Privacy policy

Last updated: January 2026.

This Privacy Policy explains how Aéllo processes personal data through this website and its related services. It covers visitors, prospects and users of our forms. Personal data that our customers process inside the Aéllo Copilot platform (where Aéllo acts as processor) is governed by our General Terms and the Data Processing Agreement (DPA).

1. Who is responsible (controller)

Aéllo S.à r.l., 17 rue des Jardiniers, L-1835 Luxembourg. RCS RCB293333, VAT LU36391886. Contact for data protection and to exercise your rights: contact@aello-group.com.

2. What we do with your data, by use case

a) Handling your request (contact, demo, quote)

  • Data: first and last name, work email, company, phone, and any message you send.
  • Purpose: answer your request, arrange a demo, prepare a quote.
  • Legal basis: your consent and our legitimate interest in responding to a business enquiry.
  • Retention: up to 3 years after our last contact for prospects; for the duration of the relationship (plus legal periods) for customers.
  • Recipients: our sales/support team and our CRM provider (HubSpot).

b) Sending a report or resource (calculators, white papers)

  • Data: name, email, company and the figures you enter in a calculator.
  • Purpose: generate and send your report or resource, and follow up about it.
  • Legal basis: your consent.
  • Retention: up to 3 years after the last contact.
  • Recipients: our team, our CRM (HubSpot) and our email provider (Brevo).

c) Marketing and prospecting

  • Data: name, email, company, interactions.
  • Purpose: send occasional news and offers about Aéllo Copilot.
  • Legal basis: your consent (separate opt-in) or, for existing customers, legitimate interest. You can unsubscribe at any time.
  • Retention: until you unsubscribe, or 3 years after the last contact.

d) Audience measurement

  • Data: pages viewed, approximate location, device, anonymised identifiers.
  • Purpose: understand and improve the website in aggregate.
  • Legal basis: your consent (via the cookie banner).
  • Retention: up to 13 months for cookies; up to 14 months for aggregate reports.
  • Recipients: Google (Analytics).

e) Security and site operation

  • Data: technical logs, IP address, security events.
  • Purpose: keep the site available, prevent abuse and fraud.
  • Legal basis: our legitimate interest in a secure service.
  • Retention: up to 12 months.

3. Subprocessors and recipients

We share data only with providers who help us run the service, under contract and only as needed: HubSpot (CRM), Brevo (transactional email), Google (analytics and, where a campaign runs, advertising), our hosting providers (Hostinger, Microsoft Azure), and AI providers used by the platform (see our AI Usage Policy). We do not sell your personal data. A current list of subprocessors is available on request.

4. International transfers

Processing is intended to take place primarily in the European Economic Area. Where a provider processes data outside the EEA (for example some Google or AI services), the transfer is covered by appropriate safeguards, such as the EU Standard Contractual Clauses and any additional measures required.

5. Cookies

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are set only after your consent, which you can change at any time via the "Manage cookies" link in the footer.

6. Artificial intelligence

Some platform features use AI. How that works, what data is processed, the human review that applies and the fact that we do not use your content to train third-party models is described in our AI Usage Policy.

7. Security

We apply appropriate technical and organisational measures: access controls and least privilege, authentication, encryption in transit and where applicable at rest, logging and monitoring, backups, and contractual controls on our providers.

8. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. To exercise them, write to contact@aello-group.com; we respond within one month. You may also lodge a complaint with your supervisory authority (in Luxembourg, the CNPD; in France, the CNIL).

9. Changes and contact

We may update this policy; the "last updated" date shows the current version. Any question: contact@aello-group.com.