Security
Your admin. Nobody else’s business.
What Aydria keeps, what it shares and with whom, and what you can change at any time. In plain words.
Never sold. Never shared.
We never sell or share your personal data. Not with advertisers, not with data brokers, not with “partners”. We earn money from subscriptions, full stop. In the privacy policy this is a binding promise, not a mission statement.
What we do share, and when
Only the company in your case
If Aydria is sorting your Ziggo bill, Ziggo hears from it. Nobody else does.
Only what that case needs
The plan lists it before you say Yes, for example: name, address, customer number (from your device).
Only after your Yes
Anything beyond what the plan listed needs a new Yes.
To run Aydria at all we use a short list of providers, such as our database host and the phone network. They process data for us under contract and only for that. They’re all listed below.
Secrets stay on your device.
Passwords, PINs, your BSN and IBAN, policy and customer numbers go in the vault. The vault is locked with a key that’s made on your device and never leaves it, protected by Touch ID, Windows Hello, a passkey or your passphrase. Our servers never see that key, so they can’t open the vault. We can’t leak what we never had.
Locked on your device
Each secret is encrypted on your device before it’s stored. The key sits in your Mac’s Keychain, Windows Credential Manager, or behind a passkey in your browser.
Only the locked version could ever be synced
By default the vault lives on one device only. If you turn on sync, our servers store the encrypted version, which they can’t read. A new device gets the key straight from your old one, by scanning a code.
The company hears it from your device
When a company asks for a secret, you get a request on your device. Confirm with Touch ID, Windows Hello or your passkey, and your device reads the value into the call, or you say it yourself. The transcript only notes that you gave it.
Secrets never appear in memory, in our logs, in AI prompts or in analytics. We test this on every build with a planted fake secret that must never show up anywhere.
At setup you can write down a 24-word recovery key. Lose that and every device, and nobody can open your vault. Not even us. That’s the point.
Where your data lives
Your account, cases and memories are stored in the EU. Below is every provider that processes personal data for Aydria, what for and where. Where one can process outside the EU, we say so and name the safeguard.
| Provider | What for | Where | Which data |
|---|---|---|---|
| Supabase | Our main database and sign-in: your account, cases, timelines, memories and credit ledger. | Frankfurt, Germany (EU). Supabase, Inc. is a US company; any access from outside the EU is covered by Standard Contractual Clauses. | Name, email address, phone number, postal address, case details, call transcripts (encrypted with a separate key per user), memories, credit and plan history. Never the contents of your secrets vault. |
| Cloudflare | Runs the website and app, stores proof files and documents, receives email replies from companies, runs long-running cases, and blocks spam sign-ups. | Files are stored in the EU. Web requests are handled at the Cloudflare data centre nearest to you, which for the Netherlands is normally in the EU, but this is not guaranteed. Cloudflare, Inc. is a US company certified under the EU-US Data Privacy Framework; Standard Contractual Clauses also apply. | IP address, browser details, everything you send to the app while it passes through, proof files (letters, bills, emails, call summaries), emails companies send to your case address. |
| Hetzner | Hosts the call server that runs live phone calls, and our error reports. | Germany (EU). Hetzner Online GmbH is a German company. No transfers outside the EU. | Live call audio while a call runs, call transcripts while they are made, phone numbers, technical error reports with personal details removed. |
| Anthropic (Claude), via Amazon Web Services Bedrock | The language models that understand your case, make the plan, write emails and letters, read photos of letters and bills, summarise calls and pick out what to remember. | Processed in AWS data centres in the EU through Amazon Bedrock (Amazon Web Services EMEA SARL, Luxembourg). If Bedrock is down, we fall back to the Anthropic API directly, which may process in the United States; that transfer is covered by Standard Contractual Clauses. Your data is never used to train models. | What you tell Aydria about a case, documents you upload, call transcripts, the memories relevant to that case, names, addresses, amounts and reference numbers. Never the contents of your secrets vault. |
| Deepgram | Turns speech into text: what the company says on a call, what you say into the app, and WhatsApp voice notes. | United States. Deepgram, Inc. is a US company; the transfer is covered by Standard Contractual Clauses. Deepgram also offers processing in the EU; if it works for Dutch live calls, we will use it and update this line. | Voice audio from calls and voice input. Hold music is not sent, and neither is audio while you give a secret on a call. |
| Telnyx | The phone network: places calls to companies and connects you when Aydria adds you to a call. | Call audio is carried through Telnyx’s European network locations where available. Call records (numbers, times, durations) may be processed in the United States. Telnyx LLC is a US company; the transfer is covered by Standard Contractual Clauses. | The company numbers Aydria calls, your phone number when you join a call, call audio in transit, call times and durations. |
| Stripe | Payments, subscriptions, invoices and refunds. | Stripe Payments Europe Ltd (Ireland, EU). Stripe also processes data in the United States; Stripe, Inc. is certified under the EU-US Data Privacy Framework and Standard Contractual Clauses apply. For fraud prevention and legal duties, Stripe acts as an independent controller. | Name, email address, billing address, payment method (card or bank account, handled by Stripe; we never see full card numbers), invoices and payment history. |
| Resend | Sends our emails to you: sign-in links, case updates, receipts. | We send through Resend’s EU region. Resend, Inc. is a US company and may access data from the United States; that is covered by Standard Contractual Clauses. | Your email address, the content of the email, and whether it was delivered. |
| Meta (WhatsApp Business) | Lets you use Aydria from WhatsApp, if you connect it: send a voice note or a photo of a letter, approve with one tap. | Meta Platforms Ireland Ltd (EU). Messages may be processed in the United States and other countries where Meta operates. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses also apply. Only used if you connect WhatsApp. | Your WhatsApp number and name, the messages, voice notes and photos you send to Aydria, and Aydria’s replies. |
| PostHog (EU Cloud) | Product analytics: which features get used, so we know what to fix. You can turn it off in Settings. | Frankfurt, Germany (EU). PostHog, Inc. is a US company; any access from outside the EU is covered by Standard Contractual Clauses. | A random ID that is not your account ID, product events (for example "case approved", with the case type but never the case text) and, for the desktop app, your operating system. Sent from our server: no IP address, no location, no browser details. |
| Print-and-post provider (to be chosen)Not chosen yet | Prints and posts paper letters and registered letters (aangetekend) when a case needs them. | Not chosen yet. We will name the provider, where it processes data and any safeguard here before the first letter is sent. | Your name and address, the company’s address, the content of the letter, delivery and tracking status. |
| Voice model for live calls (to be chosen)Not chosen yet | Speaks and listens during the live part of a call, after the company picks up. | Not chosen yet; we are testing candidates. Some of them process in the United States; if we pick one of those, the transfer will be covered by Standard Contractual Clauses or the EU-US Data Privacy Framework. We will name the provider, its location and the safeguard here before it handles a real call. | Live call audio and text after the company picks up (not hold time, not the moment you give a secret), and a short brief about the case with your name. |
| Embeddings provider (to be chosen)Not chosen yet | Turns memories into numbers so Aydria can find the right ones for a case. | Not chosen yet. We are looking for a multilingual model hosted in the EU. We will name it here before it processes real data. | The text of your memories (for example "Internet: Ziggo since 2019") and anonymous company playbook facts. Never secrets. |
What Aydria remembers
Aydria remembers things so you don’t have to repeat yourself. Your memories are private to you, stored in the EU, never sold, never shared, and never used to train AI. Secrets like passwords are never in memory.
- What it remembers
- Facts you’d otherwise repeat: your providers and contract dates, your address for letters, how you like things done. Each memory is one short sentence you can read.
- Where it comes from
- What you tell it, your cases, and documents or connections you add. When it picks up something important from a document, like a contract end date, it asks you first: “Did Aydria get this right?”
- What it’s for
- Better plans. When Aydria uses a memory in a case, the plan shows it, so you can always see why it knows.
- What it never keeps
- Secrets, which live only in your vault. Health details beyond what one case strictly needs. Anything you told it not to remember.
- How you control it
- Every memory is in Settings, grouped by subject. Edit it, pin it, tell Aydria not to use it, or delete it. Say “Forget that…” at any time. Turn memory off, or delete all of it at once.
- Never used to train AI
- Not by us, and not by the providers that run the language models for us. That’s in our contracts with them.
- Private within a family
- On a Family plan, each person’s memory is private to them. The account owner can’t see it.
- Company playbooks
- Aydria also learns how companies work: which menu option reaches billing, when the queue is shortest. Those notes are shared between cases and contain no personal data.
Calls
- It introduces itself
- Aydria opens every call by saying it’s an AI assistant calling on your behalf. You can’t switch that off: EU law requires it, and we’d do it anyway.
- Honest when asked. Always.
- If anyone asks whether they’re talking to an AI, it says yes, at any point in the call. This is built into the call system itself, not left to a prompt.
- Recordings off by default
- Audio is only recorded if you turn it on. Then Aydria says so at the start of the call and stops if the other side objects. Recordings are deleted after 30 days.
- Transcripts, without secrets
- The written transcript is kept as proof for 12 months after the case ends, with every secret left out. You can delete it sooner.
- Verified numbers only
- Aydria only calls verified business numbers. Never private people, never premium-rate lines.
Your controls
- Download everything
- One ZIP with your profile, memories, cases, timelines, proof files, credit history and invoices. Settings, then Privacy and data.
- Delete your account
- You’re signed out everywhere at once. Your data is deleted within 30 days, and backups roll off within 35.
- Wipe the vault
- After you delete your account, each device wipes its vault the next time it opens.
- Ask us anything
- Questions about your data, or a request under the GDPR: privacy@aydria.com
Responsible disclosure
Found a security issue? Tell us. We’ll confirm we got it, keep you posted while we fix it, and thank you by name here if you’d like.
Report it to security@aydria.com
Plain email is fine. If your report needs an encrypted channel, say so in a first short email and we'll set one up with you./.well-known/security.txt
- In scope
- aydria.com, app.aydria.com, the desktop apps for Mac, Windows and Linux, the APIs they use, and the call and WhatsApp flows.
- Out of scope
- Denial of service, spam, social engineering of our team or of the companies Aydria calls, and scanner output without a working proof.
- Please
- Only test against your own account. Don’t access, change or delete other people’s data. Give us reasonable time to fix it before you publish.
Hall of fame
No reports yet.