Privacy policy.
Last Updated: September 17, 2026
This Privacy Policy explains how Trebbble S.A. ("Trebbble", "Abelo", "we", "us", or "our") collects, uses, stores, shares, and protects personal data in connection with the Abelo platform and website.
Abelo is a business messaging and communication platform that enables businesses and organizations to communicate with their customers, users, subscribers, members, clients, employees, prospects, and other recipients through supported messaging channels, including Viber and SMS, together with related audience management, automation, analytics, integrations, and API services.
This Privacy Policy applies to:
visitors to abelo.ai;
users and administrators of the Abelo platform;
individuals who communicate with us;
personal data that Abelo processes on behalf of its business customers; and
personal data processed in connection with our messaging and communication services.
Where Abelo processes personal data on behalf of a customer, the customer's instructions and the applicable Data Processing Agreement ("DPA") also govern that processing.
1. Who we are
Abelo is a product of Trebbble S.A., a technology company registered in Greece.
Throughout this Privacy Policy, "Abelo", "we", "us", and "our" refer to Trebbble S.A. and the Abelo platform.
Website: https://abelo.ai
Email: support@abelo.ai
Trebbble S.A. is based in Greece and is responsible for operating the Abelo platform.
Depending on the circumstances, Abelo may act as:
a data controller when we determine the purposes and means of processing personal data, such as information relating to our website visitors, account holders, prospects, and business contacts; or
a data processor when we process personal data on behalf of an Abelo customer in accordance with that customer's instructions.
2. Personal Data We Collect
The type of personal data we process depends on how you interact with Abelo.
2.1 Website Visitors
When you visit abelo.ai, we may collect:
IP address;
browser and device information;
operating system;
referring website;
pages viewed;
approximate location derived from IP address;
usage information;
cookie and similar technology data; and
information voluntarily submitted through forms.
If you contact us or submit a form, we may collect:
name;
business email address;
company or organization;
job title;
telephone number;
country;
information included in your inquiry; and
other information you choose to provide.
2.2 Abelo Account and Platform Users
When an organization creates an Abelo account or uses the Platform, we may collect:
name;
business email address;
telephone number;
company or organization name;
job title;
billing information;
account credentials;
account and subscription information;
login and authentication information;
platform activity;
campaigns and messaging configuration;
API and integration configuration;
support communications; and
other information necessary to provide and secure the Services.
Payment information may be processed by third-party payment providers. Unless otherwise stated, Abelo does not store complete payment card numbers on its own servers.
2.3 Data Processed on Behalf of Our Customers
Abelo customers may provide or synchronize personal data relating to their customers, users, subscribers, members, clients, employees, prospects, or other recipients.
Depending on how the customer uses Abelo, this may include:
name;
telephone number;
email address;
customer or user ID;
account or membership information;
communication preferences;
consent and opt-out information;
segmentation information;
transactional information;
appointment or service information;
order and purchase information;
product or service information;
campaign and communication history;
message delivery, engagement, and click analytics (such as delivery timestamps, delivery status receipts, message interactions, click timestamps, approximate geographic location, device category, browser type, and referring URL);
custom attributes; and
other information provided by or on behalf of the customer.
This information may be provided through:
the Abelo Platform;
APIs and SDKs;
CSV or other file uploads;
CRM or business systems;
e-commerce platforms;
websites and forms;
webhooks;
other third-party integrations; or
other systems connected to Abelo.
Where customers deploy Abelo lead capture, phone collection, or OTP verification widgets on their websites or online stores, Abelo collects and processes submitted contact details (such as telephone numbers) and verification event records strictly as a data processor on behalf of the customer. The customer, as data controller, is responsible for providing appropriate privacy disclosures and obtaining any necessary consents on its website.
When Abelo processes this information on behalf of a customer, Abelo acts as a data processor and processes the information in accordance with the customer's instructions and the applicable DPA.
We do not use customer-provided recipient data for our own unrelated marketing purposes.
3. How We Use Personal Data
Depending on the context, we may use personal data to:
provide, operate and maintain Abelo;
create and administer accounts;
authenticate users;
process subscriptions, billing and payments;
provide messaging and communication services;
send transactional, authentication and service communications requested by customers;
provide promotional messaging functionality where configured by customers;
operate APIs, integrations and webhooks;
provide customer support;
monitor service performance and security;
prevent fraud, abuse and unauthorized access;
maintain the reliability and integrity of our messaging infrastructure;
troubleshoot technical problems;
improve and develop the Platform;
communicate service updates and operational information;
send marketing communications where permitted and where appropriate consent has been obtained;
comply with legal and regulatory obligations; and
establish, exercise or defend legal claims.
Where we process personal data as a processor on behalf of a customer, we process that data according to the customer's documented instructions and the applicable DPA.
4. Legal Bases for Processing
4.1 When Abelo Acts as a Data Controller
Where the GDPR applies to our activities as a data controller (such as managing website visitors, merchant user accounts, and billing), we rely on one or more of the following legal bases:
Purpose - Legal basis
Providing and operating the Abelo Platform - Performance of a contract (Art. 6(1)(b) GDPR)
Account administration - Performance of a contract (Art. 6(1)(b) GDPR)
Billing and payment processing - Performance of a contract / Legal obligation (Art. 6(1)(b), (c) GDPR)
Customer support - Performance of a contract / Legitimate interest (Art. 6(1)(b), (f) GDPR)
Platform security and fraud prevention - Legitimate interest / Legal obligation (Art. 6(1)(f), (c) GDPR)
Service notifications - Performance of a contract / Legitimate interest (Art. 6(1)(b), (f) GDPR)
Platform improvement - Legitimate interest (Art. 6(1)(f) GDPR)
Direct marketing (website & prospects) - Consent or Legitimate interest, where legally permitted
Compliance with legal and tax obligations - Legal obligation (Art. 6(1)(c) GDPR)
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
4.2 When Abelo Acts as a Data Processor
When Abelo processes recipient data on behalf of our customers (such as contact lists, store order synchronization, message dispatching, and engagement metrics), the customer acts as the data controller and is responsible for establishing an appropriate legal basis under GDPR Article 6 (such as explicit consent or legitimate interest) and complying with applicable electronic marketing laws (including Greek Law 3471/2006 and the ePrivacy framework).
Abelo processes such data strictly on the documented instructions of the customer pursuant to GDPR Article 28 and the applicable Data Processing Agreement ("DPA").
5. Messaging and Communication Providers
Abelo relies on messaging networks, telecommunications providers, infrastructure providers, and other technology partners to provide certain Services.
Abelo is an official Rakuten Viber Messaging Partner and may transmit relevant recipient and message information to Rakuten Viber and/or the relevant Viber messaging infrastructure when Viber Business Messages are used.
Depending on the customer's selected channels and configuration, Abelo may also use:
SMS telecommunications operators and messaging providers;
WhatsApp or other messaging providers where such channels are made available;
cloud infrastructure providers;
analytics and monitoring providers;
payment providers;
e-commerce platforms;
CRM and business application providers; and
other service providers necessary to operate the Services.
These providers may process personal data as our subprocessors or as independent controllers, depending on their role and applicable law.
An authoritative list of current subprocessors and technology providers utilized by Abelo is maintained and accessible at: https://abelo.ai/legal/subprocessors
When a customer uses a third-party messaging channel, the processing of personal data may also be subject to the privacy policy and terms of that messaging provider.
6. Third-Party Integrations
Customers may connect Abelo with third-party platforms and applications, including e-commerce platforms, CRM systems, business applications, APIs, and other services.
When an integration is enabled, Abelo may receive or transmit data necessary to provide the requested functionality.
The availability and processing of data through a third-party integration is also subject to the terms and privacy policies of that third party.
Customers are responsible for ensuring that they have the appropriate authorization and legal basis to connect third-party systems and provide Abelo with the relevant data.
7. How We Share Personal Data
We do not sell personal data.
We may share personal data with:
Service Providers and Subprocessors
Technology providers that support our hosting, messaging, analytics, security, payments, customer support, monitoring, and other business operations.
Messaging Providers
Messaging and telecommunications providers necessary to deliver communications through Viber, SMS, WhatsApp, or other supported channels.
Business Integrations
Third-party platforms that a customer has explicitly connected to Abelo.
Professional Advisers
Lawyers, accountants, auditors, insurers, consultants, and other professional advisers where necessary.
Legal and Regulatory Authorities
Where disclosure is required by applicable law, regulation, court order, governmental request, or other valid legal process.
Business Transactions
Where reasonably necessary in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction.
We require service providers processing personal data on our behalf to maintain appropriate contractual, technical, and organizational safeguards.
8. International Data Transfers
Abelo is based in Greece and operates within the European Union.
We seek to process and store personal data within the European Economic Area ("EEA") where reasonably possible.
Where personal data is transferred outside the EEA, we implement appropriate safeguards as required by applicable law, which may include:
European Commission adequacy decisions (including for transfers to Japan);
the EU-U.S. Data Privacy Framework (for certified U.S. recipients);
European Commission Standard Contractual Clauses; or
other legally recognized transfer mechanisms.
9. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods are determined according to the following categories:
Account, Commercial and Tax Data
In accordance with Greek commercial, accounting, and tax legislation, account records, transaction history, and tax documentation (including invoices and VAT data) are retained for statutory limitation and audit periods, typically between five (5) and ten (10) years following the transaction or termination of the customer relationship.
Messaging and Operational Data
Operational telecommunications records, such as delivery status reports (DLRs), transient verification tokens (OTPs), and webhook signatures, are retained for the short operational windows necessary to complete delivery verification, troubleshoot network routing, and satisfy carrier or regulatory reporting obligations.
Customer Recipient Data (Data Processor Role)
Where Abelo processes recipient data on behalf of a customer, that data is retained for the duration of the customer's active subscription and deleted or returned in accordance with the applicable DPA and customer instructions upon termination.
Suppression and Consent History
Where a recipient exercises their right to unsubscribe or opt out of marketing communications, or requests erasure, identifying profile attributes are erased or anonymized, while a minimal suppression record (such as a cryptographic hash of the recipient's phone number or opt-out flag) is retained strictly to maintain opt-out integrity and prevent accidental re-import or unauthorized future messaging, in accordance with GDPR Article 17(3)(b) and Article 21.
10. Data Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, destruction, or loss.
These measures may include:
encryption in transit and at rest;
access controls;
role-based permissions;
authentication and authorization controls;
monitoring and logging;
secure infrastructure;
vulnerability management;
backup and recovery procedures; and
security reviews.
No internet-based system can be guaranteed to be completely secure. You acknowledge that no method of electronic transmission or storage can provide absolute security.
11. Your Data Protection Rights
Where applicable under GDPR or other data protection legislation, you may have rights including:
access;
rectification;
erasure;
restriction of processing;
data portability;
objection to processing;
withdrawal of consent; and
the right not to be subject to certain automated decision-making.
To exercise rights relating to personal data for which Abelo is the controller, contact:support@abelo.ai
Where Abelo processes your personal data on behalf of one of our customers, that customer is generally the appropriate party to contact because it determines the purposes and means of the processing.
If you are a customer, user, subscriber, client, member, or other recipient of an organization using Abelo, please contact that organization first regarding requests relating to communications or personal data it controls. Abelo will assist the customer as required under the applicable DPA.
You may also have the right to lodge a complaint with the competent data protection supervisory authority.
For Greece:
Hellenic Data Protection Authority (HDPA): https://www.dpa.gr
12. Cookies and Similar Technologies
Abelo uses cookies and similar technologies on its website.
These technologies may be used for:
essential website functionality and security;
analytics and performance measurement; and
marketing and conversion measurement, where applicable and permitted.
Additional information about our use of cookies and how to manage your preferences is available in our Cookie Policy at:
https://abelo.ai/legal/cookie-policy
13. Children's Data
Abelo is a business-to-business platform and is not directed to children.
We do not knowingly collect personal data directly from children through our website or Platform.
However, because Abelo processes recipient data on behalf of businesses and organizations, a customer may potentially provide data relating to individuals of different ages. Customers are responsible for ensuring that their use of Abelo complies with applicable laws relating to children's data.
If you believe that Abelo has received personal data relating to a child in circumstances where such processing is not lawful, please contact us at:
14. Third-Party Websites
Our website or Platform may contain links to third-party websites, services, or applications.
We are not responsible for the privacy practices, security, content, or policies of third parties.
We encourage you to review the privacy policies of any third-party service you use.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
our Services;
technology;
business practices;
legal or regulatory requirements; or
data protection practices.
When we make material changes, we will update the "Last Updated" date and, where appropriate, provide additional notice.
We encourage you to review this Privacy Policy periodically.
16. Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of Greece and applicable European Union law.
Unless otherwise required by mandatory applicable law, disputes relating to this Privacy Policy shall be subject to the jurisdiction of the competent courts of Athens, Greece.
17. Contact Us
If you have questions regarding this Privacy Policy or our processing of personal data, please contact us:
Abelo โ Trebbble S.A.
4 Nikitara & Psaron Street
152 32 Chalandri, Athens, Greece
Email: support@abelo.ai
Website: https://abelo.ai
For data protection matters, you may also contact the Hellenic Data Protection Authority:
Website: https://www.dpa.gr
Last Updated: September 17, 2026