Account & Billing Information
- Names, email addresses, telephone numbers, company names, and roles.
- Billing addresses, applicable tax information, invoices, and transaction records.
- Subscription details, service plans, and account status.
Understanding our privacy practices.
This Privacy Policy explains how F & R Solutions Inc., operating as AELESTRA, handles personal information in connection with its websites, products, services, customer communications, and support activities.
This policy applies to personal information we handle in connection with our own business activities. The information involved depends on the services you use, how you interact with us, and the laws applicable to those activities.
Business customers may also use our platform to manage information about their own customers, employees, prospects, and other contacts. In those circumstances, the business customer may determine the purposes and means of processing, while AELESTRA provides services under the applicable contractual arrangements.
Where a business customer controls personal information within its workspace, requests concerning that information may need to be directed to that business.
Our commitment to transparency
We aim to explain our privacy practices in clear language and provide appropriate information about how personal information is collected, used, disclosed, and retained.
Information we collect.
We collect information relevant to providing and supporting our services, managing customer relationships, maintaining security, and meeting applicable legal obligations.
Website & Platform Usage
- IP addresses, browser types, device information, and timestamps.
- Pages visited, feature interactions, technical logs, and performance information.
- Information collected through cookies or similar technologies, where applicable.
Communications & Support
- Support requests, messages, email correspondence, and chat interactions.
- Information provided during meetings, onboarding, and service inquiries.
- Files or screenshots voluntarily submitted to help resolve an issue.
Customer-Provided Content
- Contacts, calendars, websites, and workflow configurations.
- CRM records, customer communications, and information connected through integrations.
- Other content customers choose to store or process using platform features.
Third-Party Information
- Information received through payment, communication, analytics, and integration providers.
- Business contact information obtained from public or permitted commercial sources.
- Information shared through services you choose to connect.
Preferences & Other Information
- Language, time zone, communication, and account preferences.
- Marketing subscription and consent choices.
- Other information voluntarily provided through forms or correspondence.
Sensitive information and payment details
Some customer-managed workflows may involve sensitive personal information. Users should avoid submitting sensitive information through general support channels unless necessary. Payment information may be handled by external payment processors. Our treatment of payment credentials depends on the applicable payment integration and service arrangements.
How we use information.
Personal information is used for purposes connected to our services, communications, operations, security, and applicable legal obligations.
Provide & Maintain Services
Create accounts, authenticate users, operate subscribed features, manage billing, support connected tools, and maintain platform functionality.
Customer Communication
Respond to inquiries, provide support, deliver service notifications, share account updates, and communicate important operational information.
Improve Services & Performance
Identify technical issues, understand feature usage, assess service performance, and develop improvements to platform reliability and user experience.
Security & Legal Compliance
Detect suspicious activity, investigate potential misuse, enforce contractual requirements, maintain appropriate records, and respond to lawful obligations.
Marketing & Business Communications
Send newsletters, service information, product announcements, and promotional communications where a valid legal basis exists. Recipients can withdraw marketing consent or unsubscribe through the available methods.
Legal bases for processing.
The legal basis for processing personal information depends on the relevant activity and applicable privacy law.
Where the EU or UK General Data Protection Regulation applies, personal information may be processed on one or more of the following legal bases:
Contractual Necessity
Processing necessary to provide requested or contracted services.
Legitimate Interests
Processing supporting appropriate business interests, such as security and service improvement, where those interests are not overridden by applicable individual rights.
Consent
Processing based on a valid, informed choice, where consent is required or otherwise used as the legal basis.
Legal Obligations
Processing necessary to satisfy applicable accounting, regulatory, tax, or other legal requirements.
In jurisdictions governed by different privacy frameworks, collection, use, and disclosure are subject to the applicable consent requirements, statutory permissions, and other lawful grounds.
International data transfers.
Providing digital services can involve service providers, infrastructure, and connected applications operating in different countries.
Depending on the services used, personal information may be accessed, stored, or processed outside the country where it was originally collected.
Privacy and data protection laws can differ between jurisdictions. Where applicable laws require specific protections for international transfers, those requirements must be addressed through the relevant arrangements and safeguards.
Business customers using third-party integrations should also review the data-handling practices of those providers.
Data retention & deletion.
Retention periods depend on the nature of the information, why it is processed, the services involved, and applicable legal or contractual requirements.
Account & Service Records
May be retained while an account is active and for additional periods necessary for account administration, contractual obligations, and legitimate recordkeeping.
Billing & Financial Records
May be retained for periods required by applicable tax, accounting, and financial recordkeeping laws.
Support & Communication Records
May be retained to resolve requests, document service interactions, manage disputes, and meet relevant operational requirements.
Customer-Managed Platform Data
Retention and deletion may depend on customer instructions, workspace settings, subscription arrangements, technical processes, and applicable law.
Retention criteria
Relevant factors include the purpose of collection, the sensitivity of the information, legal obligations, contractual requirements, security needs, and any applicable deletion request. Information may be deleted, anonymized, or otherwise handled when continued retention is no longer required.
Protecting your information.
Safeguarding personal information is an important part of responsible platform operations and customer service.
AELESTRA seeks to apply appropriate technical and organizational measures based on the nature and sensitivity of the information, the services involved, and relevant security risks.
Access Management
Appropriate restrictions on access to personal information and administrative systems.
Platform Security
Measures designed to reduce unauthorized access, misuse, and security risks.
Service Provider Oversight
Consideration of relevant privacy and security requirements when working with service providers.
Incident Management
Processes for assessing suspected security incidents and determining applicable response or notification obligations.
No internet-based service or storage system can guarantee absolute security. Users should protect account credentials, enable available security features, and promptly report suspected unauthorized account activity.
Your privacy rights.
Privacy rights depend on your location, the type of processing involved, and the laws applicable to AELESTRA or the business controlling your information.
Canada & Quebec
Applicable Canadian privacy laws, including PIPEDA and Quebec's private-sector privacy legislation, may provide rights to access and correct personal information, withdraw consent in certain circumstances, and challenge how information is handled. Quebec law also provides additional protections and rights in specified circumstances, including rights concerning certain automated decisions and data portability.
European Union & United Kingdom
Where the EU GDPR or UK GDPR applies, individuals may have rights to access, correction, erasure, restriction, portability, and objection to processing. Individuals may also withdraw consent where processing relies on that basis and may lodge complaints with the appropriate supervisory authority.
United States
Depending on the state and whether the relevant law applies, individuals may have rights to access, correct, or delete information and to opt out of certain processing activities. California law includes specific provisions concerning the sale and sharing of personal information, use of sensitive personal information, and the exercise of privacy rights.
Middle East & Other Jurisdictions
Relevant privacy laws in jurisdictions such as the UAE, Saudi Arabia, Qatar, Oman, and Türkiye may provide rights concerning access, correction, deletion, consent, or other processing-related matters. Available rights and procedures depend on the law applicable to the specific processing activity.
Exercising Your Rights
You can submit a privacy request using the contact information provided below. We may request information reasonably necessary to verify your identity, locate the relevant records, and determine how the request should be handled. Requests will be reviewed under applicable law, including relevant exceptions and response requirements.
Information controlled by business customers
If your information is held in an AELESTRA workspace managed by another business, that business may be responsible for responding to your privacy request. We can direct inquiries where appropriate under the relevant service arrangements.
Automated processing & profiling.
Certain digital services and business workflows can involve automation, customer segmentation, analytics, or rule-based processing.
AELESTRA offers tools that business customers may configure to automate communications, customer interactions, and operational workflows. The purposes and configuration of these workflows may be determined by the business operating the workspace.
Some privacy laws provide additional protections where personal information is used for profiling or decisions made exclusively through automated processing that have legal or similarly significant effects.
Where such requirements apply, additional information and individual rights may need to be provided by the organization responsible for the processing.
Children's privacy.
AELESTRA's business services are not directed toward children.
We do not knowingly seek personal information directly from children through our business services without an appropriate basis. Business customers may nevertheless process information about individuals of different ages through services they configure and operate.
Organizations using our platform remain responsible for meeting applicable age-related privacy and consent requirements for information they collect or control.
If you believe personal information concerning a child has been handled inappropriately in connection with our services, please contact us using the information below.
Changes to this policy.
We may update this Privacy Policy to reflect changes to our services, operational practices, technologies, or applicable legal requirements.
When revisions are made, the updated policy may be published on this page with a revised "Last updated" date.
Where additional notice or consent is legally required, those requirements will apply before relevant changes take effect.
We encourage users to review this page periodically for current information.
Questions about your privacy?
If you have questions about this Privacy Policy, would like to request access to personal information, or need assistance with a privacy-related concern, you can contact our team.
Support Center
Submit a support request and describe your privacy question or concern so it can be directed appropriately.
Visit Support CenterPrivacy Inquiries
Email us regarding personal information, privacy practices, access requests, corrections, or other privacy-related matters.
Contact by Email
Privacy contact
F & R Solutions Inc.
Operating as AELESTRA
Attention: Privacy Officer
Email:
[email protected]
Please do not include passwords, payment card numbers, or unnecessary sensitive information in a general privacy inquiry.