Privacy Policy

1. INTRODUCTION

‍Autelo Ltd ("Autelo," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketing tool powered by AI (the "Service"). We believe in transparency. We want to make sure that your privacy is protected and respected. This policy is here to let you know the types of data we collect when you use our Service, why we collect it, how we use it, and how we keep it safe. We've also outlined the rights you have regarding your data.Autelo Ltd is registered with the Information Commissioner's Office (ICO) as a data controller.

This Privacy Policy and our data practices are governed by the UK General Data Protection Regulation (UK GDPR) as enshrined in the Data Protection Act 2018 and subsequent revisions. Users operating in international markets should consider their local privacy regulations if they are more stringent or different from UK data protection laws.Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

If you do not agree with our policies and practices, please do not use our Service. This Privacy Policy should be read alongside our separate Cookie Policy and Terms of Use, which provide additional information about cookies and the terms governing your use of our Service.

‍2. DATA CONTROLLER

‍Autelo Ltd is the data controller responsible for your personal information collected through the Service. If you have any questions or concerns about our Privacy Policy or data practices, please contact us using the details provided in Section 14.

‍3. INFORMATION WE COLLECT

‍We collect several types of personal data from and about users of our Service, including:

‍3.1 Personal Information You Provide to Us
‍
- Full name
- Email address
- LinkedIn URL
- LinkedIn profile information (professional experience, education, skills)
- Job titles and employment history
- Business contact information
- Company/organization affiliations
- Connection data (network size, connection types)Content engagement metrics (posts viewed, interactions)
- Professional interests and groups
- Profile photos
- Marketing preferences
- Documents and content submitted to the knowledge base for AI content generation

3.2 Information Collected Automatically
‍
- Device information (IP address, browser type, device type)
- Usage data (features used, time spent in app)
- Geographic location (country/region level)

‍3.3 Payment Information
‍
‍Payment details are processed securely by Stripe and are not stored directly by us. You can review Stripe's privacy practices by visiting their Privacy Policy at https://stripe.com/privacy. As our payment processing partner, Stripe maintains industry-standard security certifications and implements strong safeguards for handling your financial information.

‍4. HOW WE COLLECT YOUR INFORMATION

‍We collect information from you in the following ways:

‍Direct interactions: Information you provide when you register for an account, update your profile, submit content to the knowledge base, or interact with our Service.
‍Authentication services: Information received when you log in using email/password, LinkedIn, or Google authentication.
‍Automated technologies: Information collected automatically through cookies and similar technologies.
‍Third-party sources: Information we may receive from LinkedIn through the LinkedIn Partner API when you connect your LinkedIn account to our Service.

‍5. HOW WE USE YOUR INFORMATION AND LEGAL BASIS FOR PROCESSING

‍We use your information for the following purposes, based on the following legal grounds:

‍Performance of Contract - Processing necessary for the performance of our contract with you:To provide, maintain, and improve our ServiceTo process and fulfill your requests and transactionsTo generate AI-powered marketing content based on your knowledge base and preferences. To communicate with you about your account or our Service. To respond to your inquiries and provide customer support.

‍Legitimate Interests - Processing necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms:
- To personalize your experience and deliver content relevant to your interests
- To send you technical notices, updates, security alerts, and administrative messages
- For research and analytics to better understand how users access and use our Service
- To protect our Service and maintain securityTo enforce our terms, conditions, and policies
- To make our services more sustainable, inclusive, and user-friendly

‍Legal Obligation - Processing necessary for compliance with our legal obligations:
- To comply with applicable laws and regulations
- To respond to lawful requests from public authorities

‍Consent - Processing based on your specific consent:
- To send marketing communications
- To process certain categories of personal data where required by law

‍6. COOKIES NOTICE

‍For detailed information about our use of cookies and similar technologies, please refer to our separate Cookie Policy. We will request your explicit consent before placing non-essential cookies on your device. Essential cookies required for the basic functioning of our Service may be placed without explicit consent as permitted by law. 

‍7. RECIPIENTS OF YOUR INFORMATION

‍We may disclose your personal information to the following categories of recipients:

‍Service Providers and Processors: Contractors, service providers, and other third parties we use to support our business, including:
- Cloud hosting providers (AWS, UK-based servers)
- Payment processors (Stripe)
- Authentication service providers (Google, LinkedIn)
- Analytics providers (Google Analytics - anonymized data only)
- AI service providers (Anthropic for Claude models, Amazon for Stable Diffusion)

‍Legal and Regulatory Bodies:
- Government and regulatory authorities when required by law
- Law enforcement agencies pursuant to legal processes or requirements

‍Business Partners:
- LinkedIn (when you connect your LinkedIn account to our Service)

‍Others:
- To fulfill the purpose for which you provide it
- For any other purpose disclosed by us when you provide the information
- To enforce our Terms of Service and other agreements
- If we believe disclosure is necessary to protect the rights, property, or safety of Autelo, our users, or others

‍8. DATA RETENTION

‍We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

‍Active accounts: We retain your data for the duration of your account with us
‍Closed/deleted accounts: We delete or anonymize your personal data within 30 days of account closure
‍Inactive accounts: Accounts with no login activity for 12 months are considered inactive, and you will be notified before any data is deleted
‍Backups: We may retain backup copies of your information for up to 90 days
‍Anonymized data: We may retain anonymized, aggregated data for analytical purposes. Documents submitted to the knowledge base will be deleted along with other user data if you delete your account.

‍9. YOUR RIGHTS

‍Depending on your location, you may have certain rights regarding your personal information. You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate personal information
- Request deletion of your personal information
- Object to processing of your personal informationRequest restriction of processing your personal information
- Request transfer of your personal informationWithdraw consent where we rely on consent to process your information
- Lodge a complaint with a supervisory authority

‍Right to Complain to a Supervisory Authority If you are located in the UK, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). If you are located in the European Economic Area (EEA), you may complain to the data protection authority in the country where you live or work.We would, however, appreciate the chance to address your concerns before you approach a supervisory authority, so please contact us first.

‍How to Exercise Your Rights To exercise any of these rights, please contact us using the details provided in Section 14.

‍10. DATA SECURITY

‍We're serious about keeping your data safe. We implement appropriate technical and organizational measures to protect your personal information from accidental loss and unauthorized access, use, alteration, and disclosure.Our security measures include:
- Physical, electronic, and managerial procedures
- Encryption of data in transit using TLS (Transport Layer Security) and at rest
- .Restricted access to personal information (only to employees who need it to perform their jobs)
- Regular security assessments and updates
- Secure data storage within the United Kingdom (AWS)

‍11. DATA BREACH PROCEDURES

‍Despite our best efforts to ensure the security of your data, no system is 100% secure. In the unlikely event of a data breach that compromises your personal information:

‍Notification: We will notify affected users and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by law.
‍Investigation: We will promptly investigate the breach and take appropriate corrective action.
‍Mitigation: We will take necessary steps to minimize harm and prevent further unauthorized accessYour privacy and data security are of utmost importance to us. We are committed to resolving any data breaches and their consequences as swiftly as possible.

‍11. INTERNATIONAL DATA TRANSFERS

‍Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.For transfers from the UK or European Economic Area (EEA) to countries not deemed to provide an adequate level of data protection, we implement appropriate safeguards, including:
- Standard Contractual Clauses approved by the European Commission or UK authorities
- Binding Corporate Rules for transfers among our group companies
- Consent mechanisms, where appropriate
- Other legally approved mechanisms

‍12. CHILDREN'S PRIVACY

‍Our Service is not intended for individuals under the age of 16, which aligns with LinkedIn's minimum age requirement. We do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16, we will undertake our best efforts to delete that information. If you believe we might have any information from or about a child under 16, please contact us via the contact information found in Clause 14 of this policy.

‍13. CHANGES TO OUR PRIVACY POLICY

‍We may update our Privacy Policy from time to time.The date the Privacy Policy was last revised is identified at the top of this document. We will provide at least 30 days' notice before any material changes become effective, giving you time to review the changes and decide whether to continue using the Service under the modified policy.Your continued use of our Service after we post any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to the modified Privacy Policy. We will keep previous versions of this Privacy Policy in an archive for your review upon request.

‍14. CONTACT INFORMATION

‍If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at:
‍Autelo Ltd
‍Attention: Data Protection Officer (James Ker-Reid)
128 City RoadLondon, United Kingdom EC1V 2NX
Email: team@autelo.ai

We aim to respond to all legitimate inquiries within the appropriate time frame. Inquiries containing multiple requests will be responded to within 90 days.

‍15. AI-POWERED FEATURES

‍Autelo uses AI technology (Claude 3.7 or Claude 3.5 Sonnet and Amazon Stable Diffusion) to generate content for users. This AI functionality:
- Processes documents and information submitted by you to the knowledge base
- Generates content suggestions for LinkedIn posts or blog content
- Creates images using Amazon Stable Diffusion
- Does not make automated decisions without human oversight
- Requires user approval before any content is posted or published
- All AI-generated content is subject to your review and approval before it is posted or shared. Documents submitted to the knowledge base are used solely for the purpose of providing relevant, high-performing content suggestions.

‍AI Data Processing Information:
Our AI services use models from Anthropic (Claude) and Amazon (Stable Diffusion). The AI processing occurs on servers located in the UK and EU. Your prompts and knowledge base content are not used to train or improve the underlying AI models. When you use our AI features, no personally identifiable information is stored in the AI models themselves. All data submitted to our AI features is subject to the same security measures and data retention policies outlined in this Privacy Policy. For more information on how Anthropic and Amazon AI solutions process your data, you can follow the below links:

https://www.anthropic.com/legal/privacy‍https://aws.amazon.com/privacy/