Privacy policy

1. Who processes your data

MB icecode, company code 306190890, Panevėžys, Lithuania, is the controller for personal data processed through auten.ai and for our relationship with customers.

For data on a customer’s Box, the customer is the controller and MB icecode acts as processor under a data processing agreement. Contact: [email protected].

2. What we process

Website forms: when you apply or book a demo, we process what you enter, such as your name, company, company code, email, phone and message.

Customers: contact and billing details, licence and Box status, network routing data and AI usage in percent of the monthly limit. We do not see the files, chats, passwords or processes on your Box.

Cookie consent: your choice, its date, a random ID, your browser’s user agent and a hashed IP address, as proof of consent.

3. Where it is processed

Your company’s working data stays on the Box in your office. There is no remote access to it for us or for partners.

Website, licence, billing and network routing data is processed on servers operated by MB icecode and by the sub-processors listed below.

4. AI processing

When the assistant works on a task, the request it needs for that task is sent through Auten servers to our AI providers. AI requests are not used for training.

AI requests go to Anthropic (United States), the maker of the Claude models. Transfers outside the EU use the safeguards the GDPR requires, such as standard contractual clauses. Anthropic is a sub-processor and is named in the data processing agreement. Your data is not used to train AI models.

5. Auten Connect app

Auten Connect puts your device on your company’s private Auten network. It is a split tunnel: only the company’s private range (10.77.x.0/24) goes through the Auten network; the rest of your internet traffic and DNS go directly and never reach us. Traffic through our network hub is encrypted with WireGuard and is not logged or inspected.

To run the service we keep: your email address, and your name if the sign-in service provides it; your sign-in account ID with Apple, Google or Microsoft, if you use one; a device record (device ID, device name, operating system, app version, date added); the device’s WireGuard public key and private network address. The device gets a random private hostname (for example d-1a2b3c4d.vpn.auten.ai), published in DNS so that other devices on your network can reach it.

We use this data only to sign you in, check that your company’s administrator invited you, connect the device to that network, and let the administrator see and remove devices. There is no advertising, tracking or analytics, and the app contains no third-party analytics or advertising SDKs. The data is not sold or used for anything else.

When a device is removed, by you or by the administrator, its record, network address and DNS record are deleted. When you are removed from the network, all your devices are removed with you.

6. Sub-processors

Stripe, for payments. Cloudflare, for website and network delivery, protection and DNS. Anthropic (US), for AI requests. Zoho Mail (EU), for transactional email such as sign-in codes. Apple, Google and Microsoft, only if you choose to sign in with them.

We will tell customers before adding or changing a sub-processor.

7. How long we keep it

Form submissions are stored by MB icecode and emailed to [email protected] and [email protected]. We keep them for up to 24 months, unless a contract follows; then we keep what the contract and the law require.

Proof of cookie consent is kept for 5 years. Billing records are kept as long as accounting law requires.

8. Your rights

Under the GDPR you can ask to access, correct or delete your data, restrict or object to processing, and receive your data in a portable form. Write to [email protected].

You can also complain to the State Data Protection Inspectorate of Lithuania (VDAI, vdai.lrv.lt).

9. Cookies

auten.ai uses cookies only with your consent, except the necessary ones. Details and settings are in the cookie policy.

10. Contact

MB icecode, company code 306190890, Panevėžys, Lithuania. Email: [email protected].