Last updated 18 June 2026 · Applies to aerlou.com and all Aerlou products
Effective date: 18 June 2026 · Last updated: 18 June 2026
Applies to: aerlou.com, the Aerlou web dashboard, and the Aerlou assistant on WhatsApp.
Aerlou is a personal AI assistant that you use by messaging our official WhatsApp business number, with an optional web dashboard at aerlou.com. The service is operated by Aerlou. We are in the process of registering a company in the United Arab Emirates; once registered, the operating entity and its registration details will be published here. For all privacy-related enquiries, contact us at:
This policy covers personal data we process when you visit aerlou.com, register for an account, and interact with the Aerlou assistant through WhatsApp or the web dashboard. It does not cover the practices of third parties whose services you separately use (for example WhatsApp/Meta, Google, or your network operator), which are governed by their own privacy policies.
We aim to process personal data in line with the following frameworks that apply to our operation:
If you connect a Google account, we access Google Calendar and Gmail data strictly to perform the actions you request (see Section 10). We request the narrowest scopes needed and do not access data beyond what those features require.
If you contact us by email, we use the details you provide (such as your email address and your message) solely to respond to your enquiry.
| Purpose | Lawful basis (where GDPR-style bases apply) |
|---|---|
| Providing and operating the assistant and its features | Performance of a contract |
| Processing your messages, voice notes, and documents to generate responses and carry out tasks you request | Performance of a contract |
| Maintaining your reminders, notes, lists, contacts, and saved items | Performance of a contract |
| Sending reminders, a daily brief, and service messages you have set up | Performance of a contract |
| Operating, securing, debugging, and improving the service | Legitimate interests |
| Managing account access and preventing fraud or abuse | Legitimate interests / Legal obligation |
| Responding to your support requests | Performance of a contract |
| Complying with legal and regulatory obligations | Legal obligation |
| Sending optional product updates (you can opt out at any time) | Consent / Legitimate interests |
We do not sell or rent your personal data, and we do not share it with advertisers or data brokers. We do not use your content, or information about your contacts, to train AI models.
Aerlou relies on third-party large language models (LLMs) and related AI services to understand your messages and generate responses. The following applies:
When you ask it to, the assistant can take actions on your behalf, such as creating reminders, to-dos, and lists; saving notes and contacts; logging expenses; and — if you have connected a Google account — creating calendar events and sending email from your connected Gmail account.
Aerlou is delivered through the WhatsApp Business Platform operated by Meta. The following applies:
You can control messaging at any time on WhatsApp: reply STOP to unsubscribe, START to resume, and HELP to reach support.
Aerlou is a personal assistant tied to a single account. The following applies to your account:
Connecting a Google account is optional. If you choose to connect it, you grant Aerlou access to the specific Google scopes needed for the features you use. Based on our current integration, these are:
Aerlou's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google user data solely to provide and improve the features you request, we do not transfer or sell it for advertising, and we do not use it to train generalised AI models. You can disconnect Google at any time from your dashboard or from your Google Account security settings, which revokes our access. [Note: the gmail.readonly scope is a "restricted" scope; before production use, confirm whether a Google CASA security assessment and verification are required.]
Our website at aerlou.com uses a small number of cookies and similar technologies:
We do not use advertising or cross-site tracking cookies. You can accept or reject analytics cookies using the banner shown on your first visit, and you can revisit your choice at any time through the . You can also control cookies through your browser settings.
We share personal data with the service providers below, who process it only to provide their service to us. This list reflects the integrations present in our service today and may change; we will keep it current. [Confirm each vendor relationship and that a data processing agreement is in place before publishing.]
| Provider | Purpose | Data involved |
|---|---|---|
| Meta (WhatsApp Business Platform) | Message delivery to and from WhatsApp | Phone number, message content, media, metadata |
| Groq, Inc. | AI inference (text, vision, voice transcription) | Message text, images, voice notes, document text, recent context |
| Calendar and Gmail features you connect | Calendar events and email content within granted scopes | |
| Serper (optional) | Web search assistance, if enabled | Your search query |
| Railway | Application hosting and managed PostgreSQL database | All account and service data at rest |
| Redis (optional) | Message de-duplication / queueing, if configured | Message identifiers |
| Open-Meteo | Weather in your daily brief, if enabled | Approximate location/city you set |
| Google Analytics | Website analytics (consent-based) | Pseudonymous usage and device data |
We may also disclose personal data to professional advisers, or to authorities and regulators where we are legally required to do so. In a merger, acquisition, or sale of our business, personal data may transfer to the acquiring entity under equivalent protections; we will notify users beforehand where required.
Aerlou is operated from the United Arab Emirates, and several of our providers operate infrastructure outside the UAE, including in the European Union and the United States. Where personal data is transferred internationally, we rely on appropriate safeguards recognised under the UAE PDPL (and, where relevant, GDPR mechanisms such as standard contractual clauses). [Confirm the actual hosting region of your Railway database and AI providers, and the transfer mechanism, with counsel.]
We keep your account and the items you save (reminders, notes, lists, contacts, conversation history, expenses, and similar) for as long as your account is active, so the assistant can remember what matters to you. You can delete individual items, or your entire account and all associated data, at any time (see Section 16). When you delete your account, the associated data is removed from our live database.
Subject to the UAE PDPL and other data protection laws that apply to you, you may have the right to:
To exercise these rights, email privacy@aerlou.com. We aim to respond within 30 days and may need to verify your identity first. There is no charge unless a request is manifestly unfounded or excessive.
You can erase your account and everything we have saved in any of these ways:
Deletion removes your portal account, conversation history, saved items, profile, and any stored Google authorisation from our live systems.
We will only send optional product or marketing messages where this is permitted and, where required, with your consent. You can opt out at any time — reply STOP on WhatsApp, use the unsubscribe option in any marketing email, or contact privacy@aerlou.com. Service messages necessary to operate your account (such as reminders you set, security notices, and important changes) are not marketing and may still be sent.
Aerlou is intended for use by individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that a minor has provided personal data, we will delete it.
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We will notify registered users of material changes by email or through the service before they take effect. The current version is always published at aerlou.com/legal, with the revised effective date. Continued use after the effective date constitutes acceptance.
For any question or request about this policy or our data practices, contact privacy@aerlou.com.
If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office (dataoffice.ae) or, if you are in the EEA or UK, with your local data protection authority.