Last updated 9 April 2026 · Applies to aerlou.com and all Aerlou products
Effective date: 9 April 2026 · Last updated: 9 April 2026
Applies to: aerlou.com and all Aerlou products and services
Aerlou is a personal AI assistant that works inside WhatsApp, operated through aerlou.com. Our registered place of business is in the United Arab Emirates. For all privacy-related enquiries, contact us at:
Aerlou processes personal data in compliance with the following applicable laws and regulations:
If you connect third-party services (such as Google Calendar or an email account), we access only the data necessary to fulfil the integration function you have requested. We do not access or store data beyond the scope of the connected integration.
| Purpose | Legal Basis |
|---|---|
| Providing and operating the Aerlou platform and its features | Performance of contract |
| Processing voice notes, documents, and messages to generate AI outputs | Performance of contract |
| Maintaining your reminders, notes, lists, and contact memory | Performance of contract |
| Sending service notifications, reminders, and follow-up messages on your behalf | Performance of contract / Legitimate interest |
| Improving model accuracy, safety, and platform performance | Legitimate interest |
| Billing, subscription management, and fraud prevention | Legal obligation / Performance of contract |
| Responding to support requests and customer communications | Performance of contract |
| Complying with legal obligations and regulatory requirements in the UAE | Legal obligation |
| Sending product updates and communications (you may opt out at any time) | Consent / Legitimate interest |
We do not use your personal data or your contacts' data to train third-party AI models. We do not sell, rent, or share personal data with advertisers or data brokers.
Aerlou uses large language models (LLMs) from third-party AI providers to generate responses and execute tasks. The following applies to all AI processing:
Aerlou integrates with the WhatsApp Business API operated by Meta Platforms Ireland Limited. The following applies:
Aerlou is a personal assistant tied to a single subscriber. The following applies to your account:
We share personal data only in the following circumstances:
We share data with third-party service providers who assist us in operating the platform. All providers are bound by data processing agreements and are permitted to use data only for the specific purpose for which it was shared. These include:
Where you have authorised a third-party integration (such as Google Calendar or an email account), we transmit the data required to fulfil that integration on your instruction. You should review the privacy policies of any third-party platforms you connect.
We may disclose personal data to government authorities, regulators, or law enforcement where we are legally required to do so under UAE law or applicable international obligations. We will notify you of any such disclosure where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the acquiring entity. We will notify users prior to such a transfer taking effect and ensure that the receiving entity is bound by equivalent data protection obligations.
Aerlou's primary infrastructure is hosted within cloud data centres. Data may be processed outside the UAE where our AI providers or infrastructure partners operate data centres in other jurisdictions, including the European Union and the United States. Where such transfers occur, we ensure they are conducted under appropriate safeguards, including standard contractual clauses or equivalent mechanisms recognised under the UAE PDPL.
| Data Type | Retention Period |
|---|---|
| Account and profile data | Duration of subscription plus 90 days following account closure |
| Reminders, notes, and contact memory | Duration of subscription; exportable on request before closure |
| AI interaction transcripts | 12 months from date of interaction |
| Voice note originals | 30 days from submission (transcripts retained per above) |
| Uploaded documents | Duration of subscription; deleted within 30 days of account closure |
| Payment and billing records | 7 years from transaction date (UAE regulatory requirement) |
| Support communications | 3 years from last interaction |
| Usage and access logs | 12 months |
Following the applicable retention period, data is securely deleted or anonymised. Anonymised or aggregated data that cannot be used to identify any individual may be retained indefinitely for product analytics purposes.
Under the UAE PDPL and applicable data protection law, you have the following rights in respect of your personal data:
To exercise any of these rights, contact us at privacy@aerlou.com. We will respond within 30 days. We may require verification of your identity before fulfilling a request. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and, where required, the relevant supervisory authority, within the timeframes prescribed by applicable law.
Our website at aerlou.com uses cookies and similar technologies for the following purposes:
We do not use advertising or cross-site tracking cookies. You can manage cookie preferences through your browser settings or our cookie preference centre on the website.
Aerlou is intended for use by individuals aged 18 and over. We do not knowingly collect personal data from persons under the age of 18. If we become aware that a minor has provided personal data, we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify registered users of material changes by email or through the platform at least 14 days before the changes take effect. The updated policy will be published at aerlou.com/privacy with the revised effective date. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
For any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, contact us at privacy@aerlou.com.
If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Office (dataoffice.ae) or the relevant supervisory authority in your jurisdiction.