This policy explains what data Iconia processes, why, and the controls you have. Iconia is infrastructure that sits between your application and an AI model provider. We are designed to hold as little as possible and to keep every customer's data isolated.
Your email, a hashed password, plan, and API key metadata (a hashed key and a display prefix — never the full key).
The policies, knowledge, and rules your agents write through the gateway. This is stored in a per-tenant, isolated store and used only to serve your requests.
Timestamps, latency, tokens saved, items injected, and cache state — used for your dashboard, billing, and abuse prevention. We do not retain full request/response bodies beyond what is required to serve the request.
If response caching is on for your account (you can switch it off in your dashboard), an answer is kept for at most one hour so an identical repeat request is served without a new model call, then deleted. Expired entries are never included in backups.
To choose which earlier turns of a conversation your model needs, Iconia keeps word counts for that conversation in memory while it is active: counts only, never text, never written to disk, and reachable only by resending the identical conversation. The least recently used conversations are discarded first when that memory is needed, and all of it on every restart.
Model calls always run on your own provider account, so your relationship with the model provider stays yours. Iconia validates your tenant, injects memory, screens the request, and forwards using your credentials. A provider key you save in your dashboard is encrypted at rest, never shown back, and not exposed to other tenants.
Memory persists until you delete it. Deleting your account permanently removes your account, your Iconia keys and saved provider key, plan, usage records, cached responses, settings, and your entire memory store. The tokens you saved stay in the public savings total with no link to you. Security records of flagged requests (such as time, IP address and request path) are kept for abuse prevention. Billing and affiliate payment records are kept as required for accounting. Backups are retained on a rolling window (default 72 hours) and age out automatically.
Essential (always on): your browser's local storage keeps you signed in to the dashboard and holds your settings. We use no third-party analytics on our pages.
Referral attribution: if you arrive through a partner's link, a first-party cookie
(iconia_ref, and iconia_clickid if supplied) remembers the referral for up to
90 days so the partner can be credited when you sign up.
Conversion pixels: on the sign-up and dashboard pages only, when an advertising pixel has been configured by us or by the partner who referred you, that provider (Meta, Google or TikTok) may receive a sign-up or purchase event and set its own cookies under its own privacy policy. No memory content, request content or keys are ever sent to them. You can block these cookies in your browser at any time without affecting the service.
Data is tenant-isolated, integrity-checked, and backed up hourly to isolated storage with a tested restore path. See the Security page for detail.
Questions about privacy or a data request: support@iconia.tech or contact us. Iconia is operated by Jaxson Baylor as a sole proprietorship.