Privacy Policy

Last updated: 6 May 2026

In plain English: We collect what we need to run your marketing campaigns. We never sell your data. We comply with UK GDPR and PECR. You can request deletion at any time.

1. Who We Are

Aideators is a trading name of Websposure Ltd, registered in England and Wales. We operate the marketing automation platform at marketing.aideators.co.uk.

Data controller: Websposure Ltd
Contact: [email protected]

2. What Data We Collect

Account data: Name, email address, company name, phone number, and password (encrypted) when you sign up.

Business data: Website URL, brand colours, logo, services, coverage areas, and other business information you provide or we extract from your website with your permission.

Lead data: Contact information for your business leads that you import or capture through landing page forms. This data belongs to you.

Campaign data: Email content, social media posts, landing pages, and performance metrics (opens, clicks, replies, conversions).

Social media tokens: When you connect social accounts (LinkedIn, Facebook, Instagram, Twitter/X, Google Business, YouTube), we store OAuth access tokens to post on your behalf. We never store your social media passwords.

Usage data: Pages visited within the platform, features used, and technical logs for debugging and improvement.

Payment data: Processed by Stripe. We never see or store your full card details.

3. How We Use Your Data

To operate your marketing campaigns (email, social, landing pages)
To generate AI-powered content tailored to your business
To track campaign performance and provide analytics
To improve our platform using aggregated, anonymised insights
To send you platform notifications and service updates
To comply with legal obligations

4. Legal Basis for Processing (UK GDPR)

Contract: Processing necessary to provide the service you've signed up for
Legitimate interest: Platform improvement, security, fraud prevention
Consent: Marketing communications (you can opt out at any time)
Legal obligation: Tax records, compliance requirements

5. Third-Party Services

We use the following services to operate the platform:

SendGrid (Twilio) — Email delivery
Stripe — Payment processing
Anthropic (Claude AI) — Content generation
OpenAI (DALL-E) — Image generation
Meta (Facebook/Instagram) — Social posting via OAuth
LinkedIn, Twitter/X, Google — Social posting via OAuth
Twilio — WhatsApp messaging
Apollo, Prospeo — Lead data enrichment
Cloudflare — CDN and security
Backblaze B2 — File storage and backups

Each service has its own privacy policy. We only share the minimum data required for each service to function.

6. Data Sharing

We do not sell, rent, or trade your personal data. We share data only:

With third-party services listed above, to operate the platform
If required by law or legal process
To protect the rights and safety of our users

7. Data Retention

Account data: Retained while your account is active, deleted within 30 days of account closure
Campaign data: Retained while your account is active
Lead data: Retained while your account is active. You can delete individual leads at any time
Social tokens: Deleted immediately when you disconnect a channel
AI conversation history (Aaria): 30-day rolling retention
Backups: Retained for 30 days after deletion

8. Your Rights (UK GDPR)

You have the right to:

Access — Request a copy of your data
Rectification — Correct inaccurate data
Erasure — Request deletion of your data (see our Data Deletion page)
Portability — Receive your data in a machine-readable format
Objection — Object to processing based on legitimate interest
Withdraw consent — Where processing is based on consent

To exercise any of these rights, email [email protected]. We will respond within 30 days.

9. Cookies

We use essential cookies for authentication (login session) and preferences. We do not use advertising or tracking cookies on the platform. Landing pages may include remarketing pixels (Facebook, Google, LinkedIn) configured by each client for their own campaigns.

10. Email Marketing (PECR Compliance)

Emails sent through our platform on behalf of clients comply with UK PECR regulations. Every marketing email includes an unsubscribe link. We check opt-out status before every send and never email contacts who have opted out.

11. Security

We protect your data with:

Encrypted connections (HTTPS/TLS) for all data in transit
Encrypted passwords (bcrypt hashing)
Encrypted API tokens and secrets at rest
Cloudflare DDoS protection and WAF
Rate limiting on all public endpoints
Cloudflare Turnstile bot protection on forms
Regular security audits and dependency updates
Nightly encrypted backups

12. Children

Aideators is a B2B platform. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of any material changes. The "last updated" date at the top indicates the most recent revision.

14. Contact

For any privacy questions or concerns:

Email: [email protected]
Websposure Ltd, London, United Kingdom