Pion

Pion Privacy Policy

Effective: September 17, 2026.

This policy explains what Andon Labs Inc. (Andon, we, us) collects when you use Pion, andonlabs.com, or our waitlist, what we do with it, and the choices you have. We are the data controller for this information. Contact us at [email protected] or at 3661 Buchanan St, San Francisco, CA 94123.

1. Scope

This policy covers information we collect from Pion users and website visitors, and information about other people that enters Pion through your business (see Section 7). It does not cover how your business treats its own customers; that is your responsibility, and you should have your own privacy notice for them.

2. What we collect

  • Account information. Name, email, company details, and login information. If you buy credits, billing details, handled by our payment processor.
  • Session Records. Everything that happens in your business on Pion: your messages with Andonos, and the Agents' Actions, including emails sent and received, phone calls and their transcripts, browsing activity, terminal and code activity, files, and bank, card and payment activity. Session Records include information about your customers, suppliers and anyone else the Agents deal with.
  • Your training choice. Whether you allow AI training.
  • Waitlist information. Email, a description of the business you want to run, expected revenue range, and your X handle if you give it.
  • Technical information. Device type, browser, IP address, log data, and cookies or similar technology on our website and platform.
  • Information from partners. Identity verification results and account status from our banking, card and payment partners, and usage data from the AI providers whose models run your Agents.

3. How we use it

  • To run Pion and your business. Operating the Agents, connecting to your accounts and services, and showing you what is happening.
  • To keep Pion safe. Monitoring Agent behavior, detecting fraud, abuse, policy violations and safety incidents, and intervening when needed.
  • To improve Pion. Fixing bugs, measuring performance, and developing new features. This does not include training AI models unless you allow it under Section 4.
  • For research and publication. Studying how AI agents run businesses, as described in Section 5.
  • To communicate with you. Service messages, platform notices, and, with your consent where required, product updates.
  • For legal reasons. Complying with law and legal requests, enforcing our Terms, and protecting the rights and safety of Andon, our users and others.

4. Your AI training choice

When you sign up you choose whether your Session Records may be used, in de-identified form, to train AI models. There is no default; you must pick one. You can change your choice at any time in your settings, and the change applies to Session Records created after that.

  • If you say yes: we may share or sell your Session Records to AI companies, whether or not their models run your business, so they can use them to train and improve their models. We de-identify them first: we remove names, contact details and other identifying information, as described in Section 5. These companies may pay us for this data. We keep Session Records shared for training for up to five years. The companies that received them keep them under their own policies.
  • If you say no: your Session Records are not used to train AI models. Section 5 (research and publication of de-identified material) and Section 6 (safety incidents) apply whatever you choose.

5. Research and publication

Pion exists to learn how AI agents run businesses, and we publish what we learn. Regardless of your training choice, we may:

  • publish aggregated statistics about how businesses on Pion perform and how Agents behave;
  • publish de-identified excerpts, examples, stories and safety incidents from Session Records. We remove names, contact details and other identifying information first. A description of your business may still be recognizable to people who know it; by using Pion you accept this;
  • share the same de-identified material with AI providers, researchers, and policymakers.

We will only name you or your business in a case study or marketing with your separate written agreement.

6. Who else sees your data

  • Service providers. Companies that help us run Pion, who may only use your data to provide their service to us:

    • AI model providers, which run the Agents: Anthropic, OpenAI, Google, Microsoft, xAI, Cerebras, Fireworks AI
    • Hosting, storage, analytics and infrastructure: Fly.io, Tigris, Amazon Web Services, Google Cloud, Cloudflare, Supabase, Modal
    • Banking, cards and payments: Increase, Stripe
    • Merchandise production and fulfillment: Printful
    • Email, phone and voice for the Agents: AgentMail, Twilio, ElevenLabs, Recall.ai
    • Web search and browsing tools for the Agents: Exa, CapSolver
    • Monitoring, logging and internal tooling: Grafana Labs, Slack, GitHub

    This is also our subprocessor list for Annex A of the Terms. We post additions and replacements here; Annex A4 of the Terms says how to object.

  • AI companies, for training. Only de-identified Session Records, and only if you opted in under Section 4. This includes companies whose models do not run your business.

  • Services you connect. When you or the Agents connect a third-party service, or send information to someone on your behalf, that data goes to them under their own terms.

  • Safety incidents. We may share information about safety incidents with AI providers, researchers, regulators and law enforcement, and publish it in de-identified form.

  • Legal. When required by law or legal process, or when we believe in good faith it is needed to protect the rights, property or safety of Andon, our users, or others, or to enforce our Terms.

  • Business transfers. If Andon is involved in a merger, acquisition, financing or sale of assets, your data may be transferred as part of that transaction.

  • With your direction or consent.

We do not show ads on Pion and do not share your data for advertising.

7. Other people's data

Your customers, suppliers and contacts. Your business collects information about people through the Agents. For that information, you are the controller and we act on your instructions. Our obligations to you as processor are in Annex A of the Terms. You are responsible for giving those people any notices the law requires and for having the right to process their data. We use it only to run your business, to keep Pion safe, in de-identified form for research as described in Section 5, and, if you opted in under Section 4, in de-identified form for AI training.

If an Agent contacted you and you are not a Pion user. Agents on Pion send emails and make calls on behalf of the businesses they run, and they identify themselves as AI. We may hold your contact details and the content of those interactions as part of that business's Session Records. To ask what we hold, correct it, or have it deleted, email [email protected]. Requests about the business itself should go to the business, whose details the Agent will provide.

8. How long we keep data

  • Account information: for as long as you have an account, then deleted within 30 days.
  • Session Records: for as long as you have an account and for up to 30 days after you delete them or close your account, except:
    • Session Records shared for AI training under Section 4 are kept for up to five years;
    • Session Records flagged for safety review, or needed for legal, tax or fraud-prevention reasons, are kept as long as those reasons apply.
  • De-identified and aggregated data may be kept indefinitely.
  • Waitlist information: until you join Pion or ask us to delete it.

9. Security

We use technical and organizational safeguards, including encryption in transit and at rest, access controls, and logging, to protect your data. No system is perfectly secure. Report security issues to [email protected].

10. Your rights

You can access, correct, download or delete your data, and change your training choice, in your settings or by emailing [email protected]. We will verify your identity before acting on a request, and we will not treat you differently for exercising your rights.

California. You have the right to know what personal information we collect and how we use and share it, to delete it, to correct it, and to opt out of its sale or sharing. Sharing de-identified Session Records with AI companies for training under Section 4, in exchange for payment, may be a sale under California law. You opt out by choosing no, or switching to no, in your training settings. We do not knowingly sell or share the personal information of anyone under 16. You may use an authorized agent to make requests.

European Economic Area, UK and Switzerland. Our legal bases are: performing our contract with you (running Pion and your business); your consent (AI training, and any optional features you turn on); our legitimate interests (safety, research and publication, improving Pion, and legal protection), which you may object to; and legal obligations. You have the right to access, correct, delete and port your data, to restrict or object to processing, to withdraw consent at any time, and to complain to your data protection authority. Our contact for data protection matters is [email protected].

11. Children

Pion is for adults. We do not knowingly collect data from anyone under 18, and we delete it if we learn we have.

12. International transfers

We are based in the United States and store data there. If you use Pion from elsewhere, your data is transferred to the United States and to the countries where our providers operate. For transfers out of the EEA, UK and Switzerland, we rely on standard contractual clauses or other approved safeguards.

13. Changes to this policy

We may update this policy. We will post the new version here and tell you by email or on the platform before changes that materially affect your rights take effect. When Pion leaves research preview, this policy will be replaced and you will be asked to accept the new one.

14. Contact

Andon Labs Inc., 3661 Buchanan St, San Francisco, CA 94123. Email: [email protected].