Privacy policy
Last updated: July 13, 2026
Aelos Inc. ("we", "us") operates aelos.net (the marketing site) and app.aelos.net (the authenticated product) and offers coordination services for Americans planning retirement in France. This policy describes what personal information we collect, how we use it, and the choices you have.
Information we collect
- Contact form submissions. When you fill out the form on our Contact page, we collect your name, email address, the situation you selected, and the message you wrote.
- Direct email. When you email us at contact@aelos.net, ali@aelos.net, or arnaud@aelos.net, we receive the content you send us.
- Account information (app.aelos.net). When you sign in to the authenticated product, we receive an email address and — if you choose Google sign-in — your Google profile name and profile picture. These come from Google's openid, email, and profile scopes. We do not request, receive, or store your Google password, contacts, calendar, files, or any other data from your Google Account beyond those three scopes.
- Basic analytics. We use Google Analytics on the marketing site to understand which pages are visited and how visitors arrive. This collects aggregated, pseudonymous usage data (page views, referrers, approximate location, device type). We do not sell this data.
- Calls booked via Calendly. If you book a call through our Calendly link, Calendly collects your name, email, and scheduling preferences on our behalf.
- Advertising measurement. The marketing site uses the Meta (Facebook/Instagram) pixel, Meta's Conversions API, and the Google Ads tag to measure whether our ads lead to booked consultations and email signups. This shares data with Meta and Google: page and section views, your IP address and browser information, their ad-click cookies, and — when you book a call or submit your email — a hashed version of your email (and, for Meta, your name), never sent in plain text; each platform uses the hash to match the event to an ad it showed you. The Google tag also builds advertising audiences from site visits. We honor the Global Privacy Control signal: if your browser sends it, none of this sharing happens for your visit.
How we use it
- To reply to your inquiry and, with your permission, continue the conversation.
- To evaluate whether we are a good fit for your situation.
- To authenticate your account on app.aelos.net and identify you across sessions. The email address and profile data received via Google sign-in are used solely to create and identify your Aelos account; they are not used for advertising, profiling, or shared with any party other than the sub-processors listed below.
- To improve the website based on aggregated analytics.
We do not sell your personal information for money. Sharing usage data with Meta and Google for ad measurement may qualify as "sharing" under California law — you can opt out at any time by enabling the Global Privacy Control (GPC) signal in your browser, which we honor automatically, or by emailing contact@aelos.net. We do not send marketing emails unless you have explicitly asked to receive them. We do not use data received from Google APIs to develop, improve, or train generalized AI or machine-learning models.
Service providers and sub-processors
We rely on a small number of third-party services to operate the site and the authenticated product. Each processes only what is needed for the function described:
- Vercel — hosts both aelos.net and app.aelos.net and processes inbound HTTP traffic.
- Supabase — stores authentication identifiers (your email address, name, profile picture, and the access tokens needed to keep you signed in) for app.aelos.net. Located in the United States.
- Resend — delivers transactional email generated by the contact form and sign-in magic links.
- Google — when you choose Google sign-in, Google handles the authentication itself; we receive only the openid/email/profile fields described above.
- Google Analytics — aggregates marketing-site usage.
- Google Ads — measures ad-campaign performance and builds advertising audiences (conversion tag); receives usage events and hashed contact identifiers, suppressed entirely when your browser sends a Global Privacy Control signal.
- Calendly — schedules founder calls.
- Meta — measures ad-campaign performance (pixel and Conversions API); receives usage events and hashed contact identifiers, suppressed entirely when your browser sends a Global Privacy Control signal.
- Stripe — processes payments for Aelos services; receives your name, email address, and payment details when you purchase. Located in the United States.
- Front — our customer-communication workspace; messages you send to your concierge (and our replies) are processed and stored there. Located in the United States.
- Attio — our customer-relationship system; stores contact details and inquiry context for people who reach out to us. Located in the United States.
- Vercel AI Gateway / Anthropic — when we use AI to help draft responses to your messages, the message content is processed through these providers; drafts are always reviewed by a human before anything is sent, and your data is not used to train models.
Service partners
Delivering Aelos services requires working with vetted professional partners — this is inherent to what you purchase from us. When your relocation or membership reaches the relevant step, we share the information and documents that step requires with the partner who performs it: our visa-administration partner (visa filings, appointment booking, residence-permit validation, driver's-license exchange), our court-listed sworn translator (civil-status documents), our healthcare-enrollment partner (French health-system enrollment), and our cross-border tax partner (annual filings). Documents are shared through expiring, revocable, access-logged links — never as permanent email attachments — and each product step tells you which partner is involved before you reach it. Some engagements (for example with a French expert-comptable or an estate attorney) are contracted by you directly with the professional, as French professional rules require.
We do not transfer or disclose your information to third parties for purposes other than the operations described above.
Retention and deletion
We keep contact form submissions in our email inbox for as long as they are useful to our working relationship. We keep account records for app.aelos.net while the account is active and for a short period afterwards for audit and legal-compliance purposes. When the data retention period expires for a given record, we delete or destroy it.
You may request access to, correction of, or deletion of any data we hold about you — including your account on app.aelos.net — at any time by emailing contact@aelos.net. If your account was created via Google sign-in, you can also revoke Aelos's access at any time from your Google Account at myaccount.google.com/permissions.
Your rights
If you are in the European Union, the United Kingdom, or California, you have the rights granted by GDPR, UK GDPR, and CCPA/CPRA respectively, including the right to access, correct, port, or delete your data, and the right to lodge a complaint with your local regulator. California residents also have the right to opt out of the "sale" or "sharing" of personal information: we treat the Global Privacy Control browser signal as a valid opt-out request and honor it automatically, on every page.
Cookies
The marketing site sets a small number of cookies used by Google Analytics, by the Meta pixel (_fbp and _fbc), and by the Google Ads tag (_gcl_*). The authenticated product (app.aelos.net) sets httpOnly session cookies that keep you signed in; these are essential to the service and cannot be disabled. Advertising cookies (_fbp, _fbc, _gcl_*) are suppressed automatically when your browser sends the Global Privacy Control signal; analytics and advertising cookies can also be disabled via your browser settings or a browser extension, without affecting functionality.
Children
The site is not directed to children under 16 and we do not knowingly collect information from them.
Contact
Questions about this policy? Email contact@aelos.net.
