This Privacy Policy explains how Aleas ("Aleas", "we", "us", or "our") collects, uses, stores, and shares personal information when you use our website at aleasai.com or interact with our WhatsApp assistant.
Aleas is a sole-trader business operated by Humaidh, based in Sri Lanka. If you have any questions about this policy or your data, contact us at humaidh@aleasai.com.
We act as the data controller for the information described here. We process personal data in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (PDPA), and, where it applies to you, comparable data-protection laws such as the EU/UK GDPR.
01What we collect
When you use our website
If you submit our contact form, we collect:
- Your name
- Your email address
- Your company name (optional)
- The message you send us
Our website does not use analytics, advertising trackers, or marketing cookies, and we do not set tracking cookies of our own. Our hosting and contact-form provider (Netlify) may automatically process limited technical information such as your IP address and browser type as part of delivering the service and protecting against spam.
When you message our WhatsApp assistant
When you send a message to our WhatsApp assistant, we receive and process:
- Your WhatsApp phone number
- Your WhatsApp profile name
- The content of the messages you send
- Technical message identifiers (used to avoid processing the same message twice)
We only receive this information if you choose to message us first. We do not obtain your number from any other source.
02How we use your information
We use your information to:
- Respond to your enquiries and answer questions about Aleas and our services.
- Generate replies in the WhatsApp assistant using an AI model (see section 04).
- Route your message to a human when the assistant cannot answer it, so we can follow up with you.
- Operate, secure, and improve our website and assistant (for example, preventing spam and duplicate processing).
We do not sell your personal information, and we do not use it for advertising.
Legal basis (where the GDPR applies): we process your data on the basis of your consent (you chose to contact us) and our legitimate interest in responding to enquiries and running our business.
03How long we keep it
- WhatsApp conversation history is stored temporarily and automatically deleted after 24 hours. We do not maintain a long-term database of your chat history in the assistant.
- Handoff emails — when the assistant routes your message to a human, a copy of that conversation is emailed to us and stored in our email inbox. We keep these only as long as needed to respond to and manage your enquiry, then delete them.
- Contact-form submissions are delivered to our email inbox and retained on the same basis — only as long as needed to handle your enquiry.
04Who we share it with
We use trusted third-party service providers ("sub-processors") to run our website and assistant. Your data may be processed by:
Your use of WhatsApp is also governed by Meta's own Privacy Policy. We recommend you review it.
International transfers: several of these providers are based outside Sri Lanka (primarily in the United States). This means your data may be transferred to and processed in other countries. We rely on these providers' own safeguards and contractual terms to protect your data in transit and storage.
05AI processing
Replies from our WhatsApp assistant are generated by an AI language model (Google's Gemini). The content of your messages is sent to this model to produce a relevant response. The assistant is designed to answer questions about Aleas and to connect you with a human when needed.
We currently use Google's Gemini API on its free tier. Under Google's terms, content sent to this service may be used by Google to provide, improve, and develop its products and machine-learning technologies, and may be reviewed by Google's human reviewers. Google's handling of this data is governed by its own terms and privacy policy. We do not control this processing, and we share only the content of your messages needed to generate a reply.
Please do not send sensitive personal information (such as financial details, identification numbers, or health information) through the assistant.
06Your rights
Depending on the laws that apply to you (including the Sri Lanka PDPA and, where relevant, the GDPR), you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (the "right to erasure")
- Object to or restrict certain processing
- Withdraw consent at any time
To exercise any of these rights, email us at humaidh@aleasai.com. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with the relevant data-protection authority (in Sri Lanka, the Data Protection Authority established under the PDPA).
07Security
We use reputable service providers and reasonable technical measures to protect your data, including transport encryption (HTTPS) and validation of incoming requests. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and limit how long it is kept.
08Children
Our services are intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
09Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be posted on this page.
10Contact
For any privacy questions or requests, email humaidh@aleasai.com.
Aleas · Sole trader · Sri Lanka