LEGAL & TRUST
Cookie Policy
Updated 9 September 2026 · AIONA Grade & AIONA Bookkeeping
On this page
This Cookie Policy explains how AIONA Ltd (trading as AIONA) ("we", "our", "us") uses cookies and similar technologies (such as browser local storage and session storage) on this website and in the AIONA application, in line with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
1. The short version
- This marketing website sets no advertising, analytics or tracking cookies.
- The AIONA application uses your browser's local storage (not cookies) to keep you signed in, and a small number of strictly-necessary preferences.
- We do not sell data, run third-party ad pixels, or fingerprint your device.
2. What we store and why
2.1 This website (aionatech.com)
The public marketing site is a static site. It sets no cookies and stores nothing on your device. Fonts and the product walkthrough video are hosted with the website. Playing the video does not load a YouTube or Vimeo embed. Your browser may cache these files as part of normal page loading.
2.2 AIONA Grade and AIONA Bookkeeping portals
When you sign in to the application, we use browser local storage and session storage - cookie-equivalent technologies under PECR - for the following strictly-necessary items:
| Item | Purpose | Duration | Category |
|---|---|---|---|
aiona_token | Your session access token - keeps you signed in as you use the app. | Until sign-out or expiry | Strictly necessary |
aiona_refresh_token | Renews your session without forcing a fresh sign-in. | Until sign-out or revocation | Strictly necessary |
aiona_gov_device_id | A random device identifier that UK law (HMRC's fraud-prevention header requirements) obliges us to send to HMRC when you use Making Tax Digital features such as VAT submission. It is generated in your browser, is not used for advertising or cross-site tracking, and is shared only with HMRC. | Until cleared | Strictly necessary (legal requirement) |
aiona_cookie_consent | Records that you have seen and dismissed the storage notice, so we do not show it again. | Until cleared | Strictly necessary |
| Interface preferences | Remembers non-tracking choices you make in the interface (e.g. dismissed banners, tour progress, layout choices, saved list filters, and per-company settings such as a Corporation Tax UTR you enter). All of these keys are prefixed aiona_ so you can identify them in your browser's developer tools. | Until cleared | Strictly necessary / functional |
| Session-only working data | Your AI-assistant conversation for the current tab (so it survives a page refresh) and the progress of a document-upload batch. Session storage is deleted automatically when you close the tab. | Until the tab is closed | Strictly necessary |
The application can also be installed as a web app; your browser's cache storage then keeps copies of the application's own code and assets for faster loading. This cache contains no personal data.
Sign-in and security storage support the service you request. Other interface storage serves the specific preference or task described above. A preference is not automatically exempt from consent simply because you clicked a control. Where consent is required, it must be obtained before storage or access takes place. The storage notice explains browser storage; dismissing it does not constitute consent to advertising or analytics.
3. Third parties
- Stripe - if you subscribe to a paid plan, the checkout is hosted by Stripe, which sets its own strictly-necessary and fraud-prevention cookies on Stripe's own pages. See Stripe's cookie policy.
- Sentry - the AIONA application sends automatic error reports (the error, your browser version, and your IP address as an unavoidable part of the network request) to Sentry, our error-monitoring provider, so we can find and fix faults. Sentry does not set cookies or store anything on your device, and we configure it not to capture personal data or session recordings.
Our full list of sub-processors is published in the Privacy Policy (§5).
4. Managing cookies and local storage
You can clear local storage and cookies at any time through your browser settings (usually under "Privacy" → "Clear browsing data"). Note that clearing the application's local storage will sign you out. Because we set no optional tracking cookies, there is nothing further to opt out of.
5. Changes to this policy
If we ever introduce analytics or any non-essential cookies, we will update this policy first, present a consent banner that is off by default, and record your choice before anything non-essential is set.
6. Contact
Questions about this policy: support@aionatech.com.
AIONA Ltd · Registered in England & Wales, company no. 16606520 · Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
AIONA reads Xero with read-only consent, writes nothing back, keeps each client's rules to that client, and never uses your data to train anything. Where your data goes