Privacy policy

Aperion ("we", "our", "us") is committed to protecting your personal data. This policy explains what we collect, how we use it, and your rights under applicable data protection law. Our data protection contact is [email protected].

What data we collect

Account data

Name, email address, password (stored as a one-way hash), and profile information you provide when you register for an account.

Website monitoring data

URLs, domain names, and webpage content you add to Aperion for monitoring. This includes HTML, screenshots, and performance data captured from your websites during analysis.

Usage data

Pages visited within the app, features used, clicks, session duration, and interaction logs. This data helps us understand how the product is used and identify areas for improvement.

Payment data

Billing name, address, and payment method details. Card numbers are processed directly by Stripe and are never stored on our servers. We receive only a tokenised reference from Stripe.

Technical data

IP address, browser type and version, device type, operating system, and cookies. See our Cookie Policy for details.

How we use your data

Provide and maintain the Aperion service
Process your subscription and payments
Send service-related notifications such as security alerts, billing receipts, and product updates
Analyse usage patterns to improve the product
Comply with legal obligations
Prevent fraud and abuse

Legal basis for processing (GDPR)

Where the GDPR applies, we rely on the following lawful bases:

Contract performance - processing is necessary to provide the service you have signed up for
Legitimate interests - security monitoring, fraud prevention, and product analytics
Legal obligation - retaining tax records and meeting regulatory requirements
Consent - marketing emails; you can withdraw consent at any time by unsubscribing or contacting us

Data sharing

We do not sell your personal data. We share data only with trusted third parties required to operate the service:

Stripe - payment processing
Amazon Web Services (AWS) - cloud infrastructure and storage
OpenAI / Anthropic - AI-powered page analysis; only the page content you submit for monitoring is shared, not your account data
PostHog - product analytics
Where required by applicable law or a lawful government request

Data retention

Account data - retained while your account is active and deleted within 30 days of account closure
Website monitoring data - retained for 12 months then automatically purged
Payment records - retained for 7 years as required by tax law

Your rights

Depending on your location, you may have the following rights regarding your personal data:

Access a copy of your data
Correct inaccurate or incomplete data
Request deletion of your data
Restrict how we process your data
Receive your data in a portable format
Object to processing based on legitimate interests
Withdraw consent at any time

To exercise any of these rights, contact us at [email protected]. EU residents may also lodge a complaint with their national data protection authority. See our GDPR page for full details.

Cookies

We use cookies for authentication, security, analytics, and preferences. For a full breakdown of the cookies we set and how to manage them, see our Cookie Policy.

Children's privacy

Aperion is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to this policy

We will notify you by email of any material changes to this policy before they take effect. Continued use of the service after the effective date constitutes your acceptance of the updated policy.

Contact us

For privacy-related questions or requests, contact us at [email protected].