Privacy Notice

Last updated: July 3, 2026

This Privacy Notice explains how Aabas AI Technologies ("Aabas AI", "we", "us", "our") collects, uses, shares, and protects personal data when you use the Aabas AI service (the "Service"). Aabas AI Technologies is the data controller for personal data processed through the Service.

1. Personal data we collect

• Account data: name / display name, email address, login credentials, authentication provider identifiers.
• Profile & workspace data: plan tier, site configurations, affiliate products you add, generated content, and other data you create in the Service.
• Support & communications: messages you send us and our replies.
• Usage & telemetry: pages viewed, features used, generation counts, error logs.
• Device & connection data: IP address, browser and device identifiers, approximate location derived from IP.
• Cookies & local storage: as described in section 8 below.

Payment card details are collected and processed directly by our Merchant of Record, Paddle, and are not stored on our systems.

2. Purposes & legal bases

• Provide the Service — creating and operating your account, generating and hosting your content. Legal basis: performance of a contract.
• Security, abuse prevention & fraud detection — rate limiting, bot filtering, incident investigation. Legal basis: legitimate interests / legal obligation.
• Product improvement & analytics — understanding how the Service is used to improve it. Legal basis: legitimate interests.
• Customer support — responding to your requests. Legal basis: performance of a contract / legitimate interests.
• Marketing communications — occasional product updates. Legal basis: consent (where required) or legitimate interests, with an opt-out in every message.
• Legal compliance — meeting tax, accounting, and other legal obligations. Legal basis: legal obligation.

3. How we share personal data

We share personal data with the following categories of recipients:

• Service providers / sub-processors — hosting, database, authentication, analytics, email delivery, and support tooling providers who process data on our behalf under contract.
• Merchant of Record (Paddle) — for the sale of the Service, subscription management, payments, tax compliance, invoicing, and refund handling.
• AI model providers — the content and prompts you submit for generation are sent to third-party AI providers who process the request and return output; providers are contractually restricted from using your inputs to train their models where possible.
• Professional advisers — legal, accounting, and audit advisers under confidentiality obligations.
• Authorities — where required by law, regulation, court order, or to protect our rights or those of others.
• Successors — in connection with a merger, acquisition, or sale of assets.

We do not sell personal data.

4. International transfers

Personal data may be processed in countries outside your own, including the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

5. Retention

We retain personal data for as long as your account is active and for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, data is deleted or anonymised. Content you create can be exported or deleted at any time from within the Service.

6. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. Where processing is based on consent, you can withdraw it at any time. You also have the right to lodge a complaint with your local data protection authority. To exercise your rights, email us at hello@aabasai.com; we respond within one month.

7. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, isolated per-user data with row-level security, and regular review of our providers. No system is perfectly secure, but we work to reduce risk.

8. Cookies

We use strictly necessary cookies and local storage to keep you signed in and remember your preferences. We may use limited analytics cookies to understand usage of the Service. Where required by law, we ask for your consent before setting non-essential cookies. You can manage cookies from your browser settings.

9. Children

The Service is not directed to children under the age required to enter a binding contract in their jurisdiction. We do not knowingly collect personal data from such children.

10. Changes to this notice

We may update this notice from time to time. Material changes will be notified via the Service or by email.

11. Contact

Aabas AI Technologies — hello@aabasai.com.