Last updated: April 20, 2026
Ashley is a desktop AI companion built with privacy as a design principle. This page explains what data is collected, where it lives, who we share it with, and what your rights are under the EU General Data Protection Regulation (GDPR). It applies to the Ashley desktop application and the marketing website you're reading now.
Ashley is a solo indie project operated from Belgium. You can contact us about anything in this policy at ashleyia2c@gmail.com. For questions related to your purchase, our payment processor (Lemon Squeezy) is also available at their own support channels.
Ashley stores the following on your own computer, in %APPDATA%\Ashley\data\ on Windows:
Your xAI API key is stored encrypted using Windows DPAPI in %APPDATA%\Ashley\key.bin, tied to your Windows user account — it cannot be read from another account or another computer.
Ashley does not upload any of this data to our servers. We never receive your conversations, memories, preferences, keys, or license information. These files stay on your device. Deleting the %APPDATA%\Ashley\ folder erases every trace of your Ashley-side data.
When you send a message to Ashley, the conversation context is sent directly from your computer to xAI's Grok API, using your own API key. xAI processes the message to generate Ashley's response. This data flow is governed by xAI's own privacy policy. We are not a party to that relationship and do not receive any of that content.
If you enable ElevenLabs premium voice and provide your own ElevenLabs API key, Ashley's text responses are sent directly from your computer to ElevenLabs' API for speech synthesis. This is governed by ElevenLabs' privacy policy. Optional feature; off by default.
When you purchase Ashley, Lemon Squeezy processes the payment as the Merchant of Record. They collect your email, billing address, and payment details per their privacy policy. We receive from them only the information needed to deliver your license key: your email and order metadata. We use that email solely to send you your license key and to respond to direct messages.
Ashley's built-in auto-updater contacts GitHub's public Releases API to check for new versions. No authentication is sent. GitHub logs the request per their privacy statement.
This landing page does not use analytics, tracking pixels, or third-party scripts. No cookies are set. If that changes, this section will be updated.
Ashley includes a system-control feature ("Actions" toggle) that can open applications, close browser tabs, control system volume, take screenshots, and type text on your behalf. Every such action is triggered by your explicit conversational instruction. Nothing is executed without an instruction from you. Screenshots, when taken, are sent to the xAI Grok API for analysis along with your message — they are not stored anywhere except in the temporary conversation context.
When you click the microphone button, your voice is recorded locally and transcribed using Whisper (OpenAI), which runs entirely on your computer — no audio leaves your device. The resulting text is then sent to the Grok API as a normal message.
If you are in the EU, you have the right to access, correct, delete, export, or restrict the use of personal data we hold about you. Because Ashley is privacy-minimizing by design, the only data we hold about you on our side is your email address (from the Lemon Squeezy order) and any support correspondence you've had with us. To exercise any right, email ashleyia2c@gmail.com and we will respond within 30 days.
For data held by third parties (xAI, Lemon Squeezy, ElevenLabs), please contact them directly using the links above.
Order email: retained for as long as required by Belgian accounting law (currently 7 years), then deleted. Support correspondence: retained for 2 years after the last message unless you request earlier deletion.
Data processed by xAI, Lemon Squeezy, ElevenLabs, and GitHub may be transferred to the United States. These providers contractually maintain EU-compatible safeguards (Standard Contractual Clauses or equivalent). By using Ashley and those services through your own credentials, you authorize this transfer.
Ashley is not intended for users under 16. We do not knowingly collect data from anyone under 16.
If this policy changes meaningfully, we will update the "Last updated" date at the top. Material changes will be announced in the application and on the website.
← Back to Ashley