Aecos is a practice management platform for architecture and design firms, owned and operated by Eufinger Studio LLC ("Aecos", "we", "us", or "our"). This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and your rights over your information.
By using Aecos, you agree to the collection and use of information described in this policy. If you do not agree, please discontinue use of the service.
When you create an Aecos account, we collect:
When you connect third-party integrations or enter data manually, we store:
This data is your firm's data. We store it solely to power your dashboard and do not use it for any other purpose.
When you connect Plaid, Stripe, or other services, we store OAuth access and refresh tokens (or in Plaid's case, item access tokens) on your behalf. These tokens are encrypted at rest and used exclusively to sync your data into Aecos. We never use them to access your accounts for any other purpose.
We collect information about how you interact with Aecos to help us improve the product. This falls into three categories, which we treat differently:
| Purpose | Data used |
|---|---|
| Operate and display your dashboard | All data you provide |
| Sync data from connected integrations | OAuth tokens, account/transaction data |
| Send account and security notifications | Email address |
| Respond to support requests | Email, account details |
| Improve the product | Website analytics (pseudonymous) |
| Diagnose and fix faults | Error diagnostics, linked to your account and firm when you are signed in |
We do not use your data to train AI or machine learning models. We do not sell your data. We do not share your financial data with any third party except the integrations you explicitly authorize.
Aecos integrates with the following services on your behalf:
We also rely on infrastructure providers to run the service, who necessarily store or transmit your data on our behalf: Supabase (database, authentication and file storage), Railway (application hosting), Cloudflare (network and DNS), and Google Workspace (outbound email). These are processors acting on our instructions, not independent recipients of your data.
We only request the minimum OAuth scopes required to display your data. You can revoke any integration at any time from Aecos Settings or directly from the third-party service. Revocation immediately stops further data sync.
While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
We retain your data for as long as your account is active.
If you are removed from a firm. Your access ends immediately and your sessions are revoked. Your user account continues to exist, so you can be re-invited or join another firm. Work you authored — timesheets, invoices, drawings, comments — remains on that firm's record, because it is the firm's business record rather than personal data held about you.
If you delete your account. We anonymize your personal details rather than erasing every trace:
What we keep, and why. We retain invoices, payment records and accounting entries for as long as tax and company law requires, and security audit logs for as long as we need them to investigate incidents or to establish, exercise or defend legal claims. These are narrow, record-level exceptions — they do not include a usable account, and we will tell you which records were retained.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
Aecos uses only essential session cookies required for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
Beyond the session cookie, Aecos stores data in your browser's local and session storage. None of it is sent to any third party, and none of it is used for tracking or advertising. You can clear all of it at any time through your browser settings. Signing out of every account erases your firm's cached data and your timesheet settings, but deliberately keeps your per-account settings, the device preferences and the dismissed-notice flags listed below. Keys ending in an underscore or a hyphen are prefixes — the rest of the key identifies the firm, project, or review session the entry belongs to.
Signing in and switching accounts. Kept when you switch firms or sign out of one account, because they are what let you move between accounts.
sb-wgpeqqwceunapzgjvtpq-auth-token, aecos_accounts, aecos_accounts_active, aecos_last_account, aecos_recent_accounts, aecos_switching_to, aecos_passkey_device, aecos_passkey_modal_quiet, aecos_passkey_offerYour firm's cached workspace data. A local cache of workspace data so the app loads instantly, plus work that has not reached our servers yet — in-progress form drafts, writes queued while you were offline. All of these are erased when you switch firms or sign out, so one firm's data is never visible from another account on the same browser.
aecos-bus-state, aecos-bus-firm, aecos-bus-dirty, aecos-bus-role, aecos-general-msgs, aecos-gmsgs-, aecos-gmsgs-default-, sr_custom_stamps, sr_custom_stamps_, aecos-gprojects, aecos-gprojects-, aecos-gfolders, aecos-gfolders-, aecos-pmsgs-, aecos-pchats-, aecos-intake-docs, aecos_morning_brief, aecos_morning_brief_, aecos_new_office_draft, aecos_onboarding_draft, aecos_drafts, aecos_ce_draft_, aecos_offline_queue, aecos_entitlement_, aecos_dismissed_announcements, aecos_ai_session_, aecos_chart_view_, aecos_txn_review_advisory_, aecos_spec_colw_, aecos_spec_views_, aecos.tweaks, aecos_sr_layers, aecos_sr_shortcut_visits, aecos_sr_tabs_, aecos_sr_chat_, aecos_sr_cc_jur_, aecos_sr_knowledge_, sr-summary-, aecos_ts_day_orders_, aecos_ts_daybrief_, aecos_ce_rail_, aecos_ce_disclosure_, aecos-dash-order:, aecos_sr_rail_order_, aecos_sr_strip_order_, aecos_sr_scales_, aecos_doc_import_note_, aecos_chatkb_, aecos-composer-drafts-, aecos_pending_invite, aecos-chat-tombstones-, aecos-doc-revise-jobs:, aecos-staffing-v1-, aecos.pchatfolders., aecos.pbdrafts., aecos-chat-autofile-, aecos-crm-open-doc, aecos-records-file-handoff, aecos.pf.ws.open, aecos:sr:origin, aecos:sr:focusFile, aecos_call_autojoin, aecos.pf.view., aecos_call_ringer_, aecos:extEventsCtx:v1:, aecos_plaid_oauth_Timesheet settings. Your personal timesheet setup for this firm. Erased when you switch firms or sign out.
aecos_ts_cal_sync, aecos_ts_carry_over, aecos_ts_categories, aecos_ts_compact, aecos_ts_dismissed_covers, aecos_ts_event_status, aecos_ts_ignored_events, aecos_ts_plan_day, aecos_ts_plan_style_prefs, aecos_ts_sync_states, aecos_ts_templates, aecos_ts_working_hours, aecos_ts_yesterday_plan, aecos_ts_cal_layout_, aecos_ts_cal_tzs_, aecos_ts_owncal_visible_, aecos_ts_teammate_cals_, aecos_ts_approvals_, aecos_ts_cal_sync_Your settings and notes for one account on this device. Each key carries the firm and the person it belongs to, so another account on the same browser never reads it. They are kept when you sign out because they are your own choices (a panel width, whether a chat is off the record, which tour you have seen) or because this device holds the only copy (Project Finder research conversations).
aecos.ccFocusDocked.v1:, aecos.lf.shares., aecos-invpaid-outbox:, aecos-paid-shown:, aecos.chatPaneW.v1:, aecos.pf.auto., aecos.pf.chat., aecos.pf.chats., aecos.pf.seen., aecos:meetingContactSweep:, aecos:nav-learned:, aecos:liveMeetingJoined:, aecos:liveMeetingDismissed:, aecos-slc-seen:, aecos-cvc-seen:, aecos_ai_effort:, aecos_ai_memory_offrecord_, aecos_getstarted_dismissed_, aecos_tour_seen_, aecos_ui_zoom:, aecos_meetchimes_, aecos_meetjoin_, aecos_meetstrip_, aecos_push_ (aecos_push_on:, aecos_push_synced:), aecos_resume_, aecos_sr_estsplit_open_, aecos_sr_estsplit_w_Display preferences on this device. How you like the interface arranged. These contain no firm or client data and are deliberately kept across accounts, because they describe this browser rather than any one firm.
aecos-landing-theme, deck-stage.railVisible, aecos_dev_chat_open, aecos_mobile_preview, aecos_di_folderview, aecos_full_history, aecos_user_prefs, aecos_meeting_mirror, aecos_meeting_selfcorner, aecos_meeting_selfhidden, aecos_meeting_view, aecos_sr_chatw, sr_workspace, sr_active_profile, sr_tool_profiles, sr_last_tool, sr_pref_, sr-files-view, sr-files-folders-open, srDashView, sr-ai-tips-seen, aecosReloadFor, aecos.shell.v, aecos_ctx_debug, aecos.pdSidePanelW, aecos.pf.basemap, aecos.pf.chatOpen, aecos.pf.landing, aecos.pf.ws.chat, aecos.pf.ws.chatW, aecos.pf.ws.mapH, aecos:pdoc:srView, sr-files-sort, sr-lp-files-sort, aecos_nav_debug, aecos:pdoc:filesView, aecos.slides.presenterNotesSize, aecos.meet.floatView.v1, aecos.meet.sharePrimer.v1, aecos_saved_thumb_size_v1:Notices you have dismissed, and one-time flags. Remembers that you have already seen or dismissed something, so we do not show it again. The last three are anonymous identifiers for this browser, used only to count visits to our public site; they contain no firm or client data, are never linked to your account, and are deliberately kept across accounts because they describe this browser rather than any one firm. aecos-demo:t marks a demo session. aecos_call_device is a random tag that lets your own open tabs tell each other apart during a call; it names no firm or person. aecos.lf.device is a random tag for this copy of the desktop app, so a linked folder you share from this computer is recognised as yours; it names no firm or person.
aecos_2fa_nudge_dismissed_, aecos_email_nudge_dismissed_, aecos_team_skipped_, aecos_trial_banner_dismissed, aecos_trial_notice_dismissed_, aecos_plan_banner_dismissed, aecos_plan_banner_first_seen, aecos_status_dismissed, aecos_welcome_back_dismissed, aecos_seen_landing, aecos_scap_perm_setup_seen, aecos_desktop_setup_dismissed, aecos_pending_billing, aecos_pending_plan, aecos_pending_plan_at, aecos_error_capture_disabled, aecos_call_device, aecos.lf.device, aecos_visitor_id, aecos_session_id, aecos_visit_tracked, aecos-demo:tWe keep this list current with an automated check that compares the keys our application actually writes against the keys named here, and that also verifies each one is either namespaced to a single firm or erased when you switch accounts.
The Save to Aecos extension for Chrome and Microsoft Edge sends data to Aecos (aecos.studio) only when you save an image. When you do, it sends the image's address, the address and title of the page it was on, the project and note you chose, and, only if Aecos can't download the image itself, a cropped screenshot of that image as it appears on your screen. Aecos stores the image in your firm's private library, where members of your firm can see it; images tagged to a project are visible to people who can see that project.
The extension does not read, collect or transmit your browsing history, the contents of pages you visit, or anything else. It makes no network requests except to aecos.studio. The optional Save button that appears over images runs locally in the page and sends nothing until you click it.
The extension stores one connection key in your browser so it can save as you. You can disconnect it from the extension or from Aecos → Settings → Browser extension at any time; the key then stops working. Data the extension sends is not sold, not used for advertising or credit decisions, and not shared with third parties other than our hosting provider (Supabase), which stores it on our behalf.
To have a saved image removed, ask your firm's owner or use "Report" on it in the library, or email [email protected].
Aecos is a business tool intended for adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.
Questions, concerns, or data requests: