Privacy Policy

Who we are

This website, aerais.app, is operated by aerais, a data and AI governance systems firm. In this policy, "aerais", "we" and "us" mean the operator of this site. "You" means anyone who visits the site or submits a request through it.

Information we collect

Information you give us

When you use the form on the diagnostic page, we collect:

• your name, work email address and company;
• the type of request you select;
• the message you write.

Please do not include confidential or regulated data in the form.

Information recorded with your request

If you arrived through a campaign link, we record the campaign tags in that link (source, medium and campaign), the referring site, and the first page you visited on this site. This is stored for the browser session so it can be attached to your request if you submit the form. It is not used to build a profile of you across other websites.

Technical data

This site is served through Cloudflare. Like most hosting and security services, Cloudflare processes technical data such as your IP address, browser type, requested pages and request timestamps in order to deliver the site, protect it from abuse and measure aggregate traffic. See our Cookie Notice for details.

What we do not collect

There is no chat widget on this site, and we do not run advertising or cross-site tracking tools.

How we use information

• To read and respond to your request.
• To keep the site and the form secure, and to detect and prevent abuse.
• To understand which sources lead to requests, so we can see which content is useful.
• To meet legal obligations and to establish or defend legal claims.

We do not sell your personal information, and we do not use it for advertising.

Legal bases

Where data protection law such as the EU General Data Protection Regulation requires a legal basis, we rely on your consent when you submit the form, our legitimate interests in operating and securing the site and understanding how it is used, and legal obligations where they apply.

Service providers

We share information only with service providers that help us run the site and respond to requests, under terms that limit their use of it:

• Cloudflare, for hosting, content delivery, security and cookieless web analytics;
• an email delivery provider, which sends form submissions to us;
• a customer relationship management (CRM) provider, where we record and track requests.

We may also disclose information when required by law or to protect rights, safety or security.

International transfers

Our service providers operate in several countries, so information you submit may be processed outside the country where you live, including in the United States. Where required, we rely on recognized transfer safeguards, such as standard contractual clauses, and we ask providers to protect information to a comparable standard.

Retention

We keep form submissions and related records only as long as needed to respond to you, manage any resulting relationship and meet legal obligations. Requests that do not lead to an engagement are reviewed periodically and deleted when no longer needed. Technical logs held by Cloudflare follow its own retention practices.

Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• ask us to delete your information;
• withdraw consent you have given, at any time, without affecting earlier processing;
• object to or ask us to restrict certain processing, and request a portable copy of your information;
• complain to your local data protection authority.

These rights come from laws such as the EU General Data Protection Regulation, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and various US state privacy laws. We treat the rights above as available to everyone who contacts us, whatever their location, and we will tell you if a legal exception applies to your request.

How to exercise your rights

Use the form on the diagnostic page, choose "Something else" as the request type, and say that your message is a privacy request. We may ask you to confirm your identity before acting. We aim to reply within two business days and to complete requests within the time required by applicable law.

Security

We use reasonable technical and organizational measures to protect information, including encrypted connections and access controls. No method of transmission or storage is completely secure, which is why we ask you not to send confidential or regulated data through the form.

Children

This site is intended for business visitors and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, tell us through the form and we will delete it.

Links to other sites

This site may link to third-party websites. We do not control them and are not responsible for their privacy practices.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If a change is significant, we will say so on this page.