Last Updated: May 4, 2026
This Privacy Policy describes how LegionAir Applications (“we”, “us”, or “our”) collects, uses, stores, and discloses information in connection with PALION CORE and the PALION Nexus premium tier (collectively, the “Service”). By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.
PALION is designed around a local-first architecture. Core memories, preferences, device registrations, and the majority of your working data are stored on your own machine or your chosen infrastructure. Some features operate in a hosted or cloud-assisted mode when you choose to sign in or connect to remote services. You retain ownership of the data you store locally.
Depending on how you use PALION, we may process the following categories of information:
The Service uses browser-based local storage, session storage, and similar technologies to maintain authentication state, store user preferences, and support offline-capable features. We do not use third-party advertising cookies. If we use any analytics cookies or scripts, they will be disclosed here and, where required by applicable law, offered with a consent mechanism.
You may clear local storage and cookies through your browser settings at any time; doing so will sign you out and reset any locally stored preferences.
For devices that support location services — including phones, tablets, and any hardware with GPS or network-based location capability — location tracking is enabled by default when you connect the device to PALION.
PALION includes an optional Ambient Mode that, when enabled with your explicit consent, allows PALION to listen passively for approved trigger phrases and capture lightweight context signals from your environment. Ambient Mode is off by default and requires your explicit activation.
We use information we process for the following purposes:
We do not sell your personal data to third parties. We do not use your data to serve you advertising from third-party ad networks.
Authorised administrators may access a restricted support view limited to: your username (email), your PALION nickname, account creation date, plan tier, and subscription status. Passwords, password hashes, payment card details, payer email addresses, and raw payment payloads are never accessible through this view. Administrators cannot view your personal content, memories, or conversation history. All admin access to user data is logged and auditable.
Registration analytics are based on new PALION account creation only. Linking an additional OAuth provider to an existing account is not counted as a new registration.
Where features require it, we rely on carefully selected third-party services including OAuth identity providers (e.g. Google, Microsoft, GitHub), AI model providers, cloud infrastructure providers, and payment processors (e.g. PayPal). Each processor receives only the minimum data necessary to deliver the requested function and is subject to its own privacy policy and applicable data protection obligations. We do not transfer your personal data to third-party processors for their own independent use.
PALION may process data on infrastructure hosted in multiple countries. Where personal data is transferred outside your country of residence, we take steps to ensure an adequate level of protection is in place, including through standard contractual clauses or equivalent safeguards recognised under applicable law.
Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data:
California residents (CCPA / CPRA): you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of sale (we do not sell personal information), and the right not to be discriminated against for exercising these rights. To submit a verifiable request, contact us at the address below.
To exercise any right, contact us at support@palioncore.com. We will respond within the timeframe required by applicable law (typically 30 days, extendable once where permitted).
The Service is not directed to children under the age of 13 (or under 16 in the European Economic Area and United Kingdom). We do not knowingly collect personal information from children below these ages. If you believe a child has provided personal information to us without appropriate consent, contact us immediately and we will take steps to delete that information.
We retain personal data only for as long as necessary to provide the Service, fulfil the purposes described in this Policy, comply with legal obligations, or resolve disputes. You may request deletion of your account and associated data by contacting support. Upon a verified deletion request, we will delete or anonymise your personal data within a reasonable period, except where retention is required by applicable law.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted communications (HTTPS/TLS), hashed credential storage, access controls, and audit logging of privileged actions. No system is entirely secure; in the event of a data breach that materially affects your rights, we will notify you and relevant authorities as required by applicable law.
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page and, where required, provide direct notice. Continued use of the Service after any change constitutes acceptance of the updated Policy.
For privacy questions, data subject requests, or account deletion, contact: support@palioncore.com. Please include the email address associated with your account and, where applicable, the OAuth provider used to sign in.