Privacy Policy

Last Updated:  08.10.2026

Definitions

For the purposes of this Privacy Policy

● "Application" means the software program provided by the Company downloaded by You through Company Website or any Application Store's account to a Device, named “aleria” product.

● "Company" (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Aleria Technology LLC a limited liability company organised under the laws of United Arab Emirates with registered address at Al Muntazah district, Sharq 48 zone, Abu Dhabi, United Arab Emirates with license number CN-4978368 which acts as data controller for the processing of personal data mentioned in this Privacy Policy and with contact details as follows:

Email support: support@aleria.com

General inquiry: contact@aleria.cloud

Website: aleria.ai

● "Services" means the Application and all related features made available by the Company to You, including but not limited to: online meeting hosting, audio recording of meetings, storage and retrieval of recordings, participant management, and any additional features provided through the Application, as further described on the Company's website at www.aleria.ai and subject to the subscription plan you may acquire.

Scope

This Privacy Policy, available at https://aleria.ai/privacy-policy as amended from time to time, applies to all users of aleria including those accessing the platform via web browsers, mobile apps, or any other services offered by The Company across all regions. By clicking “I Agree” to these Terms, you are informed that your personal data are collected and used as provided below and consent to the processing for which consent constitutes the legal basis.

Personal Data

For the purposes of this Policy, ‘personal data’ (also referred to as ‘personal information’ under the California Consumer Privacy Act, the Privacy Rights Act, and other similar U.S. state laws) means any information that relates to an identified or identifiable individual, as defined under the EU GDPR, UK GDPR, the revised Swiss Federal Act on Data Protection, Canada’s PIPEDA, and all other applicable U.S. federal or state privacy laws.

Basis for Data processing

We process your personal data on the following legal grounds:

Contract Performance: We process your identifying information, meeting data, and device information for the delivery of the Services.

Consent: We process audio recordings based on the data subjects explicit consent, which may withdraw at any time.

Legitimate Interests: We process usage data and analytics to improve our Services, detect fraud, and ensure security. Where we rely on legitimate interests as a legal basis, you have the right to object to such processing at any time (see “Right to Object” below).

Legal Obligation: We may process personal data to comply, when solicited, with legal obligations, court orders, and regulatory requirements.

Vital Interests: We may process personal data to protect vital interests of individuals, such as in emergency situations, when solicited in line with legal obligations.

Personal Data We Collect

We process the following types of personal data:

1. Identifying information, including your name, email address, user ID.
2. User content, including personal data you provide in your aleria entries such as your prompts and other content you upload like images, text, audio and video files, emails and files from external services connected by You, and data from connected services, depending on the features You use.
3. Meeting data: We collect metadata related to your meetings, including the date, time, duration, as well as meeting summaries that may be generated by AI when You use the audio recording feature.

Audio recordings: We may record audio during meetings when a user activates the recording feature. The user who activates the feature is fully responsible for this processing, including informing all participants and obtaining any consent required by applicable law before recording begins.

4. Commercial data: We collect details such as your subscription plan and purchase history. Full payment card details are handled exclusively by our PCI-compliant service provider and are not stored by us.
5. Device information: We collect information about your IP address and system with its browser through cookies and similar tracking technologies when you use our website or Application;
6. Personalization preferences: preferences you provide through the app’s settings to customize your platform experience;
7. Search queries and text filters submitted through the Services, and chat names used for push notifications.

We do not deliberately collect sensitive personal information, and users are advised not to submit such data (for instance, Social Security numbers or exact location details). Our services are not intended to handle sensitive information, such as health data or financial account details, and We disclaim any responsibility for data that is uploaded in violation of this guidance.

How We Use Personal Data

We use personal data for the following purposes:

1. Providing the Service: To provide the Application and associated Services. Accordingly, the provision of the above-mentioned identifying information, user content, and commercial data is required for the provision of the Services.
2. Customer support: Where applicable, to respond to inquiries, handle complaints and provide customer assistance related to the Application and associated Services.
3. Service improvement and personalization: To enhance, develop, and personalize the user experience, including analyzing usage trends and improving functionality and performance.
4. Security and fraud prevention: To detect, prevent, and investigate unauthorized access, fraud, and other illegal or harmful activities.
5. Billing and payments: To manage subscriptions, process payments, issue invoices, and comply with financial and accounting obligations.
6. Communications: To send service-related communications, including technical notices, updates, security alerts, and administrative messages.
7. Compliance with legal obligations: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
8. Dispute resolution and legal defense: To investigate, prevent, or take action regarding illegal activities, suspected fraud, or potential disputes, and to defend the Company in legal claims.

We do not engage in automated decision-making that produces legal or similarly significant effects on individuals.

Sharing Personal Data

We do not share personal data with third parties, except in the following case: if required by law, in response to legal processes, or to protect our rights, property, or safety.

To provide certain services and functions, we may disclose personal data to external services explicitly connected by the user, such as Microsoft, Google, Slack, Trello, Jira, Confluence, and GitHub. Personal data is transmitted to the relevant provider only as part of an action requested by the user (e.g., sending an email, creating a calendar event, or posting a message), where technically necessary for the relevant integration to function.

We may also disclose personal data to identity providers, such as Google, Microsoft, and Apple, where the user chooses to sign in via single sign-on (SSO).

Where a user purchases a subscription, we may disclose personal data to a payment service provider such as Stripe, including the user’s name, email address, and payment details.

We may also disclose personal data to our external legal advisors for the purposes of dispute resolution and legal defense.

We may also disclose limited personal data to service providers that support the operation of the Services. This includes Exa Labs (United States), which provides web-search and page-content retrieval services and may receive search queries and text filters composed by the model through the Services.

Where you enable push notifications, we may disclose the title of a chat to the relevant push-notification provider such as Google Firebase Cloud Messaging, Apple Push Notification Service, Mozilla autopush, or Microsoft Windows Notification Service. Push-notification bodies are fixed strings and do not contain user content.

Where we share personal data with third-party vendors and service providers acting on our behalf, we ensure that appropriate data processing agreements (DPAs) are in place, setting out the scope, purpose, and security measures for processing, as well as obligations to assist with data subject rights and breach notifications. In accordance with our instructions, these parties will access, process, or retain personal data only to the extent necessary to perform their obligations on our behalf.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Retention Periods:

Deletion: Upon account deletion, we will delete or anonymize your personal data within 30 days, except for data required for fraud prevention, legal compliance, or legal defense purposes. To request deletion, you can contact Us at support@aleria.com (We comply with applicable laws such as the right to erasure provided by GDPR).

Data Protection Rights

You have the following rights regarding your personal data:

Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of your request, free of charge.

Right to Rectification/to Correct: You have the right to request correction of inaccurate personal data or completion of incomplete personal data.

Right to Erasure: You have the right to request deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent; (c) you object to processing; or (d) it has been unlawfully processed.

Right to Restriction: You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider.

Right to Object: You have the right to object to processing of your personal data based on legitimate interests. Where you object to processing based on legitimate interests, we will cease processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms.

Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

Opt-out of sales, sharing, or targeted advertising (if you are a resident of the United States): Opt out of the sale or sharing of personal information. The Company does not sell or share personal information as defined under U.S. privacy laws.

How to Exercise Your Rights: To exercise any of these rights, please contact us at:

Email: support@aleria.com

Subject Line: "Data Subject Rights Request"

Include: Your name, email address, and the specific right you wish to exercise

Response Time: We will respond to your request within 30 days. If we need more time, We will inform you of the reasons and the extended timeframe.

Right to Lodge a Complaint: We hope to address any questions or concerns you may have. If you have unresolved complaints with Us and you reside in the European Union, you have the right to lodge a complaint with your local supervisory authority, such as one of the authorities listed in the EU supervisory authorities available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

If you are a U.S. resident and you consider that your request has been improperly denied, you may submit an appeal by responding to our decision within sixty days Residents of the UK or Switzerland may contact their competent supervisory authority (such as the UK ICO or the FDPIC).

Notice and Communications

By using the Services, you agree to receive transactional and administrative electronic messages from the Company, such as account alerts, security updates, and billing notifications.

You can opt out of non-essential marketing emails at any time using the ‘unsubscribe’ link or through your account settings; this will not affect essential service communications. To send formal privacy notices to the Company, email support@aleria.com. The Company may deliver legal or privacy notices via email, in-app banners, or any other method permitted by law.

Cross-Border Data Transfers

Data Location: Your personal data is primarily stored and processed in the United Arab Emirates.

International Transfers: We may transfer your personal data to countries outside the UAE, including to our service providers and partners. Such transfers will only occur where the transfer is necessary for performance of our Services with you.

When transferring data internationally, we ensure that the following safeguards apply:

Data security measures are maintained at all times;

You retain all data protection rights.

If you reside within the European Union (EU) or the European Economic Area (EEA): your personal data may be transferred to countries outside the EU/EEA, including the United Arab Emirates, for the purposes described in this Privacy Policy.

Where personal data is transferred from the EU to a country that is not subject to an adequacy decision, we rely on the European Commission’s standard contractual clauses, or an equivalent transfer mechanism or safeguard recognised under applicable data protection law, as appropriate.

You should assess whether your use of the Services, including any personal data that You submit through the Services, complies with the data-protection laws applicable to You and to the relevant individuals. This does not affect the Company’s own obligations under applicable data-protection law.

To learn more or to request a copy of the appropriate safeguards we have put in place for the transfer of personal data, you may contact us at support@aleria.com.

Security

The Company is dedicated to safeguarding your personal data and ensuring it remains accurate. We apply appropriate technical and organisational measures, including:

1. Encrypting personal data in transit and at rest.
2. Ensuring access control, including role-based access to ensure that only authorized staff can view the data.
3. Conducting regular security audits to identify and address vulnerabilities.
4. Implementing secure storage, data minimization, and protective procedures to prevent unauthorized access, unlawful processing, loss, or damage, in accordance with applicable laws.

In the event of a personal data breach (a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data), we will:

Assess the breach within 24 hours of discovery to determine its severity and scope;

Document all facts relating to the breach, including categories and approximate number of data subjects affected;

Take immediate steps to contain and remediate the breach;

Regulatory Notification

Where required by law, we will notify the relevant supervisory authority within 72 hours of becoming aware of a breach that poses a risk to individuals' rights and freedoms. This notification will include:

Nature of the breach including categories and approximate number of data subjects;

Name and contact details of our Data Protection Officer;

Likely consequences of the breach;

Measures taken or proposed to address the breach.

Individual Notification

If a breach is likely to result in a high risk to your rights and freedoms, we will notify you directly without undue delay. This notification will:

Be in clear and plain language;

Describe the nature of the breach;

Provide recommendations for you to minimize potential harm;

Include our contact details for further information.

Cookies

We use strictly necessary cookies and similar technologies to operate and secure the Services, including sign-in, session management, fraud prevention, and storing consent preferences. These technologies are necessary for the provision of the Services and do not require consent where permitted by applicable law.

We do not use third-party, analytics, marketing, or other optional cookies. If this changes, we will update this Privacy Policy and, where required, obtain your consent before placing such cookies.

Children

The Services are not directed to, and must not be used by, individuals under 18 years of age. You must be at least 18 years old to create an account or use the Services. You must be at least 18 years old to create an account or use the Services.

We do not knowingly collect personal data from under this age. If you believe that a child under this age has provided personal data through aleria, please contact Us immediately at support@aleria.com. We will review such notifications and, where appropriate, delete the personal data from our systems.

Contact for Breach Reports

If you become aware of a potential security incident, please notify us immediately at support@aleria.com.

Changes to the Privacy Policy

We may update the Privacy Policy at any time without notice. Where changes are material, we will notify you in advance by email or through a prominent notice within the Application, with a minimum notice period of 30 days before the changes take effect. Continued use of the Services after the effective date of the updated Privacy Policy constitutes acceptance of the revised terms.

Severability

If any part of this Policy is determined to be illegal, invalid, or unenforceable under applicable law, that part will be interpreted to reflect its original intent as closely as possible, or, if that is not feasible, it will be considered removed, while the rest of the Policy will continue to apply in full.”

Governing Law and jurisdiction

THE LAWS OF THE UNITED ARAB EMIRATES AS APPLICABLE IN THE EMIRATE OF ABU DHABI, EXCLUDING ITS CONFLICTS OF LAW RULES, SHALL GOVERN THESE TERMS. FOR THE PURPOSE OF THESE TERMS, THE PARTIES SUBMIT TO THE EXCLUSIVE JURISDICTION OF THE COURTS OF ABU DHABI.

If you reside in a jurisdiction where local laws provide mandatory consumer or data protection rights, those laws will prevail over this Policy in the event of any inconsistency.

For users located in the European Union: mandatory data protection provisions of the GDPR and applicable national law shall apply regardless of the governing law chosen above. You retain the right to bring proceedings before the competent courts of your country of residence and to lodge a complaint with your local supervisory authority.

Contact Us

If you have any questions or concerns about the Privacy Policy or if you want to exercise your privacy rights, please contact Us using one of the contact details below:

Email support: support@aleria.com

Mail: Al Muntazah district, Sharq 48 zone, Abu Dhabi, UNITED ARAB EMIRATES

EU representative: Frederic Azzopardi, f.azzopardi@aleria.cloud

By using aleria, Users acknowledge that they have read, understand, and agree to comply with the Privacy Policy.