Privacy policy

1. Data controller

Aures Software acts as controller for personal data collected through its websites, custom web development services, plugins, forms, commercial communications, purchases or service contracting, technical support and private dashboard.

Where processing depends on an external provider, that provider may act as processor under its own contractual, technical and organizational safeguards.

2. Data we may process

We process only the data needed to operate the commercial, technical and contractual relationship with customers, users, prospects and visitors.

• Identification and contact data: name, email, company, country, city and information voluntarily submitted through forms.
• Account data: encrypted credentials, verification status, roles, access history and operational preferences.
• Purchase and billing data: product, plan, license, transaction identifiers, payment status and strictly necessary tax data.
• Technical data: domain, site URL, product version, activation events, IP address, user agent, security logs and operational metrics.
• Support data: messages, attachments sent by the user, ticket history and replies needed to resolve incidents.

3. Purposes of processing

Data is used to provide custom web development services, deliver plugins, manage licenses, prevent abuse, support users and improve platform security.

• Create, verify and manage user accounts.
• Generate, validate, suspend or revoke licenses under the applicable terms.
• Process payments, issue records and handle events sent by payment providers.
• Deliver updates, documentation, technical notices and transactional communications.
• Respond to sales requests, technical support, security incidents and complaints.
• Analyze performance, stability, abuse, fraud, session integrity and technical compatibility.
• Send marketing communications only when authorized or otherwise legally permitted.

4. Data subject rights

Data subjects may access, update, correct, request proof of authorization, be informed about data use, file complaints, revoke authorization and request deletion where applicable.

Deletion may not apply where there is a legal or contractual duty to retain information, including accounting records, security, fraud prevention, transaction support or defense of rights.

5. Retention and providers

We retain data for as long as needed to fulfill the stated purposes, manage products, provide support, keep security records, comply with legal obligations and resolve disputes.

We may use providers for hosting, analytics, transactional email, support, security, automation, payment processing and storage. Providers receive only the information needed to perform their role.

Some providers may be located outside Colombia. In those cases, we seek providers with reasonable security, confidentiality and data protection measures.

6. Information security

We apply reasonable technical and organizational measures to protect data against unauthorized access, loss, alteration, disclosure or misuse. No internet-connected system can guarantee absolute security.

Users must protect their credentials, use strong passwords, keep their sites updated and report suspicious access.

7. Changes to this policy

We may update this policy to reflect legal, technical, commercial or security changes. The version published on this site is effective from the date shown at the top.