Privacy Policy

1. Information We Collect

We collect information in three ways: (a) information you provide directly, (b) information we collect automatically as you use the Services, and (c) information from third parties.

• Account & contact information — name, email address, password (hashed), company name, phone number if provided.
• Billing information — billing address, last four digits of card, card brand, transaction history. Full card numbers and CVCs are processed and stored by Stripe; we do not store them on our servers.
• Brand & service data — websites, brand assets, content, competitive context, and any information you upload or share so we can perform the Services.
• Communications — emails, support tickets, call notes, and feedback you send us.
• Technical & usage data — IP address, device and browser type, operating system, referrer URL, pages visited, timestamps, and approximate location derived from IP.
• Cookies and similar technologies — see Section 7.

2. How We Use Information

We use information to:

• provide, operate, maintain, and improve the Services;
• process subscriptions, payments, refunds, and invoices through Stripe;
• communicate with you about your account, transactions, product updates, and support requests;
• send marketing communications you have opted into (you can unsubscribe at any time);
• detect, investigate, and prevent fraud, abuse, and security incidents;
• comply with legal obligations and enforce our Terms of Service.

3. Legal Bases (EU/UK Visitors)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data under the following legal bases of the GDPR:

• Performance of a contract — to deliver the Services you signed up for.
• Legitimate interests — to operate, secure, and improve our business, where not overridden by your rights.
• Consent — for optional marketing emails and certain cookies; you may withdraw consent at any time.
• Legal obligation — to meet tax, accounting, and regulatory requirements.

4. How We Share Information

We do not sell your personal information. We share it only with:

• Service providers who process data on our behalf under written agreements — including Stripe (payments), email delivery providers, hosting (Vercel, AWS), analytics, and customer support tools.
• Professional advisers — auditors, lawyers, and accountants under confidentiality obligations.
• Legal & safety — when required by law, court order, or to protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case we will notify you.

5. International Data Transfers

We are based in the United States. If you access the Services from outside the U.S., your information may be transferred to, processed in, and stored in the U.S. or other countries where our service providers operate. Where required, we rely on appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission to protect transfers.

6. Data Retention

We keep personal data only as long as needed to provide the Services and for legitimate business or legal purposes — for example, to comply with tax and accounting requirements, resolve disputes, enforce our agreements, and prevent fraud. When data is no longer needed, we delete or anonymize it.

7. Cookies & Analytics

We use cookies and similar technologies to keep you signed in, remember preferences, measure traffic, and improve the Services. You can control cookies through your browser settings; blocking some cookies may affect functionality. Where required by law, we ask for your consent before using non-essential cookies.

8. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), encryption at rest where applicable, access controls, and regular reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information (subject to legal retention requirements);
• Port your data to another service in a machine-readable format;
• Restrict or object to certain processing, including direct marketing;
• Withdraw consent for processing based on consent;
• Lodge a complaint with your data protection authority.

California residents also have specific rights under the CCPA and CPRA, including the right to know what personal information we collect, the right to deletion, the right to correct, the right to limit the use of sensitive personal information, and the right to non-discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.

To exercise any right, email privacy@aeomedia.ai. We will verify your request and respond within the time required by applicable law.

10. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us at privacy@aeomedia.ai and we will delete it.

11. Third-Party Links

The Services may link to third-party websites or services. We are not responsible for the privacy practices of those third parties; please review their policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or posted prominently on the Services. The "Effective date" at the top reflects the latest revision.

13. Contact Us

For privacy questions, requests, or concerns, contact: