Aevo Labs is a creative content and generative systems studio based in Dubai, United Arab Emirates. This Privacy Policy explains with technical fidelity how we collect, process, safeguard, and transfer your personal data, and details your legal rights across applicable global data protection regimes.
01 Data Controller and Identity
The Data Controller (or "Data Fiduciary" under Indian law) responsible for your personal data is:
Trading Name: Aevo Labs
Legal Entity: Aevo Labs FZ-LLC [TODO_FILL_ME: Exact Registered Legal Entity Name]
Registered Address: [TODO_FILL_ME: Registered Office / Free Zone Address, Dubai, United Arab Emirates]
Primary Contact Email: waleed@aevolabs.org
Operational Inquiries: waleed@aevolabs.org
Data Protection Contact: waleed@aevolabs.org
02 Legal Frameworks and Global Compliance Scope
Because Aevo Labs serves international commercial brands, founders, and visitors across multiple continents, our data architecture has been designed to satisfy concurrent global privacy statutes:
- United Arab Emirates: UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (UAE PDPL).
- India: Digital Personal Data Protection Act, 2023 (DPDP Act 2023).
- European Union and United Kingdom: Regulation (EU) 2016/679 (GDPR), UK GDPR, and the Privacy and Electronic Communications Directive (ePrivacy Directive 2002/58/EC).
- United States: California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and applicable state privacy statutes.
03 Personal Data Collected by Our Systems
In strict compliance with the data minimization principle, we collect only the personal information strictly necessary to operate our website and fulfill commercial creative production inquiries:
A. Inbound Contact Transmission Form
When you contact Aevo Labs via our digital transmission interface, we collect:
- Full Name: To identify you and address your creative requirements.
- Email Address: To send proposals, production scopes, and communication responses.
- Project Message Content: Your creative concept, budget constraints, technical inquiries, or timeline expectations.
B. Discovery Consultation Scheduling
When you initiate a consultation booking via our integrated calendar interface, you interact with Calendly LLC. Data processed includes your name, email, guest emails, timezone, and consultation objectives. Note: The Calendly widget is hard-blocked until you grant consent for Marketing and Third-Party Embeds.
C. Direct Mobile Channels
When you select our direct WhatsApp communication link or email hyperlinks, you transmit your phone number, WhatsApp profile information, or email headers directly to our communication channels over encrypted transports.
D. Technical, Server and Network Telemetry
Upon requesting any resource from our web servers or Cloudflare R2 delivery network, standard technical server logs are automatically created containing your IP address, browser type and version, referral URL, and request timestamps to ensure infrastructure security and DDoS defense.
04 Legal Bases and Specified Purposes of Processing
| Processing Purpose | Data Categories | GDPR / UK GDPR Basis | UAE PDPL Basis | India DPDP 2023 Basis |
|---|---|---|---|---|
| Responding to client inquiries and delivering production quotes | Name, Email, Message scope | Art. 6(1)(b) Contractual steps / Art. 6(1)(f) Legitimate Interests | Art. 4(2) Pre-contractual steps | Sec. 4(1) Specific consent via form submission |
| Scheduling discovery briefing calls via Calendly | Name, Email, Meeting topic | Art. 6(1)(a) Consent / Art. 6(1)(b) Contract | Art. 4(1) Explicit Consent | Sec. 6 Clear affirmative action |
| 3D WebGL Camera and 60FPS Video Canvas rendering | Transient IP, Client viewport, WebGL capabilities | Art. 6(1)(f) Legitimate Interests | Art. 4(4) Legitimate Interest and Security | Sec. 4 Legitimate operational purpose |
| Cookie consent preservation | Consent record, timestamp, policy version | Art. 6(1)(c) Legal obligation / Art. 6(1)(f) | Art. 4(3) Statutory compliance | Sec. 6 Proof of consent compliance |
| Aggregated analytics and video telemetry | Pseudonymous event interactions | Art. 6(1)(a) Consent (Google Consent Mode v2) | Art. 4(1) Freely given consent | Sec. 6 Consent for specified purpose |
05 Third-Party Data Processors and Service Providers
Aevo Labs engages vetted infrastructure processors who process data strictly under written contractual instructions:
| Processor | Role and Activity | Jurisdiction | Safeguards in Place |
|---|---|---|---|
| FormSubmit | Contact form transmission gateway and anti-spam validation | United States | TLS 1.3 encryption in transit; transient delivery buffer only. |
| Calendly LLC | Interactive discovery booking calendar iframe | United States | Standard Contractual Clauses; hard-blocked by default on site. |
| Cloudflare, Inc. | Video asset streaming (R2), DDoS mitigation, and global edge caching | United States / Global Edge | Standard Contractual Clauses; minimal edge telemetry without cookie tracking. |
| Google LLC | Google Fonts stylesheet delivery; Google Consent Mode v2 measurement | United States | Google Consent Mode v2 default denied; anonymized font delivery. |
| Meta Platforms (WhatsApp) | Direct messaging communication channel | United States / Ireland | End-to-end encryption across WhatsApp protocol. |
06 Cross-Border Data Transfers
Because Aevo Labs operates from the United Arab Emirates and engages technical cloud infrastructure hosted in the United States and the European Union, your personal data may be transferred across international borders.
- UAE PDPL (Articles 22 and 23): Transfers outside the UAE are executed pursuant to adequacy decisions or adequate safeguard agreements guaranteeing enforceable data subject rights.
- GDPR / UK GDPR (Articles 44 to 49): Transfers from the EEA or UK to third countries rely on European Commission Standard Contractual Clauses (SCCs) and UK International Data Transfer Addenda.
- India DPDP Act (Section 16): Transfers are conducted in full compliance with Central Government transfer restrictions and directives.
07 AI Synthesis and Generative Media Transparency
Aevo Labs is an advanced creative content and systems studio. The cinematic videos, commercial reels, visual identity artifacts, and imagery displayed across this website are created using proprietary generative artificial intelligence diffusion pipelines, neural motion synthesis models, and generative audio tools, curated and edited under human creative direction and post-production craft.
Showcased media does not depict real-world private individuals without explicit consent. Any synthetic likeness, fictional voice, or simulated environment generated by our studio diffusion models is disclosed in harmony with Article 50 of the EU AI Act (Regulation (EU) 2024/1689) and UAE digital media transparency regulations.
08 Data Retention and Security Measures
We enforce strict retention schedules:
- Inbound Client Inquiries: Retained for the duration of the commercial relationship or 24 months from last active correspondence, after which data is securely purged unless required for statutory accounting.
- Server and Network Logs: Retained on rolling buffers for 30 to 90 days strictly for threat intelligence and cybersecurity forensic audits.
- Cookie Consent Logs: Stored locally on your device for 365 days, after which re-consent is requested automatically.
Technical safeguards include Transport Layer Security (TLS 1.3), Content Security Policies, rate-limiting mitigations, and segmented access controls with multi-factor authentication.
09 Your Global Data Rights
Depending on your jurisdiction, you enjoy comprehensive, legally enforceable rights over your personal data:
- Right of Access and Confirmation: Obtain confirmation whether we process your data and receive an itemized copy (UAE PDPL Art. 14, DPDP Sec. 11, GDPR Art. 15, CCPA).
- Right to Rectification: Request correction of inaccurate, incomplete, or out-of-date personal information (UAE PDPL Art. 15, DPDP Sec. 12, GDPR Art. 16).
- Right to Erasure ("Right to be Forgotten"): Demand the deletion of your personal data where retention is no longer justified (UAE PDPL Art. 16, DPDP Sec. 12, GDPR Art. 17).
- Right to Restriction and Objection: Restrict or object to the processing of your data on legitimate grounds (UAE PDPL Art. 17 and 19, GDPR Arts. 18 and 21).
- Right to Data Portability: Obtain your personal information in a structured, commonly used, and machine-readable format (UAE PDPL Art. 18, GDPR Art. 20).
- Right to Withdraw Consent: You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal (UAE PDPL Art. 6, DPDP Sec. 6, GDPR Art. 7).
- California Consumer Rights (CCPA/CPRA): We do NOT sell your personal information, nor do we share it for cross-context behavioral advertising. You have the right to know, delete, correct, and non-discrimination.
To exercise any of these rights, contact our Data Protection Team at waleed@aevolabs.org. We respond within statutory deadlines (30 days under GDPR/UAE PDPL; 24-hour acknowledgment under India DPDP).
10 Statutory Grievance Redressal Officer (India DPDP Act 2023)
In fulfillment of Section 13 of the Digital Personal Data Protection Act, 2023, Data Principals in India may submit any complaints, inquiries, or grievances regarding personal data processing to our designated Grievance Redressal Officer:
Officer Title: Data Grievance Redressal Officer
Officer Name: Waleed [TODO_FILL_ME: Grievance Officer Full Name]
Dedicated Email: waleed@aevolabs.org
Office Address: [TODO_FILL_ME: Grievance Redressal Office Address, Dubai, UAE]
Response Service Level: Acknowledgment within 24 hours; formal grievance resolution within 30 days.
11 Cookies, Global Privacy Control (GPC) and Do Not Track
Our website uses cookies and local storage tokens. Full technical specifications are published in our dedicated Cookie Policy.
Global Privacy Control and Do Not Track Signals: Our cookie consent engine natively listens for browser privacy signals (`navigator.globalPrivacyControl === true` and `navigator.doNotTrack === '1'`). When detected, non-essential measurement and third-party embeds are automatically deactivated by default.
You can modify, inspect, or revoke your cookie choices at any moment by clicking the button below:
12 Contact Inquiries and Policy Amendments
We periodically review and update this Privacy Policy to reflect evolving legal precedents and studio technological features. Any material revisions will be reflected on this page with an updated version number. If you have questions or require confidential legal assistance, reach out:
Legal Inquiries: waleed@aevolabs.org
Privacy Desk: waleed@aevolabs.org
Direct Studio Office: +971 55 109 1086 (Dubai, UAE)