Privacy Policy

A. Definitions

This policy uses the definitions from the GDPR and applicable privacy laws, including:

  • Personal Data – Information relating to an identified or identifiable natural person.
  • Processing – Any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
  • Usage Data – Information collected automatically when using our services (e.g., IP address, browser type, device information).
  • User – Any person using AELYST’s services.
  • Data Controller – The entity determining the purposes and means of processing personal data (AELYST/Agni Sentral Motor).
  • Data Processor – An entity processing data on behalf of the Data Controller.

B. General Information on Data Processing

1. Data Controller

AELYST is operated by:

Agni Sentral Motor – AELYST
[Insert Registered Address]
Email: privacy@aelyst.com

We are responsible for determining how and why personal data is processed. For privacy-related requests, contact us at the email above.

2. Legal Basis for Processing

We process personal data only when there is a lawful basis, including:

  • Your consent (Art. 6(1)(a) GDPR)
  • Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
  • Legal obligations (Art. 6(1)(c) GDPR)
  • Our legitimate interests, provided these do not override your rights (Art. 6(1)(f) GDPR)

3. Your Rights

Depending on your location, you may have the right to:

  • Access your data
  • Rectify inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time
  • Lodge a complaint with a data protection authority

Requests should be sent to privacy@aelyst.com. We will respond within the timeframes required by law.

4. Data Transfers

If we transfer your data outside the EU/EEA/UK, we ensure an adequate level of protection through:

  • Adequacy decisions
  • Standard Contractual Clauses
  • Other legally recognized safeguards

5. Data Sharing

We may share personal data with:

  • Hosting and cloud providers
  • Security, analytics, and marketing services
  • Payment processors
  • Legal and regulatory authorities (where required)

We carefully select and contractually bind our service providers to follow our instructions and maintain data security.
We are not responsible for third-party privacy practices; please review their policies before sharing data.

6. Data Security

We use reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain data only as long as necessary for its intended purpose or as required by law. Server logs are stored for up to 30 days unless extended retention is required for legal compliance.

8. Children

Our services are not intended for individuals under 16. We do not knowingly collect personal data from minors.

9. Automated Decision-Making

We do not use automated decision-making with legal or similarly significant effects. Limited profiling may be used for service improvements.

C. Data Collection and Use

We collect data when you:

  • Visit our website (IP address, browser type, access logs)
  • Submit forms (name, company, email, phone)
  • Sign up for an account (name, email, password)
  • Interact with our chat widget (messages, metadata)
  • Make payments via our payment processors (handled securely by Stripe)

We use this data to provide and improve services, process transactions, respond to inquiries, and comply with legal obligations.

1. Social Login

You may log in using Google. We receive only your name and email. Your Google password is never shared with us.

2. Cookies & Analytics

We use cookies and similar technologies for website functionality, analytics, and marketing (with your consent where required).
Analytics tools include Google Analytics 4 (with IP anonymization) and other services that help us improve site performance.

You can manage cookie preferences via your browser or our cookie settings.

3. CRM & Communication

We store contact details in our CRM (HubSpot) for customer relationship management, based on consent or legitimate interest.

4. Chat Widget

Our AI chat widget may collect names, emails, phone numbers, chat logs, and metadata. Data is used solely to process your inquiries and improve services.

5. Payments

Payments are processed by Stripe. We do not store your full payment details. Stripe’s policy is available at https://stripe.com/privacy.

D. Brazilian Users (LGPD)

Brazilian residents have rights similar to those under the GDPR, including:

  • Confirmation of processing
  • Access, correction, or deletion of personal data
  • Portability of data
  • Withdrawal of consent
  • Filing complaints with the ANPD

Requests can be sent to privacy@aelyst.com.

E. Limitation of Liability

To the fullest extent permitted by law, AELYST and its affiliates shall not be liable for:

  • Indirect, incidental, or consequential damages
  • Losses arising from third-party service providers’ actions or breaches
  • Data breaches caused by factors beyond our reasonable control

F. Changes to This Policy

We may update this Privacy Policy periodically. Continued use of our services after updates constitutes acceptance of the revised terms.

G. Contact

Agni Sentral Motor – AELYST
Email: privacy@aelyst.com