Aion Automation LTD (trading as Aion) · Registered in England and Wales, company no. 17285913 · Registered office: 66 Paul Street, London EC2A 4NA, United Kingdom · Contact: contact@immigration.aionautomation.org
Version: 2026‑10‑12 (US) · previous versions available on request
Terms of Service (including the Data Processing Agreement in Schedule 1). These Terms govern the US edition of the Aion service (the drafting of United States immigration forms). The UK edition of the service is governed by the separate UK Terms of Service.
Important — read carefully. Before using the Service you must read and accept these Terms. If you do not agree, do not create an account or use the Service.
1.1 By clicking “I Agree”, creating an account, or otherwise accessing or using the Aion US platform and related services (the “Service”), you (“Customer”, “you”, “your”) agree to be bound by these Terms of Service (the “Terms”) and the Data Processing Agreement set out in Schedule 1, which together form the entire agreement between you and Aion Automation LTD (trading as Aion) (“we”, “us”, “our”).
1.2 If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity. In that case “Customer” means that entity.
In these Terms:
You represent, warrant and undertake that:
3.1 You are a Licensed Professional (or a law firm or organization employing or instructing Licensed Professionals) authorized to provide immigration legal services under applicable U.S. law.
3.1A Business customer. You are entering into these Terms wholly for the purposes of your trade, business or profession and not as a consumer, and the Service is made available to businesses and professionals only. To the maximum extent permitted by law, consumer‑protection regimes applicable to consumer contracts do not apply to this agreement.
3.2 You have obtained all necessary consents, authorizations and permissions from data subjects (your clients/applicants) to process their personal data, including Sensitive Data, via the Service, and you will maintain records of such consents.
3.3 Every Authorized User is properly qualified, supervised and authorized by you to use the Service in connection with immigration filings.
3.4 You will ensure that all Outputs are thoroughly reviewed by a qualified Licensed Professional before any reliance, use, amendment, signature or submission to USCIS, the Department of State or any other authority or third party, and that all signatures (your client’s, your own as preparer or representative, and any Form G‑28 or other declaration) are obtained and made in accordance with applicable law and the rules of the relevant Government Filing System.
3.5 You are solely responsible for the accuracy, completeness, quality and regulatory compliance of all Client Data you input and all Outputs you use or submit, including the accuracy of your representative details (state bar admission, USCIS online account number, Form G‑28 particulars).
3.6 You will comply with all applicable laws, regulations and professional conduct rules (including the rules of professional conduct of each state bar to which you are admitted) when using the Service.
3.7 You will not use the Service for any unlawful purpose or in any manner that could bring the Service or us into disrepute.
4.1 Subject to these Terms and payment of applicable fees, we grant you a limited, non‑exclusive, non‑transferable, non‑sublicensable, revocable license to access and use the Service solely for your internal business purposes in connection with providing immigration legal services to your clients.
4.2 You may authorize Authorized Users to access the Service on your behalf. You are responsible for all activity under your account (including any Jobs initiated) and must maintain the confidentiality of login credentials. You must promptly notify us of any unauthorized use.
5.1 You must use the Service only in accordance with these Terms, all applicable laws, and the published terms of use of the relevant Government Filing System.
5.2 Prohibited Uses. You must not (and must not permit any Authorized User to):
5.3 Credential Security. You must keep your sign‑in credentials — your Google account, and any one‑time sign‑in links we email you — and your Stripe billing portal credentials secure. The Service never asks for, receives, stores or uses the credentials to any Government Filing System account.
The Service uses artificial intelligence, including large language models provided by third parties (such as Anthropic), to extract structured data from documents and to draft the entries of the official USCIS form on our own infrastructure. The Service does not sign in to, operate or submit anything through any Government Filing System.
YOU ACKNOWLEDGE AND AGREE THAT:
6.1 Outputs are AI‑generated drafts only. They are provided as a starting point to assist you in your professional work.
6.2 AI systems can produce errors, omissions, inaccuracies, hallucinations or content that appears plausible but is factually incorrect or incomplete.
6.3 We make no warranty, representation or guarantee whatsoever regarding the accuracy, reliability, completeness, suitability or fitness for any particular purpose of any Output.
6.4 You must independently and thoroughly verify every Output against the original source documents, applicable law, agency guidance and your own professional judgment before any use, amendment, signature or submission.
6.5 The Service does not provide legal advice, immigration advice or any form of professional advice, and we are not a law firm. We are not your lawyer or your client’s lawyer, and no attorney‑client relationship is created with us. The Service is a drafting tool for use by Licensed Professionals.
6.6 You remain solely and fully responsible for all professional, regulatory and legal obligations in respect of any advice given to clients and any filings made, regardless of any assistance provided by the Service.
6.7 We exclude all liability for any loss, damage, denial or refusal of any application or petition, or other consequence arising from your reliance on any Output or your failure to review it properly.
6.8 Never signed, never filed. The Service produces draft forms only. It does not apply any signature (electronic or otherwise), does not file or submit anything with USCIS, the Department of State or any other authority, and does not pay any government fee. USCIS may treat a software‑generated signature as invalidating a filing: every signature must be made by the applicant, the preparer or the representative personally, by hand or through the government’s own signing process, and only after the review required by clause 3.4.
7.1 Plans and Credits. Access to the Service requires a paid subscription plan, pay‑as‑you‑go credits, or an Order (clause 7.1B). The available plans, the number of Fills included each month, and the per‑credit price are displayed on our pricing page and at checkout, in U.S. dollars. One Fill drafts one form; filling several forms for the same client uses one Fill per form. A Fill is counted towards your allowance (or consumes a credit) when you press “Fill application”. A Fill that you stop more than two minutes after it started still counts; a Fill that fails (ends without producing the draft form, for a reason other than you stopping it) is credited back automatically. Unused Fills in your plan allowance roll over to subsequent billing periods for as long as your subscription remains active; Fills included in a free trial do not roll over, and all accrued Fills lapse when your subscription ends (clause 7.3). Credits are used only after your plan allowance, do not expire, and are non‑transferable, hold no cash value and are non‑refundable except as required by law.
7.1A Free Trials. Where we offer a free trial (as displayed at checkout), the trial runs for the advertised period from the start of the subscription. A valid payment method is taken at checkout and the first subscription fee is charged automatically when the trial ends, unless you cancel before then via the billing portal. It is your responsibility to cancel before the end of the trial if you do not wish to be charged. Any trial‑ending reminder we send is a courtesy; it is not a condition of the charge, and non‑receipt of a reminder does not entitle you to a refund of a fee properly charged at the end of a trial. A trial includes a fixed allowance of Fills as displayed at checkout, regardless of the plan selected. One trial per firm: we may decline, or end early, a trial where the same firm or the same payment card has already been used for one. Pay‑as‑you‑go credits do not include a trial. Any other trial or beta access is offered only as agreed in an Order. Client Data uploaded during a trial is handled identically to paid use, including the deletion schedule in Schedule 1.
7.1B Bulk Credits and Orders. For volumes beyond our published plans, we may agree with your firm a price for a block of credits, or other terms, in an order form, quote or other written agreement, which may be made by email (an “Order”). Credits bought under an Order are added to your firm’s account, may be shared among the users we link to it, and do not expire. Where an Order conflicts with this clause 7, the Order prevails for the purchase it covers.
7.2 Fees. Subscription fees are payable in advance for each billing period (monthly or annual), and pay‑as‑you‑go credits when you buy them, via Stripe (or such other payment processor as we may use). Fees under an Order are payable as set out in the Order (for example, by invoice). Fees are non‑refundable except as expressly stated in these Terms or your Order, or as required by law.
7.3 Auto‑Renewal and Cancellation. Subscriptions automatically renew at the end of each billing period unless cancelled. You can cancel your subscription at any time through the Stripe billing portal (accessible from your account settings); cancellation takes effect at the end of the current billing period. Cancellation stops future renewals only. It does not end the current billing period early, and no refund or pro‑rata credit is given for the unexpired part of a period already paid for, for a period in which you did not use the Service, or for any unused Fills in your allowance. Credits you have bought are not affected by cancellation.
7.4 Taxes. Fees are exclusive of taxes. You are responsible for all applicable taxes, duties and governmental charges (including any sales or use taxes), other than taxes on our income. We may adjust fees on reasonable notice.
8.1 Our Intellectual Property. We (and our licensors) retain all right, title and interest in and to the Service, including all software, technology, AI models/prompts (to the extent not specific to your data), documentation, and any improvements, modifications or derivative works. You receive only the limited license set out in these Terms.
8.2 Your Intellectual Property and Data. You retain all right, title and interest in and to Client Data and in the final Outputs you create and submit (as distinct from the raw AI‑generated drafts).
8.3 License to Us. You grant us a non‑exclusive, royalty‑free, worldwide license to use, reproduce and process Client Data solely as necessary to provide the Service.
The processing of personal data in connection with the Service is governed by the Data Processing Agreement set out in Schedule 1, which forms an integral part of these Terms. By accepting these Terms you agree to the Data Processing Agreement.
10.1 Each party (“Receiving Party”) agrees to keep confidential all non‑public information received from the other party (“Disclosing Party”) in connection with the Service (“Confidential Information”) and to use it only for purposes of performing under these Terms.
10.2 Confidential Information includes, but is not limited to, Client Data, business plans, pricing and the provisions of these Terms.
10.3 The obligation of confidentiality does not apply to information that:
11.1 The Service is provided “as is” and “as available” without any warranties of any kind, whether express, implied, statutory or otherwise, including warranties of merchantability, fitness for a particular purpose, title or non‑infringement.
11.2 We do not warrant that the Service will be uninterrupted, error‑free, or free of viruses or other harmful components, or that any Output will be accurate or suitable for your needs.
12.1 You agree to indemnify, defend and hold harmless Aion Automation LTD, its officers, directors, employees, agents and affiliates from and against any and all claims, damages, losses, liabilities, costs and expenses (including reasonable legal fees) brought by a third party (including any data subject, client, applicant, petitioner or beneficiary) arising out of or relating to:
12.2 This indemnity shall not apply to the extent the claim is caused by our breach of these Terms or our negligence.
13.1 Nothing in these Terms excludes or limits our liability for: (a) death or personal injury caused by our negligence; (b) fraud or fraudulent misrepresentation; or (c) any other liability that cannot be excluded or limited by applicable law.
13.2 Subject to clause 13.1, our total aggregate liability to you under or in connection with these Terms (whether in contract, tort including negligence, or otherwise) shall not exceed the total fees paid by you to us in the twelve (12) months immediately preceding the claim.
13.3 Subject to clause 13.1, we shall not be liable for any indirect, incidental, special, consequential or punitive damages, or any loss of profits, revenue, data, business opportunity, goodwill or anticipated savings, whether or not advised of the possibility of such loss, and whether arising in contract, tort or otherwise. This exclusion applies in particular to any loss arising from immigration filing outcomes, regulatory or bar disciplinary action against you, or claims by your clients.
14.1 Term. These Terms commence on the date you first accept them or access the Service and continue until terminated by either party.
14.2 Termination by You. You may cancel at any time as described in clause 7.3. Upon cancellation your access continues until the end of the prepaid billing period, after which your right to access the Service ceases.
14.3 Termination or Suspension by Us. We may suspend or terminate your access immediately if: (a) you breach these Terms; (b) you fail to pay fees; (c) we reasonably believe your use poses a risk to the Service, other users, or legal compliance; or (d) we are required to do so by law. Where practicable we will give you prior notice.
Upon termination or expiry, your right to access the Service ceases. We will, in accordance with the Data Processing Agreement, delete or return Client Data as instructed by you (or as otherwise required). Provisions that by their nature should survive (including clauses 8, 9, 10, 12, 13, 16, 17 and Schedule 1) shall survive termination.
These Terms and any dispute arising out of or in connection with them shall be governed by and construed in accordance with the laws of England and Wales, without regard to conflict‑of‑laws principles. The courts of England and Wales shall have exclusive jurisdiction to settle any such dispute, and each party irrevocably submits to that jurisdiction.
By clicking “I Agree”, creating an account, or otherwise accessing the Service, you confirm that you have read, understood and agree to these Terms of Service (including the Data Processing Agreement in Schedule 1) and that you are authorized to bind the Customer entity.
Aion Automation LTD
Contact: contact@immigration.aionautomation.org
Version: 2026‑10‑12 (US)
This Data Processing Agreement (“DPA”) forms part of the Terms of Service between the Customer (“Controller”) and Aion Automation LTD trading as Aion (“Processor”). The Processor is established in the United Kingdom and applies the standards of the UK General Data Protection Regulation (“UK GDPR”) to its processing; this DPA is also intended to satisfy the processor/service‑provider contract requirements of applicable U.S. state privacy laws.
Terms defined in the Terms of Service have the same meaning in this DPA. In addition: “Personal Data”, “Processing”, “Controller”, “Processor”, “Data Subject” and “Personal Data Breach” have the meanings given in UK GDPR (and, where applicable U.S. state privacy law uses different terminology, include the equivalent concepts such as “personal information”, “business” and “service provider”).
Subject matter and duration of the processing:
The Processor will process Personal Data for the duration of the Customer’s subscription, but in respect of each Job the relevant Personal Data is retained only as set out below (typically no more than 24 hours). After termination or expiry of the subscription, all remaining Personal Data will be deleted or returned in accordance with clause 9.
Nature and purpose of the processing:
The processing is carried out to enable the Controller (a Licensed Professional or firm) to prepare U.S. immigration filings more efficiently. This includes:
Categories of Data Subjects:
Types of Personal Data processed:
3.1 No Permanent Storage. The Processor does not maintain a client database. Client Data is held in ephemeral, per‑Job working folders.
3.2 Immediate Deletion of Original Files. Immediately after successful extraction, the original uploaded documents (PDFs, images, etc.) are permanently deleted. The only retained Client Data is the Extracted Summary.
3.3 24‑Hour Automatic Clean‑up. A scheduled process runs every hour and permanently deletes any Job folder that is older than 24 hours, including the Extracted Summary, screenshots, action/event logs, reports and metadata — including the per‑Job files held in the job‑processing storage bucket (Schedule 1 §6), which additionally carries an automatic 2‑day deletion rule as a backstop. Jobs that are still in progress are never deleted mid‑run. At any time the Controller may request earlier manual deletion of a Job. Residual copies of deleted data may persist for approximately seven (7) further days within the hosting provider’s rotating encrypted disk snapshots before expiring.
3.4 Usage Ledger. The Processor maintains an append‑only Usage Ledger for billing and business analytics. This Ledger records, per AI call: a timestamp, an opaque Job identifier, an opaque owner identifier, the account holder’s email address, the plan tier, the model name, token counts and cost. The Usage Ledger contains no applicant documents, no Extracted Summary and no other Client Data. It is accounting‑level metadata only, retained for up to six (6) years after the Customer’s account closes (tax and accounting records); on an erasure/deletion request the account holder’s identity is redacted from the Ledger and only the financial figures are retained.
3.5 Government Accounts. The Processor never requests, receives, stores or uses credentials to any Government Filing System account, and the Service does not sign in to or operate any such system. The Fill is performed entirely on the Processor’s own infrastructure against the official form PDF, and the resulting draft is delivered to the Controller for review.
The Processor shall:
The Processor shall maintain appropriate technical and organizational measures, including, but not limited to:
The Processor will review and update the security measures periodically and will make its security policy available on request.
6.1 The Controller provides general written authorization for the Processor to engage the following sub‑processors, whose identity, role, and location are listed below.
| Sub‑processor | Processing Activity | Data Received | Location |
|---|---|---|---|
| Anthropic, Inc. (Claude API) | AI extraction from documents and AI drafting of the form entries (the Fill). | Document text/images (for extraction), and the Extracted Summary with the firm’s representative details (for the Fill). | United States |
| Render Services, Inc. | Cloud hosting and infrastructure (web application). | Runs the server (Applicant Data passes through transiently during upload and review); holds the Usage Ledger and Job metadata. | United States (Virginia region) |
| Amazon Web Services, Inc. (S3 and ECS Fargate) | Job processing infrastructure: per‑Job file storage, and the isolated, single‑use container that runs each extraction and Fill. | Uploaded client documents and per‑Job working files (Extracted Summary, draft form, report) in a private, encrypted, access‑restricted storage bucket — deleted when the processing stage ends, with a 2‑day automatic deletion backstop. | United States (us‑east‑1, N. Virginia) |
| Stripe, Inc. | Payment processing, subscription management and billing. | Customer email address, subscription details and payment method. No card data touches the Processor’s servers. | United States |
| Google LLC | Authentication (OAuth) | Email address and Google account ID. | United States |
| Resend, Inc. | Transactional email (one‑time account sign‑in links, welcome and subscription‑confirmation notices, trial reminders, and the referral program’s codes, dashboard links and payout notifications). | Account and referrer email addresses and referral/payout details. No Client Data or applicant data. | United States |
| Crisp IM SAS | In‑site support chat (the messenger widget on the website and Service pages). | Messages and contact details submitted via the chat. No Client Data or applicant data unless the Controller includes it in a message. | European Union |
6.2 The Processor will maintain an up‑to‑date list of sub‑processors on its website or in the Service dashboard and will notify the Controller of any intended addition or replacement of a sub‑processor at least 14 days in advance. The Controller may object to a new sub‑processor on reasonable grounds related to data protection within that period. If the Controller objects and the Processor cannot accommodate the objection, the Controller may terminate the affected Service without penalty.
6.3 For each sub‑processor, the Processor has entered into (or will enter into) a written agreement that imposes data protection obligations substantially equivalent to those in this DPA.
7.1 The Processor is established in the United Kingdom and the sub‑processors listed above may process Personal Data in the United States, the United Kingdom and the European Union. The Controller acknowledges and agrees that such processing locations are necessary for the provision of the Service.
7.2 Where a transfer of Personal Data is subject to a legal transfer regime, the Processor shall ensure the transfer is made in compliance with that regime, using recognized safeguards (such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an applicable adequacy framework) as appropriate.
7.3 The Processor will, upon request, provide the Controller with copies of the relevant transfer safeguards.
8.1 The Controller acknowledges that the Client Data processed via the Service will routinely include Sensitive Data (including health information, biometric data and criminal‑history information).
8.2 The Controller is solely responsible for establishing and documenting a valid lawful basis, consent or other condition for processing such data under the laws applicable to the Controller, and for ensuring appropriate safeguards are in place.
8.3 The Processor shall treat all Personal Data as confidential and shall apply enhanced security measures as described in its security policy.
9.1 The Processor shall notify the Controller without undue delay after becoming aware of a Personal Data Breach affecting Personal Data processed on behalf of the Controller.
9.2 The notification shall include, to the extent possible: (a) the nature of the breach; (b) the categories and approximate number of data subjects concerned; (c) the likely consequences; and (d) the measures taken or proposed to address the breach. The Processor shall cooperate with the Controller in investigating and mitigating the breach, including in respect of any notification obligations the Controller has under U.S. state breach‑notification laws.
Where the Controller is required to carry out a privacy or data protection assessment in respect of the processing, the Processor shall provide reasonable assistance, taking into account the nature of the processing and the information available to the Processor.
11.1 Subject to the automatic retention schedule in clause 3, upon termination or expiry of the subscription, or upon written instruction from the Controller, the Processor shall, at the Controller’s choice, securely delete or return all Personal Data (including any copies) and certify in writing that this has been done, unless retention is required by applicable law.
11.2 The Processor may retain the Usage Ledger for its legitimate business purposes (billing, accounting and tax records). The Usage Ledger contains no Applicant Data or other Client Data; the only Personal Data within it is the account holder’s email address and the opaque identifiers described in clause 3.4, which are retained on the terms of that clause and redacted on an erasure/deletion request. The Processor may also retain anonymized/aggregated data derived from the Service provided it cannot identify any data subject.
12.1 The Controller (or its appointed auditor, subject to reasonable confidentiality obligations) may, no more than once per calendar year (or more frequently if required by regulatory obligation or following a Personal Data Breach), audit the Processor’s compliance with this DPA.
12.2 Audits shall be conducted during normal business hours with at least 30 days’ prior written notice and in a manner that minimises disruption to the Processor’s business. The Processor may satisfy the audit request by providing the Controller with an executive summary of an independent third‑party security audit report or other objective evidence of compliance, instead of an on‑site inspection.
Each party’s liability under this DPA shall be subject to the limitations and exclusions set out in the Terms of Service (in particular clause 13), except that nothing shall limit liability for breach of statutory data protection obligations where such limitation is prohibited by law.
For data protection queries or to exercise rights under this DPA, contact the Processor at: contact@immigration.aionautomation.org or by post at Aion Automation LTD, 66 Paul Street, London EC2A 4NA, United Kingdom.
— End of Schedule 1 —