Privacy Policy
Last updated:
This policy explains how Centauri Pvt Ltd ("we"), operator of AeroCite (https://aerocite.app), handles personal data. Contact: privacy@aerocite.app. Our postal address is Centauri Pvt Ltd, M. Rihaab, Malé 20324, Maldives.
If you use Sign in with Google, Google provides your account identifier and email address, and may provide your name and profile picture URL. Our authentication service stores these details. We use your email address to identify your AeroCite account. When Google sign-in is available, the login page loads Google's sign-in script, which contacts Google before you choose to use it.
1. What we collect
| Data | Why | Kept for | Legal basis |
|---|---|---|---|
| Email address, optional name, settings (default country, theme) | Your account and sign-in | Until you delete your account | Contract |
| Your questions, answers, the clause text they cite and the suggested questions shown with an answer | To show you the answer and your history | 30 days, then deleted | Contract |
| Usage records: time, country, answer status, cost and processing time (no question or answer text) | Running the service, billing accuracy, limits and abuse prevention | 30 days in detail; anonymous totals longer | Contract and legitimate interests (running the service, preventing abuse) |
| Troubleshooting records for answers we could not give or that failed our checks: short sentences from the draft, the reason, and the identifiers of the clauses involved (no full answer drafts) | Finding and fixing answer problems | 7 days, then deleted | Legitimate interests (improving answer accuracy) |
| Feedback and problem reports: the category, your note, the identifiers of the answer and clauses you report, the page you sent it from and your browser type | Fixing problems and improving answers | 180 days, then deleted | Legitimate interests (fixing problems and improving answers) |
| Credit and purchase records (amounts, dates, references from our payment partner) | Accounting and your balance | 7 years | Contract and legal obligation (accounting) |
| Connector subscription records (plan, status, trial and billing dates, amounts and payment-partner references) | Running your subscription and accounting | 7 years | Contract and legal obligation (accounting) |
| Keyed hash of your email for the connector trial | Applying the one-trial-per-person rule | As long as needed to apply the one-trial rule | Legitimate interests (preventing trial misuse) |
| Connector account-sharing signals (keyed hash of the broader IP network and country supplied by our host) | Flagging possible account sharing for manual review only | Up to 30 days | Legitimate interests (protecting one-person accounts) |
| How you found us (e.g. a campaign tag), first visit only | Understanding which channels work | Until you delete your account | Legitimate interests (understanding which channels work) |
| Technical logs (IP address, browser, errors) kept by our hosting providers | Security and troubleshooting | Per provider, typically ≤ 30 days | Legitimate interests (security) |
| Security and audit records | Protecting accounts and the service | 7 years | Legitimate interests and legal obligation |
We do not sell personal data, and we do not use your questions or answers to advertise to you.
2. Who processes your data for us
We use a small number of service providers to run AeroCite. The providers described as processing data on our behalf do so on our instructions. Dodo Payments acts as an independent controller for payment data.
| Type of provider | What they do | Data involved |
|---|---|---|
| Hosting and infrastructure | Run the website and app, store your account and history, handle sign-in and usage limits | Account details, questions, answers, usage records, technical logs |
| AI services | Search the regulations, write answers and check them against the cited clauses. Check your question for typos and suggest clearer wording before you ask. Suggest narrower questions when nothing relevant is found | Your question, the country you chose, the regulation text used to answer it, and the headings of the clauses searched |
| Email services | Send sign-in codes, purchase confirmations and subscription reminders, and forward messages sent to our support and privacy addresses | Email address, message content |
| Security check | Check that requests for sign-in codes come from a person, not an automated program | IP address, browser and device information, and how your browser responds to the check |
| Payment provider | Processes payments as merchant of record (Dodo Payments, an independent controller for payment data) | Payment and billing details |
We instruct all AI services we use not to use your questions or answers to train their models.
Your data is processed in the United States and in other countries where our providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses.
A list of our current service providers is available on request from privacy@aerocite.app.
3. AeroCite for AI clients
AeroCite for AI clients (https://mcp.aerocite.app) lets subscribers and approved testers connect an AI client they choose (for example Claude). You sign in with your AeroCite account and approve the client on a consent page. Each connection expires 30 days after approval. On your AI connector page, you choose which countries the client may use.
The client can search and read regulation clauses, list documents and clauses, find phrases and check draft answers for your selected countries. It receives your account name and email to identify your account, but cannot see your History, billing or other account details.
Your questions, drafts and the clause text AeroCite returns pass to and from your AI client. The client's provider processes them under its own terms and privacy policy. You choose the client, and we do not control its provider's processing. AeroCite uses its regulation engine to process connector questions and drafts. Connector activity is not saved to History.
We store the connected client's identifier and name, when it was approved, last used and disconnected, and your selected countries. We also store content-free usage records: tool, country, counts, cost, timing and outcome. These records contain no questions, drafts, answers or regulation text. Identifiable usage records are deleted after 30 days; we keep anonymous daily totals.
We rely on contract to provide the service and enforce limits, and on legitimate interests to prevent abuse or bulk copying.
For connector calls, we record a keyed hash of the broader IP network and the country supplied by our hosting provider. We keep these signals for up to 30 days and use them to flag possible account sharing for manual review only. Signals alone never suspend an account. This relies on legitimate interests (protecting one-person accounts).
You can disconnect a client at any time on your AI connector page. Disconnection takes effect on the client's next request. Signing out of the website does not disconnect clients. Account suspension, the end of your subscription access or the end of your tester access also stops client access.
4. Cookies and local storage
We use sign-in session cookies to keep you signed in. A theme cookie in the app and a theme preference in your browser's local storage on public pages remember light or dark. A short-lived checkout reference in your browser's session storage while you pay prevents duplicate checkouts. All are strictly necessary, so we do not ask for cookie consent. We do not use advertising or analytics cookies. We measure page views with Vercel Web Analytics, which sets no cookies and records the page, referrer, country, device type and browser, not who you are.
5. Your choices and rights
- Access a copy of the personal data we hold about you by contacting privacy@aerocite.app.
- Portability: depending on where you live, request your personal data in a format you can transfer to another service.
- Download your question history from your account page.
- Request deletion from your account page. We review requests by hand and complete them within 30 days, except records we must keep by law (such as purchase records).
- Correct your details in your account settings.
- Depending on where you live (for example in the EU or UK) you may also have the right to object or restrict processing. Where we rely on your consent, you can withdraw it. You can complain to your local data protection authority: in the UK, the Information Commissioner's Office (ICO); in the EU, the authority where you live. Contact privacy@aerocite.app to exercise any right; we reply within one month.
6. Security
Sign-in uses one-time email codes or Google sign-in when available. Data is encrypted in transit, and access to it is limited to what each part of the service needs.
To protect one-person accounts, we record account and session identifiers, a keyed hash of your broader IP network, your country where supplied by our hosting provider, and your browser family when you submit a question or clause search. We do not store full IP addresses or full browser strings in these records. We keep these signals and session-revocation records for up to 30 days. Unusual patterns are flagged for manual review; these signals alone do not automatically suspend an account. These account-sharing signals rely on legitimate interests (protecting one-person accounts).
7. Children
AeroCite is for professionals and is not intended for anyone under 18.
8. Changes
We will post changes here and, for material changes, tell you by email or in the app.