Privacy Policy

Last updated: 28 September 2026

This policy explains how AINE & Co FZE LLC ("AINE & Co.", "we", "us") collects, uses and protects personal data when you visit aineco.live, work with us as a client, or when a business uses our software, Aine Signal.

1. Who we are

AINE & Co FZE LLC is a company registered in the Ajman Free Zone, with its office at 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates. You can contact us about privacy at support@aineco.live or +971 56 319 9611.

2. Our two roles

As a controller. For our website, our own marketing and our client relationships, we decide how personal data is used.

As a processor. When a business (our "client") uses Aine Signal, the client decides why and how its customers' data is used. We process that data only on the client's instructions and on the client's behalf. If you are a customer of one of our clients, the client is responsible for telling you how it uses your data, and you can contact the client or us to exercise your rights.

3. Data we collect

Website visitors and clients

• Contact details you send us, such as your name, email address, phone number and business name.
• Messages and information you share with us about your business and campaigns.
• Basic technical data from our hosting provider, such as IP address and browser type, used for security and to keep the site working.

Aine Signal

When a client connects its WhatsApp Business account to Aine Signal through the WhatsApp Business Platform provided by Meta, we process:

• Contact data of the client's customers: WhatsApp phone number and WhatsApp profile name.
• Message data: the time a customer messages the client and message content delivered to us through the WhatsApp Business Platform, used to record and display the lead.
• Ad data: when a chat starts from a Meta ad, the ad ID, ad headline and the click identifier Meta attaches to the chat.
• Sales outcome data: the status the client's team assigns to a lead (for example not a fit, qualified or paid), purchase date and purchase value.
• Client user data: names, email addresses and login details of the client's staff who use Aine Signal.
• Account connection data: the client's WhatsApp Business Account ID, phone number ID, Meta dataset ID and the access tokens Meta issues so Aine Signal can work on the client's behalf.

4. How we use data

• To provide our marketing services and respond to enquiries.
• To record incoming WhatsApp leads for our clients and show them to the client's team.
• To send conversion events (such as a qualified lead or a purchase) to the client's own Meta dataset through Meta's Conversions API, so the client can measure and optimize its advertising. These events contain the event type, time, the ad click identifier, purchase value and, where used, a phone number converted into an irreversible code (SHA-256 hash) before it leaves our systems.
• To produce reports for the client, such as cost per qualified lead and cost per sale for each ad.
• To keep our services secure, prevent misuse and meet legal obligations.

We do not sell personal data. We do not use one client's customer data for another client, and we do not use it to advertise our own services.

5. Legal basis

We process data to perform our contracts with clients, for our legitimate interests in running and securing our business, to comply with the law, and with consent where the law requires it. For Aine Signal, each client is responsible for having a lawful basis, including any required notices and consents, for sharing its customers' data with us and with Meta.

6. Who we share data with

• Meta Platforms: through the WhatsApp Business Platform and the Conversions API, as instructed by the client.
• Service providers: cloud hosting, database and email providers that store or process data for us under confidentiality and security obligations.
• Authorities: where required by law.

7. International transfers

Our clients and their customers are mainly in Sri Lanka and the United Arab Emirates. Our service providers may store data in other countries. When data moves across borders we use providers with appropriate security measures and contractual protections.

8. How long we keep data

• Aine Signal lead records are kept while the client's account is active. When a client closes its account or disconnects WhatsApp, we delete its lead records within 90 days unless the client asks us to delete them sooner or the law requires us to keep them.
• Access tokens are deleted when a client disconnects its account.
• Enquiries and client business records are kept for as long as needed for the relationship and for legal, tax and accounting purposes.

9. Security

We use encryption in transit, encrypted storage of access tokens, access controls that separate each client's data, and limited staff access. No system is perfectly secure, and we will notify affected clients and authorities of a personal data breach as required by law.

10. Your rights

Depending on where you live, including under the UAE Personal Data Protection Law and Sri Lanka's Personal Data Protection Act, No. 9 of 2022, you may have the right to access, correct or delete your personal data, to object to or restrict its use, and to withdraw consent. To make a request, email support@aineco.live. If your data came to us through one of our clients, we will work with that client to respond. See our data deletion instructions.

11. Children

Our services are for businesses. Some of our clients may serve students or other young people. Clients must obtain any consent required by law, including from parents or guardians, before sharing the data of minors with us, and must follow Meta's advertising policies on young people.

12. Cookies

This website does not use advertising or analytics cookies. If that changes, we will update this policy and ask for consent where required. The Aine Signal app uses only the cookies needed to keep users signed in.

13. Changes

We may update this policy. The date at the top shows the latest version. We will tell clients about material changes.

14. Contact