Privacy Policy

Last updated: August 14, 2026

1. Who we are

The controller of your personal data is MITON AI Spice s.r.o., registered at Křižíkova 148/34, Karlín, 186 00 Praha 8, Czech Republic, company ID (IČO) 295 29 786 ("anex.sh", "we", "us"). For any privacy matter, contact us at support@anex.sh.

2. Data we process

• Account data: your name, email address, organization membership, and role, collected when you register or are invited.
• Billing data: your organization's billing email and payment records. Card details are collected and stored by Stripe, not by us.
• Usage data: the jobs your organization submits, their credit estimates, statuses, and usage figures, together with technical logs such as IP addresses and API request records.
• Job content: the datasets you upload and the results we generate. You should not include personal data in datasets unless you have a lawful basis to process it.
• Measurement data: the page views and console milestones described in section 7.

3. Why we process it

We process this data to provide the Service under our Terms of Service: operating your account, running your jobs, billing, and support (performance of a contract); securing and improving the Service and preventing abuse (legitimate interest); and keeping accounting records (legal obligation). We do not sell personal data and we do not use your datasets or results to train models.

4. Sharing your data

We share data with the processors needed to run the Service: WorkOS (authentication and invitations), Stripe (payment processing), Umami (visitor and conversion statistics), Amazon Web Services (hosting and storage), and the GPU compute providers on which your jobs run. Each processes data on our instructions. Where a provider processes data outside the EEA, transfers are protected by safeguards such as the EU standard contractual clauses, except where we have agreed EEA-only processing with your organization under section 5. We may also disclose data where required by law or to protect our legal rights, and data may be transferred as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to it.

5. Where we process your data

We operate the Service from the Czech Republic. Account, billing, and usage data are hosted with Amazon Web Services, and job content is processed on GPU capacity obtained from our compute providers. Some of this infrastructure is located outside the EEA, and transfers are protected by the safeguards described in section 4.

On request we can arrange for job content to remain inside the EEA at every stage, including pre-processing, inference, and storage of the job input and output. To request it, contact support@anex.sh before you upload data.

6. Communications

We send service and billing messages, such as invoices and notices of changes, as part of operating the Service. We send marketing messages only where permitted, and every marketing message includes a way to opt out.

7. Cookies and visitor measurement

We use a single essential session cookie to keep you signed in. We do not use advertising or analytics cookies.

To see how many people visit our public pages and which pages they read, we use a privacy-friendly analytics service. It sets no cookies, stores nothing on your device, and does not track you across websites. For each visit it records the page address and title, the referring site, your browser language and screen size, and, derived from your IP address, an approximate country and a short-lived visitor identifier. Your IP address itself is not stored and no profile of you is built. Because nothing is placed on your device, no consent is required; we rely on our legitimate interest in understanding how the Service is found and used.

The same service counts a small number of milestones in the signed-in console: creating an account, signing in, starting a credit purchase and whether it completed or was abandoned, and submitting a job, approving it, and downloading its result. It records that the step happened, and for a credit purchase the amount of credit bought, and nothing else. Your identity, your organization, and your files are not sent to it.

8. Retention

Account and organization data are kept while your account exists. Uploaded datasets are deleted within 7 days of upload. Job results are kept for 30 days after a job completes, after which the result files are deleted and only the job record (its status, cost and dates) is kept. Billing records are kept for the period required by accounting law. We delete or anonymize data when it is no longer needed.

When you ask to delete your account, it is deactivated at once and permanently deleted after 14 days. During those 14 days you can restore it by signing in again. The same period applies when an organization is deleted.

After an account is deleted, we keep a one way hashed form of the email address for 3 months. We use it only to prevent repeated claims of a one time signup bonus. The legal basis is our legitimate interest in preventing abuse. It is not used to stop you from registering again.

9. Security

Data is encrypted in transit, access is restricted to authorized personnel, and job data is scoped to your organization. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your data.

10. Your rights

Under the GDPR you may request access to, correction of, deletion of, or a portable copy of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact support@anex.sh. You may also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ) or your local supervisory authority.

11. Changes to this policy

We may update this policy. We will give advance notice of material changes to your organization's billing email, and the date above always reflects the current version.