Privacy Policy

Qonvera — Operated by Aether Solutions - F.Z.E Effective Date: July 22, 2026 Last Updated: July 22, 2026

1. Introduction

This Privacy Policy ("Policy") describes how Aether Solutions - F.Z.E ("Aether Solutions," "we," "us," or "our"), a free zone establishment incorporated under the laws of the United Arab Emirates and headquartered in Ajman, UAE, collects, uses, discloses, stores, and protects information in connection with Qonvera, our AI-powered omnichannel customer relationship management platform ("Platform").

This Policy applies to:

Customers: Businesses and organizations that register for and use the Platform ("Customers");
End Users: Employees, agents, contractors, and authorized representatives of Customers who access the Platform on behalf of a Customer ("Users"); and
Contacts: Third-party individuals whose personal data is uploaded, imported, or otherwise processed by Customers through the Platform ("Contacts").

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, you must discontinue use of the Platform immediately.

2. Definitions

For the purposes of this Policy:

"Personal Data" means any information relating to an identified or identifiable natural person.
"Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
"Customer Data" means all data, content, and information submitted to or processed through the Platform by a Customer or its Users, including Contact data.
"AI Features" means the artificial intelligence and machine learning functionalities embedded within the Platform, including but not limited to lead analysis, conversation summaries, drafting assistance, and recommendations.
"Controller" means the entity that determines the purposes and means of Processing Personal Data.
"Processor" means the entity that Processes Personal Data on behalf of a Controller.

3. Roles and Responsibilities

3.1 Aether Solutions as Controller

Aether Solutions acts as a data Controller with respect to:

Account registration and profile information of Customers and Users;
Platform usage data, analytics, and technical data collected directly by us; and
Communications between Aether Solutions and Customers or Users.

3.2 Aether Solutions as Processor

With respect to Customer Data — including the personal data of Contacts uploaded or managed by Customers through the Platform — Aether Solutions acts as a data Processor on behalf of the Customer, who is the Controller. Customers are solely responsible for:

Ensuring they have a lawful basis for collecting and processing Contact data;
Providing appropriate notices and obtaining necessary consents from Contacts;
Complying with all applicable data protection laws in their respective jurisdictions; and
The accuracy, legality, and appropriateness of all Customer Data submitted to the Platform.

Aether Solutions processes Customer Data only in accordance with Customer instructions and as described in this Policy and any applicable Data Processing Agreement.

4. Information We Collect

4.1 Account and Registration Information

When a Customer registers for the Platform, we collect:

Business name, trading name, and legal entity type;
Contact person name, job title, and email address;
Billing address and payment information (processed via third-party payment processors);
Subscription plan details; and
Login credentials (stored in encrypted form).

4.2 User Information

For each User account created under a Customer's subscription, we collect:

Full name and email address;
Role and permission level within the Platform;
Profile photograph (if uploaded); and
Authentication credentials.

4.3 Customer Data (Processed on Behalf of Customers)

Customers may upload, import, or generate the following categories of data relating to their Contacts through the Platform:

Identity Data: Contact names, job titles, and company information;
Contact Data: Phone numbers, email addresses, and social media identifiers;
Communication Data: Conversation history across all connected channels (WhatsApp Business, Instagram, Facebook Messenger, TikTok, website chat, email, and future messaging channels);
Commercial Data: Sales pipeline information, deal stages, lead scores, and transaction records;
Operational Data: Internal notes, tasks, follow-ups, calendar entries, and activity logs;
Media and Attachments: Files, images, documents, and other attachments shared within the Platform; and
Behavioral Data: Tags, custom fields, and segmentation data applied by Customers.

4.4 Technical and Usage Data

We automatically collect the following when Users interact with the Platform:

IP addresses and approximate geolocation data;
Browser type, version, and operating system;
Device identifiers and screen resolution;
Session duration, pages visited, and features accessed;
Log files and error reports; and
API request metadata.

4.5 Communication Data

We collect information from communications between Customers or Users and Aether Solutions, including support tickets, emails, and feedback submissions.

4.6 Third-Party Integration Data

When Customers connect third-party communication channels or services to the Platform (including WhatsApp Business API, Instagram, Facebook Messenger, TikTok, and other integrations), we may receive data from those platforms in accordance with their respective terms and privacy policies. Customers are responsible for ensuring they have the necessary authorizations to connect such accounts and share data with the Platform.

5. How We Use Information

5.1 To Provide and Operate the Platform

We use collected information to:

Create and manage Customer and User accounts;
Deliver, maintain, and improve Platform features and functionality;
Process and synchronize messages across connected communication channels;
Enable CRM, contact management, lead management, and sales pipeline features;
Facilitate team collaboration, task management, and workflow automation;
Generate analytics, reports, and performance insights; and
Process billing and manage subscriptions.

5.2 To Power AI Features

We use Customer Data and usage data to operate and improve AI Features, including:

AI-powered lead analysis and scoring;
AI-generated conversation summaries;
AI drafting assistance for outbound messages;
AI-generated recommendations and suggested responses; and
Workflow automation triggers and intelligent routing.

Important: AI Features process Customer Data solely to generate outputs for the Customer's use. AI-generated outputs are recommendations only and do not constitute advice of any kind. Customers and Users remain solely responsible for reviewing, approving, and acting upon any AI-generated content before use. See Section 6 (AI Features — Specific Disclosures) for full details.

5.3 To Communicate with Customers

We use contact information to:

Send transactional communications (account confirmations, invoices, security alerts);
Provide customer support and respond to inquiries;
Send product updates, feature announcements, and service notifications; and
Send marketing communications where permitted by applicable law and subject to opt-out rights.

5.4 To Ensure Security and Prevent Fraud

We use technical and usage data to:

Monitor for unauthorized access, suspicious activity, and security threats;
Enforce our Terms of Service and Acceptable Use Policy;
Investigate and respond to security incidents; and
Comply with legal obligations and law enforcement requests.

5.5 To Improve the Platform

We may use aggregated, anonymized, or de-identified data derived from Platform usage to:

Analyze usage patterns and improve product features;
Train and refine AI models (using only anonymized or de-identified data, unless a Customer has separately agreed otherwise); and
Conduct internal research and development.

We will not use identifiable Customer Data or Contact data to train AI models without explicit written consent from the relevant Customer.

6. AI Features — Specific Disclosures

6.1 Nature of AI Outputs

The Platform incorporates artificial intelligence and machine learning technologies to assist Customers and Users with various tasks, including lead analysis, conversation summarization, message drafting, and recommendations. Customers and Users expressly acknowledge and agree that:

AI outputs are recommendations only. All AI-generated content, suggestions, summaries, scores, and recommendations are provided as assistive tools and do not represent the views, conclusions, or advice of Aether Solutions.
AI outputs may be inaccurate. AI-generated content may be incomplete, incorrect, outdated, biased, or otherwise misleading. Aether Solutions makes no warranty as to the accuracy, reliability, or fitness of any AI-generated output.
AI outputs are not professional advice. Nothing generated by the Platform's AI Features constitutes legal, financial, medical, regulatory, compliance, or any other form of professional advice. Customers should seek qualified professional advice for any such matters.
Human review is mandatory. Customers and Users are solely responsible for reviewing all AI-generated content — including but not limited to drafted messages, summaries, and recommendations — before acting upon or transmitting such content to any third party.
Users are solely responsible for sent messages. Aether Solutions bears no responsibility or liability for any message, communication, or content transmitted by a User or Customer to any Contact or third party, regardless of whether such content was generated, suggested, or assisted by AI Features.

6.2 AI and Customer Data

AI Features may process Customer Data, including conversation history and Contact information, to generate outputs. This processing occurs within the Platform's secure environment. Aether Solutions does not use identifiable Customer Data or Contact data to train its AI models for general use without explicit written consent.

6.3 Limitation of Liability for AI Features

To the fullest extent permitted by applicable law, Aether Solutions shall not be liable for any loss, damage, claim, or expense arising from or related to reliance on AI-generated outputs, including errors, omissions, or inaccuracies in AI-generated content.

7.1 Service Providers and Sub-Processors

We engage trusted third-party service providers to assist in operating the Platform. These providers act as sub-processors and are contractually bound to process data only on our instructions and in accordance with applicable data protection laws. Categories of sub-processors include:

Cloud infrastructure and hosting providers;
Payment processors;
Email and notification delivery services;
Analytics and monitoring tools;
AI and machine learning infrastructure providers;
Customer support platforms; and
Security and fraud prevention services.

A current list of sub-processors is available upon written request.

7.2 Third-Party Channel Integrations

When Customers connect third-party communication platforms (such as WhatsApp Business, Instagram, Facebook Messenger, or TikTok) to the Platform, data exchanged through those channels is subject to the privacy policies and terms of service of those third-party platforms. Aether Solutions is not responsible for the data practices of third-party platforms.

7.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or similar corporate transaction, Customer Data and Personal Data may be transferred to the acquiring or successor entity, subject to equivalent data protection obligations.

7.4 Legal Obligations

We may disclose Personal Data or Customer Data where required to do so by applicable law, regulation, court order, or governmental authority, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Aether Solutions, its Customers, or the public.

We may share data with third parties where a Customer or User has provided explicit consent to such sharing.

7.6 No Sale of Personal Data

Aether Solutions does not sell, rent, or trade Personal Data or Customer Data to third parties for their own marketing or commercial purposes.

8. International Data Transfers

Aether Solutions is headquartered in Ajman, United Arab Emirates, and operates infrastructure that may be located in multiple jurisdictions. Customer Data and Personal Data may be transferred to, stored in, and processed in countries outside the Customer's home jurisdiction, including countries that may not provide the same level of data protection as the Customer's jurisdiction.

Where such transfers occur, we implement appropriate safeguards, which may include:

Standard contractual clauses or equivalent transfer mechanisms;
Data processing agreements with sub-processors; and
Technical and organizational security measures.

Customers who are subject to the European Union General Data Protection Regulation (GDPR), the UK GDPR, or other data transfer regulations should contact us to discuss applicable transfer mechanisms.

9. Data Retention

9.1 Customer and User Account Data

We retain Customer and User account data for the duration of the active subscription and for a period of up to ninety (90) days following termination or expiration of the subscription, after which it is securely deleted or anonymized, unless a longer retention period is required by applicable law.

9.2 Customer Data

Customer Data is retained for the duration of the Customer's subscription. Upon termination, Customers may request export of their Customer Data within thirty (30) days of termination. After this period, Customer Data will be permanently deleted from our systems, subject to any legal retention obligations.

9.3 Technical and Usage Data

Aggregated and anonymized usage data may be retained indefinitely for analytical and product improvement purposes.

9.4 Legal and Compliance Retention

Certain data may be retained for longer periods where required by applicable law, regulation, or for the establishment, exercise, or defense of legal claims.

10. Data Security

Aether Solutions implements industry-standard technical and organizational security measures designed to protect Personal Data and Customer Data against unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit using TLS/SSL protocols;
Encryption of data at rest;
Role-based access controls and least-privilege principles;
Multi-factor authentication for administrative access;
Regular security assessments and vulnerability testing;
Incident response and breach notification procedures; and
Employee training on data protection and security practices.

Notwithstanding the foregoing, no method of electronic transmission or storage is completely secure. Aether Solutions cannot guarantee absolute security and shall not be liable for unauthorized access resulting from circumstances beyond our reasonable control.

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, Aether Solutions will notify affected Customers without undue delay and in accordance with applicable legal requirements.

11. Your Rights

11.1 Rights of Customers and Users

Subject to applicable law, Customers and Users may have the following rights with respect to their Personal Data held by Aether Solutions:

Right of Access: To request a copy of Personal Data we hold about you;
Right to Rectification: To request correction of inaccurate or incomplete Personal Data;
Right to Erasure: To request deletion of Personal Data, subject to legal retention obligations;
Right to Restriction: To request that we restrict Processing of your Personal Data in certain circumstances;
Right to Data Portability: To receive your Personal Data in a structured, machine-readable format;
Right to Object: To object to Processing based on legitimate interests; and
Right to Withdraw Consent: Where Processing is based on consent, to withdraw consent at any time without affecting the lawfulness of prior Processing.

11.2 Rights of Contacts

Contacts whose personal data is processed through the Platform by a Customer should direct their data rights requests to the relevant Customer, who is the Controller of that data. Aether Solutions will assist Customers in responding to such requests as required by applicable law.

11.3 Exercising Your Rights

To exercise any of the rights described above, please contact us at:

Email: legal@aethersolutions.tech Postal Address: Aether Solutions - F.Z.E, Ajman free zone building c1, Ajman, United Arab Emirates

We will respond to verified requests within the timeframe required by applicable law (and in any event within 30 days of receipt, subject to extension where permitted).

12. Cookies and Tracking Technologies

The Platform and website at https://qonvera.com may use cookies, web beacons, pixel tags, and similar tracking technologies to:

Maintain session state and authentication;
Remember user preferences and settings;
Analyze website and Platform usage; and
Support security and fraud prevention.

Customers and Users may control cookie preferences through their browser settings. Disabling certain cookies may affect Platform functionality. A separate Cookie Policy may be published at https://qonvera.com and is incorporated into this Policy by reference.

13. Children's Privacy

The Platform is designed for use by businesses and is not directed at individuals under the age of 18. Aether Solutions does not knowingly collect Personal Data from minors. If we become aware that Personal Data of a minor has been submitted to the Platform, we will take steps to delete such data promptly.

14. Changes to This Policy

Aether Solutions reserves the right to update or modify this Policy at any time. We will notify Customers of material changes by:

Posting the updated Policy at https://www.qonvera.com/privacypolicy/;
Sending an email notification to the registered Customer account email address; and/or
Displaying an in-Platform notification.

Continued use of the Platform following the effective date of any updated Policy constitutes acceptance of the revised terms. If a Customer does not agree to the updated Policy, they must discontinue use of the Platform and notify us of their intent to terminate their subscription.

15. Contact Information

For questions, concerns, or requests relating to this Privacy Policy, please contact:

Aether Solutions - F.Z.E Privacy and Data Protection Ajman free zone building c1 Ajman, United Arab Emirates Email: legal@aethersolutions.tech Website: https://qonvera.com