Aldera

Privacy Policy

Effective Date: 4 May 2025

Last Updated: 4 May 2025

Aldera ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our mobile application and related services (collectively, the "Services").

By using Aldera, you agree to the collection and use of information in accordance with this policy. Where material changes are made, we may request your explicit consent.

1. Who We Are

Aldera is an AI-powered marketing platform designed to assist small businesses with campaign creation, content generation, and scheduling. We are registered in the United Kingdom and operate in the UK and Australia.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Australian Privacy Act 1988, Aldera is the data controller of your personal data. We engage third-party providers as data processors to deliver our services.

2. Information We Collect

We collect and process the following types of personal information:

a) Account & Business Information

  • Full name
  • Email address
  • Password (hashed and salted)
  • Business name and industry
  • Business description, tone of voice, and target audience
  • Operating location (entered by user)

b) Content Data

  • Images uploaded by users for marketing purposes
  • AI-generated posts and captions associated with your business

c) Technical Data

  • Authentication data via AWS Cognito (EU-West-2)
  • System logs for security and troubleshooting

We do not currently collect GPS location, device identifiers, or behavioral analytics.

3. How We Use Your Information

We use your data to:

  • Provide and maintain our Services
  • Generate marketing campaigns and content
  • Improve content quality using AI analysis
  • Communicate important information (e.g., updates or campaign-related notifications)
  • Respond to support requests

You are responsible for maintaining the confidentiality of your login credentials and any content you upload through Aldera.

4. Legal Bases for Processing

We process your data under the following legal bases:

  • Performance of Contract: To deliver the services you sign up for
  • Consent: For optional features such as marketing communications
  • Legitimate Interests: For service improvement, security, and fraud prevention
  • Legal Obligation: Where we are legally required to process certain data

5. Data Sharing and International Transfers

We may share your information with the following data processors:

  • Amazon Web Services (AWS) – for secure hosting, storage, and authentication (EU-West-2)
  • OpenAI – for AI-powered content generation (data processed in the United States)

Your data may be transferred outside the UK or Australia (e.g., to the US). In such cases, we rely on Standard Contractual Clauses (SCCs) and conduct transfer risk assessments to safeguard your data. You may request a copy of these safeguards by contacting us.

6. Your Rights

You have the right to:

  • Access and update your data (via app settings)
  • Request deletion of your account (via support@aldera.co.uk)
  • Object to or restrict certain processing activities
  • Withdraw consent at any time (where applicable)
  • Lodge a complaint with your local data protection authority

7. Data Retention

We retain your data as long as your account is active or as needed to provide services. If you request account deletion, your data will be removed accordingly. We may retain certain information to comply with legal obligations or resolve disputes. Inactive accounts may be reviewed for deletion after 24 months of non-use.

8. Children's Privacy

Aldera is intended for users aged 18 and over. We do not knowingly collect or process data from children.

9. Security Measures

We implement a variety of safeguards to protect your data, including encryption, access controls, and secure cloud infrastructure. However, no method of transmission over the internet or storage system is entirely secure.

10. Marketing & Notifications

With your explicit consent, we may send:

  • In-app notifications about features and subscription tiers
  • Email or push notifications regarding your account or services

You may opt out of marketing communications at any time via app settings or by contacting support.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services or legal obligations. If the changes are material and affect how we use your personal data, we will notify you and request your renewed consent. For other updates, your continued use of the Services after such changes constitutes acceptance.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: support@aldera.co.uk