Privacy Policy

Aerra AI ("we", "us", or "our") provides workflow automation and custom application development. We are committed to protecting your privacy in line with applicable laws, including the EU General Data Protection Regulation (GDPR). We primarily operate from Bulgaria, within the European Union.

This Privacy Policy describes how we collect, use, store, and share information when you visit aerra.io (the "Website") or otherwise interact with us (for example, by email or scheduling tools linked from the Website).

"Personal Data" means information that identifies you directly or indirectly — such as your name, email address, technical identifiers associated with your device, or usage information tied to you or your device.

By using the Website you acknowledge this Privacy Policy. If you do not agree, please do not use the Website or submit information through it.

1. Changes to this Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated "Last updated" date and becomes effective when published unless stated otherwise. Continued use of the Website after changes constitutes acceptance of the updated Policy where permitted by law.

2. How we collect information

We obtain information (i) directly from you — for example when you email us, book a call, or submit a project brief through a form embedded on the Website; (ii) automatically when you load pages or interact with the Website (technical and usage data); and (iii) from third-party tools that power parts of the Website (such as embedded scheduling or forms), subject to their policies and your interactions with those tools.

3. What information we collect

Depending on how you use the Website, we may process categories including: contact details you provide (name, email, phone if supplied); professional or company details you include in free-text fields; usage data (pages viewed, approximate timing and sequence of requests); device and browser signals (such as user agent, language preference, and coarse network information); communications content when you write to us; and diagnostic data related to errors if captured by our hosting or analytics tooling.

4. Sensitive categories

Please do not submit special categories of personal data (for example health data, biometric data, or political opinions) through our Website or general enquiry channels unless we explicitly request them under a separate agreement and lawful basis. If such information is sent without arrangement, we may delete it without obligation to retain it.

5. Cookies and similar technologies

We and third-party services integrated into the Website may use cookies, local storage, pixels, or similar technologies to remember preferences, maintain security, measure traffic, or deliver embedded functionality. You can control many cookies through your browser settings; disabling essential cookies may affect how parts of the Website work.

6. Types of cookies we may use

Typical categories include necessary cookies required for core operation and security; preference cookies that remember choices you make; session cookies that expire when you close your browser; and analytics cookies or scripts that help us understand aggregate usage. Third-party embeds may set their own cookies governed by their respective policies.

7. How we use Personal Data

We use Personal Data on lawful bases under GDPR where applicable — including performing our contract with you (or steps prior to contracting), pursuing legitimate interests (operating and improving the Website, answering enquiries, IT security), and complying with legal obligations. Uses include responding to messages; delivering requested information or services; administering meetings booked via linked tools; improving Website reliability and content; protecting rights and property; keeping records for billing or disputes where relevant; and sending strictly necessary service notices.

8. Sharing and disclosure

We do not sell your Personal Data. We may share data with processors who assist us — such as hosting, analytics, email delivery, or embedded scheduling and form providers — under contracts that require appropriate safeguards. We may disclose information if required by law, court order, or governmental request, or when necessary to establish or defend legal claims.

9. International transfers

Your information may be processed on servers or by subprocessors located outside your country, including outside the EEA. Where GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions when transferring Personal Data internationally.

10. Retention

We retain Personal Data only as long as necessary for the purposes described in this Policy, including satisfying legal, accounting, or reporting requirements. Retention periods vary depending on the nature of the data and whether an ongoing client relationship exists.

11. Security

We implement reasonable administrative, technical, and organisational measures designed to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. No online transmission is completely secure; we encourage you to use unique passwords and secure channels when sharing confidential project details.

12. Your rights (EEA, UK, and similar regimes)

Depending on your location and applicable law, you may have rights including access, rectification, erasure, restriction of processing, objection to processing based on legitimate interests, data portability, and withdrawal of consent where processing is consent-based. You may lodge a complaint with a supervisory authority — in Bulgaria, for example, the Commission for Personal Data Protection— while remaining entitled to pursue remedies before courts.

13. Other regions

If you reside in jurisdictions with additional privacy statutes (including certain US states or Canada), we honour applicable requirements that apply to our processing to the extent relevant to how you interact with us. Specific rights and complaint mechanisms depend on local law.

14. Marketing communications

Where we send optional commercial messages and the law requires consent or opt-out mechanisms, we comply with those rules. You may opt out of promotional emails using instructions provided in those emails where applicable.

15. Third-party websites and embeds

The Website may link to third-party sites or embed tools operated by others (for example professional networks or scheduling services). Their privacy practices govern information you provide directly to them. We encourage you to read their policies before submitting data.

16. Children

The Website is not directed at individuals under 16. We do not knowingly collect Personal Data from children. If you believe we have received such information, please contact us and we will take appropriate steps to delete it.

17. Contact

For privacy-related questions or requests, email info@aerra.io. For general project enquiries, see Contact.