Privacy Policy

1. Who We Are

AeroSearchAI ("the Service") is operated by Dot Aero (OPC) Private Limited (trading as Aero Business Solutions) ("we", "us", "our"). For the purposes of applicable data protection laws, Dot Aero (OPC) Private Limited is the data controller of the personal data processed through the Service. If you have questions about this policy or your data, contact us at privacy@aerobusinesssolutions.com.

2. Information We Collect

We collect the following categories of personal data:

• Account data: name, email address, authentication identifiers.
• Project data: website URLs, industry, and configuration you provide.
• Google API data: read-only Google Search Console and Google Analytics metrics (clicks, impressions, queries, sessions, landing pages) when you connect those services.
• Usage and device data: log data, IP address, browser and device identifiers, feature usage.
• Support data: messages and attachments you send to our support team.
• Billing identifiers: a customer/subscription reference returned by our payment provider (we do not store card numbers).
• Email engagement data: whether emails we send you are opened and which links in them are clicked.
• Embedded tool data: when our tools are embedded on a customer's website, we process pseudonymous visitor identifiers and usage counts on that customer's behalf.

3. How We Use Your Information & Legal Basis

We process your personal data for the following purposes and on the following legal bases:

• To provide the Service (account creation, audits, dashboards, AI recommendations) — performance of a contract.
• To process payments and manage subscriptions via our payment provider — performance of a contract.
• To secure the Service and prevent fraud or abuse — legitimate interests.
• To improve features and diagnose issues through aggregated usage analytics — legitimate interests.
• To send product and marketing communications where permitted, and to measure whether those emails are opened or acted on so we can keep them relevant — consent (withdrawable at any time) or legitimate interests.
• To comply with legal obligations (tax, accounting, lawful requests) — legal obligation.

We do not sell your personal data.

4. Google API Data

AeroSearchAI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request read-only access to your Search Console and Analytics data, and this data is used exclusively to provide you with SEO insights within the application.

5. Embedded Tools on Third-Party Websites

Customers may embed AeroSearchAI tools on their own websites. When a visitor uses such an embedded tool, we process a pseudonymous visitor identifier and usage counts so the customer can see how their embed performs. For that visitor data, the website owner acts as the data controller and we act as a processor on their behalf. If you embed our tools on your website, you are responsible for informing your visitors as required by applicable law.

6. How We Share Your Information

We share personal data only with the following categories of recipients:

• Merchant of Record – Paddle. Our order process is conducted by our online reseller Paddle.com, which acts as the Merchant of Record for all orders. When you purchase a subscription, Paddle collects and processes your billing information (name, billing address, payment method, tax identifiers) to handle payments, subscription management, invoicing, tax compliance, returns, and customer service inquiries related to billing. Paddle acts as an independent data controller for that billing data. See Paddle's Privacy Policy and Buyer Terms.
• Service providers / subprocessors: hosting, database, email delivery, analytics, and support tooling that process data on our behalf under appropriate agreements.
• Professional advisers: legal, accounting, and audit advisers where reasonably necessary.
• Authorities: where required to comply with law, legal process, or to protect our rights.

7. Data Storage & Security

Your data is stored using industry-standard encryption in transit and at rest, with strict access controls. OAuth tokens are stored server-side and are never exposed to the client application. We implement row-level security policies so users can only access their own data. No method of transmission or storage is 100% secure, but we work to protect your information using appropriate technical and organisational measures.

8. Data Retention

Free plan users' data is retained for up to 6 months. Paid plan users' data is retained for up to 5 years, or for as long as your account remains active. Billing records retained by Paddle may be held longer where required for tax and accounting law. When data is no longer needed, it is deleted or anonymised.

9. Your Rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent at any time. You can also disconnect your Google accounts from the dashboard at any time. To exercise any right, contact us at privacy@aerobusinesssolutions.com. You also have the right to lodge a complaint with your local data protection authority.

10. Cookies

We use essential cookies to keep you signed in and secure the Service, and limited analytics cookies to understand usage. You can manage cookies through your browser settings.

11. Contact Us

Dot Aero (OPC) Private Limited — questions about this Privacy Policy can be sent to privacy@aerobusinesssolutions.com.