Privacy Policy
Disclaimer: This Privacy Policy is provided for informational purposes only and does not constitute legal advice. While AELYST aligns its practices with the principles of the EU General Data Protection Regulation (GDPR) and similar laws, this document has not been reviewed or certified by a GDPR auditor. Nothing in this document constitutes a guarantee of absolute security or compliance.
A. Definitions
This policy uses the definitions from the GDPR and applicable privacy laws, including:
- Personal Data – Information relating to an identified or identifiable natural person.
- Processing – Any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
- Usage Data – Information collected automatically when using our services (e.g., IP address, browser type, device information).
- User – Any person using AELYST’s services.
- Data Controller – The entity determining the purposes and means of processing personal data (AELYST/Agni Sentral Motor).
- Data Processor – An entity processing data on behalf of the Data Controller.
B. General Information on Data Processing
1. Data Controller
AELYST is operated by:
Agni Sentral Motor – AELYST
[Insert Registered Address]
Email: privacy@aelyst.com
We are responsible for determining how and why personal data is processed. For privacy-related requests, contact us at the email above.
2. Legal Basis for Processing
We process personal data only when there is a lawful basis, including:
- Your consent (Art. 6(1)(a) GDPR)
- Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
- Legal obligations (Art. 6(1)(c) GDPR)
- Our legitimate interests, provided these do not override your rights (Art. 6(1)(f) GDPR)
3. Your Rights
Depending on your location, you may have the right to:
- Access your data
- Rectify inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with a data protection authority
Requests should be sent to privacy@aelyst.com. We will respond within the timeframes required by law.
4. Data Transfers
If we transfer your data outside the EU/EEA/UK, we ensure an adequate level of protection through:
- Adequacy decisions
- Standard Contractual Clauses
- Other legally recognized safeguards
5. Data Sharing
We may share personal data with:
- Hosting and cloud providers
- Security, analytics, and marketing services
- Payment processors
- Legal and regulatory authorities (where required)
We carefully select and contractually bind our service providers to follow our instructions and maintain data security.
We are not responsible for third-party privacy practices; please review their policies before sharing data.
6. Data Security
We use reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data Retention
We retain data only as long as necessary for its intended purpose or as required by law. Server logs are stored for up to 30 days unless extended retention is required for legal compliance.
8. Children
Our services are not intended for individuals under 16. We do not knowingly collect personal data from minors.
9. Automated Decision-Making
We do not use automated decision-making with legal or similarly significant effects. Limited profiling may be used for service improvements.
C. Data Collection and Use
We collect data when you:
- Visit our website (IP address, browser type, access logs)
- Submit forms (name, company, email, phone)
- Sign up for an account (name, email, password)
- Interact with our chat widget (messages, metadata)
- Make payments via our payment processors (handled securely by Stripe)
We use this data to provide and improve services, process transactions, respond to inquiries, and comply with legal obligations.
1. Social Login
You may log in using Google. We receive only your name and email. Your Google password is never shared with us.
2. Cookies & Analytics
We use cookies and similar technologies for website functionality, analytics, and marketing (with your consent where required).
Analytics tools include Google Analytics 4 (with IP anonymization) and other services that help us improve site performance.
You can manage cookie preferences via your browser or our cookie settings.
3. CRM & Communication
We store contact details in our CRM (HubSpot) for customer relationship management, based on consent or legitimate interest.
4. Chat Widget
Our AI chat widget may collect names, emails, phone numbers, chat logs, and metadata. Data is used solely to process your inquiries and improve services.
5. Payments
Payments are processed by Stripe. We do not store your full payment details. Stripe’s policy is available at https://stripe.com/privacy.
D. Brazilian Users (LGPD)
Brazilian residents have rights similar to those under the GDPR, including:
- Confirmation of processing
- Access, correction, or deletion of personal data
- Portability of data
- Withdrawal of consent
- Filing complaints with the ANPD
Requests can be sent to privacy@aelyst.com.
E. Limitation of Liability
To the fullest extent permitted by law, AELYST and its affiliates shall not be liable for:
- Indirect, incidental, or consequential damages
- Losses arising from third-party service providers’ actions or breaches
- Data breaches caused by factors beyond our reasonable control
F. Changes to This Policy
We may update this Privacy Policy periodically. Continued use of our services after updates constitutes acceptance of the revised terms.
G. Contact
Agni Sentral Motor – AELYST
Email: privacy@aelyst.com
Last Updated: August 16, 2025