Privacy Policy

This Privacy Policy explains how AerySites ("we", "us", "our") collects, stores, uses, discloses, and protects your information when you visit our website (https://aerysites.com), register for customer accounts, purchase hosting plans, configure web development orders, or utilize our customer dashboard and infrastructure services.

By registering an account, placing an order, or browsing our platform, you acknowledge and agree to the practices detailed in this Privacy Policy. If you do not agree with any terms herein, please discontinue use of our platform and services immediately.

We collect information directly from you when you register, purchase, or communicate with us, as well as technical logs automatically generated during platform operations:

A. Account & Registration Information

• Account Credentials: Full name/username, primary email address, and cryptographically hashed passwords (salted using bcrypt; plain text passwords are never stored or accessible by our staff).
• Verification Data: Short-lived 6-digit email verification OTP codes generated during registration and password resets.
• Contact Inquiries: Communications sent to our support desk or legal email addresses.

B. Order & Billing Details

• Plan & Duration Selection: Selected hosting tiers, custom website features, duration cycles (1, 3, or 6 months), and renewal timestamps.
• Payment Transaction Tokens: Payment order references, Paymob transaction IDs, and currency indicators. Notice: Full payment card numbers, CVVs, and banking credentials are processed directly by certified payment gateways and are never recorded on our application servers.

C. Technical Logs & Infrastructure Metrics

• Network Identifiers: Internet Protocol (IP) addresses, browser type, device specifications, and operating system attributes.
• Service Telemetry: API access timestamps, error logs, and hosting resource utilization (such as active user sessions and concurrent connection counters used to protect server stability).

We process collected information strictly for legitimate operational and business purposes:

When you deploy websites or manage clients through AerySites, we act as a data processor for the content and end-user traffic routed through your hosted sites.

Separation of Administrative Client Portal

The administrative client management portal is restricted exclusively to authorized AerySites operational personnel. End customers maintain their own dedicated self-service customer dashboard (My Orders) and cannot view internal system metrics, cross-customer records, or administrative databases.

Capacity & Telemetry Monitoring

To enforce plan capacity thresholds (e.g., maximum active users and concurrent visitor limits), our edge servers aggregate non-identifying telemetry metrics. These metrics measure bandwidth and active connections to safeguard shared infrastructure against denial-of-service threats without harvesting personal identifiable information of your website visitors.

Payment processing on AerySites is conducted in compliance with stringent PCI-DSS payment card industry standards via external, certified payment services (such as Paymob).

We maintain record of transaction identifiers, purchased tier plans, timestamps, amounts, and currency indicators solely to fulfill invoicing requirements, account renewals, and order tracking.

AerySites utilizes direct SSL/TLS-encrypted SMTP mail gateways to dispatch essential transactional emails. These include:

• Authentication & Security: Registration OTP verification codes, password reset requests, and security alerts.
• Subscription Lifecycle Notices: Monthly website performance statistics, capacity utilization figures, and subscription renewal deadlines.
• Order Status Updates: Confirmation of successful deployments, order activation, and invoice receipts.

Because these emails are strictly operational and required for account security and service continuity, they are non-promotional and cannot be disabled without closing your account. We never send unsolicited marketing emails or sell your email address to mailing list vendors.

We believe in minimal web tracking. We do not employ third-party tracking pixels, invasive cross-site ad tracking, or fingerprinting scripts.

Browser Local Storage Usage

Our frontend utilizes HTML5 localStorage for authentication, session state, and appearance preferences:

• aery_theme: Your optional Light or Dark appearance preference. Choosing System removes this preference so the website follows your device settings.
• aery_customer_token: An encrypted JSON Web Token (JWT) authorizing your secure session with our backend API.
• aery_customer_user: Basic non-sensitive user metadata (username and email) required to render dynamic navigation headers.

You can inspect or delete these items through your browser's developer tools. Logout removes your session information; the color theme control manages your appearance preference.

We partner with select infrastructure and service providers to operate our cloud hosting platform. All sub-processors undergo confidentiality and data security evaluations:

• Payment Gateways (e.g., Paymob): Processing customer payments, subscription charges, and webhooks.
• Data Center & Cloud Infrastructure: Dedicated cloud nodes providing hosting compute, database storage, and high-availability networking.
• SMTP Mail Delivery: Encrypted mail servers facilitating instant verification codes and performance digests.

We do not share your information with any third party for commercial marketing or promotional purposes.

We retain your personal data and account logs only for as long as necessary to maintain active hosting services, comply with accounting and taxation regulations, and resolve legal disputes:

• Active Account Data: Maintained for the duration of your registered account with AerySites.
• Billing & Invoicing History: Retained for financial audit compliance in accordance with statutory requirements.
• Expired Hosting Artifacts: Following plan cancellation or non-renewal, website hosting deployments are archived for 30 days before permanent deletion from active servers.
• Verification OTPs: Ephemeral 6-digit codes automatically expire and are purged from database memory within 15 minutes of creation.

We implement robust technical and organizational measures engineered to protect your personal information against accidental loss, unauthorized access, alteration, and disclosure:

• Transport Layer Security: End-to-end TLS/SSL encryption across all HTTP web traffic and mail transmission channels.
• Cryptographic Hashing: Passwords hashed with high-cost salt parameters via bcrypt algorithms.
• Role-Based Access Control: Strict backend API authorization barriers separating customer endpoints from administrative controls.
• Automated Rate Limiting: IP-level rate-limiting protecting against brute-force attacks, credential stuffing, and volumetric denial-of-service attempts.

Depending on your jurisdiction, you possess specific legal rights regarding your personal information:

• Right of Access: The right to request copies of personal data we retain about you.
• Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated details.
• Right to Erasure ("Right to be Forgotten"): The right to request permanent deletion of your account and personal records, subject to statutory record-keeping requirements.
• Right to Restrict Processing: The right to object to or request limitations on certain data processing activities.
• Right to Data Portability: The right to obtain your website files and account history in a structured, commonly used format.

To exercise any of these rights, please submit a formal request to our compliance team at support@aerysites.com. We will respond within thirty (30) calendar days.

Our website, client tools, and hosting services are directed strictly toward commercial clients, web developers, and individuals at least 18 years of age (or the legal age of contractual majority in your jurisdiction).

We do not knowingly solicit or collect personal information from children under 18. If you have reason to believe that a minor has provided us with personal information, please alert us immediately at support@aerysites.com so we can expedite deletion of the associated records.

We may revise this Privacy Policy periodically to reflect technological changes, new platform capabilities, or updated statutory requirements. When modifications occur, we will update the "Last Updated" date at the top of this document.

For material changes that significantly impact how your personal data is handled, we will provide prominent notice on our homepage or via an email notification to the primary address associated with your account. Your continued use of AerySites services following the posting of amendments confirms your acceptance.

For questions regarding this Privacy Policy, data access requests, or security vulnerabilities, please reach out directly to our Data Protection and Compliance office: