Aeorost

Privacy policy

What we collect, why we collect it, who receives it, and how to get it back or have it deleted. No dark patterns, no data sale.

Last updated: October 21, 2026

1. Who is responsible

For your account data — your name, your email, your billing details, your connection logs — the controller is E-commerce Pro LLC, publisher of Aeorost.

Company:
E-commerce Pro LLC
Address:
539 W Commerce St, Suite 144, Dallas, TX 75208, United States
EIN:
38-4228237
Email:
contact@aeorost.org

For the data you enter about your own customers, employees, and suppliers, you are the controller and we are the processor. We act on your instructions, and only to run the service.

2. What we collect

What you give us. Your name, your email address, your company name, your job title, your password (stored hashed, never in clear), and your billing address if you provide one.

What you enter in the service. Your customer records, your quotes and invoices, your support tickets, your employees' information, your files. This data belongs to you; we host it and do not look at it, except when you ask us to in a support request.

What is produced automatically. Connection logs (date, IP address, browser), and technical traces needed to diagnose a failure. We keep them for a limited time, and we do not build advertising profiles from them.

What we never collect. Payment card numbers — they go directly to Stripe. Nor your contacts, your location, or anything from your device that the service does not need.

3. Why we process it

  • To provide the service: create your account, show your data, send the emails you trigger, invoice you when the beta ends.
  • To keep it running and secure: detect a failure, block an intrusion attempt, restore a backup.
  • To answer you: when you write to support, we read the message and the information it contains.
  • To meet our obligations: accounting, tax, and legal requirements.

We do not send commercial prospecting to your customers, and we do not send you advertising. Product announcements are sent to account owners, and you can opt out of them; messages about security and billing are not optional.

4. Who receives it

We work with a small number of providers, each for one job. They process data only on our instructions, under a contractual obligation of confidentiality.

  • Supabase — database and file storage. Hosts everything you enter in the service.
  • Stripe — payments. Receives your billing details and your card data when a payment is made. We never see your card number.
  • Brevo — transactional email. Receives the recipient address and the content of the message the service sends.

We do not sell your data, and we do not share it for advertising. We may disclose it if the law requires it, and we tell you when we are allowed to.

5. How long we keep it

  • While your account is active, your data stays available to you.
  • If you close your account, it is deleted after a short grace period, so that an accidental deletion can be undone.
  • Invoices and accounting documents are kept for the duration required by tax law, even after the account is closed.
  • Connection logs are kept for a limited period, then deleted.
  • Backups are rotated, and a deleted record disappears from them within a few weeks.

6. Cookies

Aeorost uses only essential cookies: the one that keeps you signed in, and a technical cookie that protects forms against cross-site requests. Without them, the service cannot work — which is why there is no consent banner.

There is no advertising cookie, no audience-measurement cookie, and no third-party tracker on the application. The public pages do not set any cookie.

7. How we protect it

  • Each organization's data is isolated at the database level: the access rules are enforced by the database itself, not only by the interface.
  • Exchanges are encrypted in transit. Passwords are stored hashed, never in clear.
  • Two-factor authentication is available on every account, and strongly recommended on administrator accounts.
  • Access to production is limited to the people who operate the service, and logged.

No system is infallible. If a breach affects your data, we notify you and the competent authorities within the deadlines set by law.

8. Your rights

You can ask to access your data, correct it, delete it, or receive a copy in a usable format. You can also object to a processing operation, or ask for it to be restricted.

Write to contact@aeorost.org. We answer within thirty days. We may ask for proof of identity, so that we do not hand your data to someone else.

Most of these operations are also available directly in the service: export, correction, and deletion of a record.

If you are in California, you have the rights granted by the CCPA/CPRA, including the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We will not treat you differently for exercising these rights.

9. Where your data is stored

Data is hosted by our infrastructure provider, Supabase. Where a transfer outside your country occurs, it is covered by the contractual safeguards that provider puts in place. Write to us if you need the details for your own compliance file.

10. Children

Aeorost is a professional tool. It is not intended for people under 18, and we do not knowingly collect data about them.

11. Changes

If this policy changes in a substantial way, we tell you by email at least thirty days before the change takes effect. The date at the top of this page always reflects the version in force.

12. Contact

E-commerce Pro LLC — 539 W Commerce St, Suite 144, Dallas, TX 75208, United States. contact@aeorost.org.