Privacy Policy

Last updated: 4 July 2026

1. Who we are

Aeora ("we", "us") is a UK agency that helps businesses understand and improve how AI assistants describe and recommend them. This policy explains what personal information we collect, why we collect it, and the choices you have. You can contact us about anything in this policy at hello@aeora.uk.

2. What we collect

• Contact details you give us when you enquire, book an audit or subscribe to The Briefing: typically your name, email address, business name and website address.
• Client project information needed to deliver our services: details about your business, your website, and the questions your customers ask.
• Website access credentials where you engage us for the monthly plan (see section 4).
• Basic usage data about visits to this website, such as pages viewed and approximate location, collected through privacy-respecting analytics.

3. How we use your information

• To respond to enquiries and deliver the services you've asked for.
• To run audits, which involve querying third-party AI services (such as ChatGPT, Google, Perplexity, Gemini, Claude and Copilot) with questions about your business and market.
• To send The Briefing if you've subscribed. Every email includes an unsubscribe link.
• To understand how our website is used and improve it.

Our legal bases under UK GDPR are: performance of a contract (delivering services), legitimate interests (responding to enquiries, improving our website), and consent (The Briefing).

4. Client website access

When you engage us for ongoing work, you may give us access to your website platform. We treat this access with care:

• Credentials are stored in an encrypted password manager and never shared outside Aeora.
• We take a backup before every change we make, and we keep a log of every change.
• Access is removed and credentials are deleted when our engagement ends. We recommend you also rotate any passwords you shared.

5. Who we share information with

We do not sell personal information. We share it only with service providers who help us operate: website hosting, email delivery, analytics and payment processing. Each processes data under their own agreements and only on our instructions. Where we query AI services during an audit, we send questions about your business and market, not your customer data.

6. How long we keep information

Enquiry details are kept for up to two years. Client records are kept for six years after an engagement ends, in line with UK tax and contract requirements. Briefing subscriptions are kept until you unsubscribe.

7. Your rights

Under UK GDPR you can ask us to access, correct, delete, restrict or port your personal information, and you can object to processing based on legitimate interests. Email hello@aeora.uk and we'll respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

8. Cookies

This website aims to use only what it needs to function, plus lightweight analytics. We don't use advertising trackers.

9. Changes to this policy

If we change this policy we'll update the date at the top of this page. Significant changes will be flagged to active clients and Briefing subscribers by email.