Last Updated: 3 July 2026
This Cookie Policy explains how AIONA Ltd (trading as AIONA) ("we", "our", "us") uses cookies and similar technologies (such as browser local storage and session storage) on this website and in the AIONA application, in line with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
The public marketing site is a static site. It sets no cookies and stores nothing on your device. Fonts are loaded from Google Fonts, which may log your IP address as part of serving the font files — see §3.
When you sign in to the application, we use browser local storage and session storage — cookie-equivalent technologies under PECR — for the following strictly-necessary items:
| Item | Purpose | Duration | Category |
|---|---|---|---|
aiona_token | Your session access token — keeps you signed in as you use the app. | Until sign-out or expiry | Strictly necessary |
aiona_refresh_token | Renews your session without forcing a fresh sign-in. | Until sign-out or revocation | Strictly necessary |
aiona_gov_device_id | A random device identifier that UK law (HMRC's fraud-prevention header requirements) obliges us to send to HMRC when you use Making Tax Digital features such as VAT submission. It is generated in your browser, is not used for advertising or cross-site tracking, and is shared only with HMRC. | Until cleared | Strictly necessary (legal requirement) |
aiona_cookie_consent | Records that you have seen and dismissed the storage notice, so we do not show it again. | Until cleared | Strictly necessary |
| Interface preferences | Remembers non-tracking choices you make in the interface (e.g. dismissed banners, tour progress, layout choices, saved list filters, and per-company settings such as a Corporation Tax UTR you enter). All of these keys are prefixed aiona_ so you can identify them in your browser's developer tools. | Until cleared | Strictly necessary / functional |
| Session-only working data | Your AI-assistant conversation for the current tab (so it survives a page refresh) and the progress of a document-upload batch. Session storage is deleted automatically when you close the tab. | Until the tab is closed | Strictly necessary |
The application can also be installed as a web app; your browser's cache storage then keeps copies of the application's own code and assets for faster loading. This cache contains no personal data.
Everything listed above is exempt from the PECR consent requirement: it is either strictly necessary to provide the service you have signed in to use, or stored only as a direct result of an action you take in the interface (for example dismissing a banner or choosing a layout). Because we set nothing non-essential, neither this website nor the application requires a cookie consent banner under PECR — the application shows a one-time notice for transparency, not a consent request. If we ever introduce anything that does require consent, §5 applies.
Our full list of sub-processors is published in the Privacy Policy (§5).
You can clear local storage and cookies at any time through your browser settings (usually under "Privacy" → "Clear browsing data"). Note that clearing the application's local storage will sign you out. Because we set no optional tracking cookies, there is nothing further to opt out of.
If we ever introduce analytics or any non-essential cookies, we will update this policy first, present a consent banner that is off by default, and record your choice before anything non-essential is set.
Questions about this policy: support@aionatech.com.
AIONA Ltd · Registered in England & Wales, company no. 16606520 · Registered office: 128 City Road, London, United Kingdom, EC1V 2NX