PRIVACY STATEMENT

Adealo Privacy Statement

Last updated: 4 February 2026

This Privacy Statement explains how Adealo OÜ ("Adealo", "we", "us") processes personal data in connection with our website and Service.

1. Who we are

Controller: Adealo OÜ
Registry Code: 17305560
Address: Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 5, 10145
Email: legal@adealo.com

2. Our roles

When you visit our website or create an account, Adealo acts as a data controller.

When customers use the Service to communicate with their own end users, Adealo acts as a data processor on behalf of the customer.

If you are an end user interacting with a business through Adealo, that business controls your data.

3. Personal data we collect (controller context)

We may process:

• Account information (name, email, company, role)
• Billing and subscription data
• Communications with Adealo
• Website usage data (excluding persistent IP address storage)

We do not store IP addresses as standalone identifiers.

4. Personal data processed in the Service (processor context)

Customers may submit:

• Messages and conversation content
• Contact details of end users
• Support-related metadata and session data

This data is processed solely to provide the Service and according to customer instructions.

5. Purposes of processing

We process personal data to:

• provide and operate the Service,
• secure and maintain the platform,
• manage billing and subscriptions,
• communicate with customers,
• comply with legal obligations.

6. Legal bases

Where applicable, we rely on:

• performance of a contract,
• legitimate interests (security, service improvement),
• consent (where required),
• legal obligations.

7. AI and data handling

• AI features process data only to deliver requested outputs.
• Prompts and AI outputs are not stored outside Adealo.
• Data is not used to train public AI models.
• No external caching or prompt retention is performed by Adealo.

8. Cookies

We use cookies necessary for website functionality and security. Optional cookies may be used for analytics, subject to applicable consent requirements.

Customers using the widget are responsible for providing required notices to their end users.

9. Data sharing

We may share data with:

• infrastructure and hosting providers,
• payment processors (e.g., Stripe),
• professional advisors,
• authorities where legally required.

All service providers are subject to contractual confidentiality and data protection obligations.

10. International transfers

Where data is transferred outside the EEA, appropriate safeguards are applied in accordance with applicable law.

11. Retention

Account and billing data is retained as required by law.

Customer Data is retained according to customer settings and instructions.

12. Security

We implement reasonable technical and organizational measures to protect personal data.

13. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data.

End users should contact the business they interacted with to exercise their rights.

14. Changes

We may update this Privacy Statement from time to time. The latest version will always be available on our website.

15. Contact

Privacy questions may be sent to legal@adealo.com.