name, email address, company and seat details.
- Project data: the projects, drawings, reference material, design principles and rules you or your AI assistant create or upload.
- Billing data: your plan, invoices and subscription status. Card details are handled by our payment provider and never reach our servers.
- Technical data: sign-in events and server logs needed to run and secure the service.
We use this data to provide the service you subscribed to (contract), to keep it secure (legitimate interest), and to meet tax and accounting duties (legal obligation). Each practice's projects and design principles are kept in its own private workspace and are never shared with other customers or used to train AI models.
Cookies in AiNAD
AiNAD Studio uses only strictly necessary cookies: a session cookie that keeps you signed in, and the sign-in provider's security cookies. These are needed for the service to work, so no consent banner is required. We use no advertising or analytics cookies.
Service providers
- Fly.io: hosting, with servers in Frankfurt, Germany.
- WorkOS: sign-in and emailed login codes.
- Stripe: payments and invoices.
- Your AI assistant (for example Claude or ChatGPT): when you connect it to AiNAD, project data it reads is processed under your own agreement with that provider.
Where a provider processes data outside the EU, it does so under the European Commission's standard contractual clauses or an equivalent safeguard.
How long we keep data
We keep account and project data while your subscription is active. After it ends we delete it within 90 days, unless you ask us to delete it sooner or the law requires us to keep it (for example invoices, which are kept for the period tax law requires).
Your rights
Under the GDPR you can ask to access, correct, delete or export your personal data, and you can object to or restrict how we use it. Write to privacy@duvon.ai and we will answer within one month. You can also complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).
Changes
If we change this notice we will update the date above, and tell account holders by email about important changes.