Legal

Privacy policy

Last updated DATE · Effective DATE

This explains what we collect, why, who sees it and how to get rid of it. The short version: an email address and a password to run your account, a Stripe reference to bill you, and measurements about your website — never its content.

Still to fill in. Everything highlighted in yellow needs your details before this page is published, and the whole page should be read by a solicitor in your jurisdiction. Delete this banner once that is done.

1. Who is responsible

ENTITY NAME, of REGISTERED ADDRESS, is the data controller for the information described here. Write to privacy@aeronex.ai about anything on this page.

2. What we collect

When you create an account

Your name, email address and the website you intend to use the licence on. Your password is stored only as a one-way hash — we cannot read it, and neither can anybody who gets hold of our database.

When you pay

We never see your card number. It goes straight from your browser to Stripe. We keep the customer and subscription references Stripe gives us, your plan, its status and its renewal date, so your account page can show you what you are paying for.

From the plugin, while it works

The plugin measures your site and sends those measurements to us so our servers can decide what they mean. What leaves your site is counts, sizes, versions and yes-or-no answers — for example “1,840 revisions”, “PHP 8.2”, “file permissions are writable”.

What is deliberately never sent: the content of your posts and pages, your visitors’ or customers’ personal data, email addresses from your site, your API keys, your security salts, your database contents and your passwords. This is tested, not merely intended: our test suite asserts that every fact leaving a site is a plain number, version or yes/no, and fails the build if anything else appears.

Automatically, as any web server does

Your site’s domain, the IP address a request came from, the plugin version and the time, written to an activity log so licence activations can be traced and abuse spotted.

3. Why we hold it, and on what basis

  • To provide the service — running your account, issuing and checking your licence, judging your site’s measurements and reporting back. Basis: performance of our contract with you.
  • To take payment and keep the records tax law requires. Basis: contract, and legal obligation.
  • To support you when you ask, and to let our engineers fix what the agents report. Basis: contract.
  • To protect the service from licence abuse and attacks. Basis: our legitimate interest in not being defrauded.
  • To email you about your account, your trial ending and your payments. Basis: contract. We do not send marketing email unless you ask for it.

4. Who else sees it

We do not sell personal data, and we do not share it for advertising. We never have and we have no plans to.

  • Stripe processes payments and holds your card details. Stripe’s privacy policy.
  • Our hosting provider, PROVIDER, COUNTRY, stores the servers this all runs on.
  • Google Fonts serves the typefaces on our public website. Loading a page asks Google’s servers for the font files, which means your IP address reaches them. No account or logged-in session is involved.
  • Authorities, if the law requires it — and we will tell you unless we are forbidden to.

Where data is transferred outside your country, we rely on the standard contractual clauses our providers offer.

5. Cookies

We use one cookie, and it is the one that keeps you signed in to your account. It is HttpOnly, it is sent only over HTTPS, and it holds a session identifier and nothing else.

There are no advertising cookies, no tracking pixels and no third-party analytics on this website. That is why you have not been asked to dismiss a cookie banner.

6. How long we keep it

  • Account details — while your account exists, and 90 days after you ask us to close it.
  • Billing records — 7 years, because tax law requires it. This is the one thing we cannot delete on request.
  • Site measurements — the most recent set only. Each round replaces the last; we do not build a history of your website.
  • Activity logs — 12 months, then deleted.

7. Your rights

Wherever you live, you can ask us to:

  • tell you what we hold about you, and give you a copy;
  • correct anything wrong — most of it you can edit yourself on your account page;
  • delete your account and the personal data in it, apart from the billing records we are legally required to keep;
  • stop processing, or object to it, where the law gives you that right;
  • take your data elsewhere in a portable format.

Email privacy@aeronex.ai. We answer within 30 days, and we do not charge for it. If you are in the UK or EU you may also complain to your data protection authority, and if you are in India you may complain under the Digital Personal Data Protection Act — but please come to us first, because it is usually quicker.

8. How it is kept safe

Everything travels over HTTPS. Passwords are hashed, never stored. The licence database is kept out of the web root with an unguessable filename, so it stays private even on a server that ignores its access rules. Answers from our licence server are signed, so your site can prove an answer came from us and was not forged on the way. Card details never touch our servers at all.

No system is perfect. If a breach ever affects you, we will tell you and the relevant authority within the time the law requires, and we will tell you what actually happened.

9. Children

This is a business service and is not aimed at children. We do not knowingly collect data from anybody under 16. If you believe we have, tell us and we will delete it.

10. Changes

If we change this policy in a way that matters, we will email account holders before it takes effect. The date at the top always shows the current version.

11. Contact

ENTITY NAME
REGISTERED ADDRESS
privacy@aeronex.ai