AICL Co-pilot
Privacy notice
Last updated 16 October 2026
This notice explains what personal data AICL Co-pilot (this website, aicl-copilot.com, and the editor, editor.aicl-copilot.com) processes, why, for how long, and your rights under the EU General Data Protection Regulation (GDPR).
Who is responsible
Matthew Bio, Carinthia, Austria. Email: [email protected]. See also the imprint.
This website
The pages on aicl-copilot.com are static files served by Cloudflare. They set no cookies, use no analytics or tracking, and load no fonts or scripts from third parties. Cloudflare processes your IP address and technical request data to deliver the pages and protect them from attacks (legitimate interest, Art. 6(1)(f) GDPR).
The editor
The editor runs on a server we operate. Visitors reach it through Cloudflare; the server itself does not see or store visitors' IP addresses.
| What | Why | Kept |
|---|---|---|
| Account: user name, email address, password (stored only as a salted hash), role | To give you an account you were invited to (contract, Art. 6(1)(b)) | Until your account is removed |
| A sign-in cookie (strictly necessary, no tracking) | To keep you signed in | 12 hours; 4 hours for guests |
| Guest sessions: a random guest name, the designs you make | To let you try the editor without an account | Deleted 4 hours after you leave |
| Your designs: saved sessions, uploaded files (netlists, GDS, LEF), your design library, annotations | To keep your work and reopen it from any computer (contract) | Saved sessions 90 days after last use or until you end them; uploads, library and annotations until you delete them or your account is removed |
| Usage records: when sessions start and end, the user name or guest name, how long steps took, how many sessions were open | To run the service and size it (legitimate interest) | 90 days |
| Backups of the above | To restore data after a failure (legitimate interest) | 14 days |
| Technical data for the bot check on the guest button (Cloudflare Turnstile) | To keep automated programs from starting guest sessions (legitimate interest) | Processed by Cloudflare for the check only |
Your designs are private to you: no other user can see, open or join them. The operator can technically reach stored data for running and backing up the service, and does not look at designs except to fix a problem you report or to meet a legal obligation.
Emails
Invitations and password resets are sent through Resend (Resend, Inc., USA) from [email protected]. Mail you send to [email protected] is forwarded by Cloudflare Email Routing to the operator's mailbox (Google Gmail). We use your email address only for your account and to answer you.
Service providers
We use these processors, each under a data processing agreement:
- Cloudflare, Inc. (USA): website hosting, the connection to the editor, the bot check, email forwarding.
- Resend, Inc. (USA): sending invitation and password emails.
- Google (Gmail): the operator's mailbox for messages to contact@.
Where data goes to the USA, the transfer relies on the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You can ask for access to your data, its correction or deletion, restriction of processing, a copy in a portable format, and you can object to processing based on legitimate interest. Write to [email protected]. You also have the right to lodge a complaint with a supervisory authority; in Austria this is the Datenschutzbehörde (dsb.gv.at).
Deleting your account removes your account data and, on request, your saved sessions, uploads and library; backups roll over within 14 days.
Changes
We will update this notice when the service changes; the date above shows the current version.