Privacy policy

Last updated: 24/10/2026

Who processes the data

The controller of your account data is autositer (IPlus Technologies, Nicosia, EE56543). Contact for personal data matters: info@autositer.com.

What data we collect and why

• Account: email, name (optional), password (stored only in hashed form), registration and email confirmation dates. Legal basis: performance of the contract.
• Sites: the content and images you enter, your address and your plan. Legal basis: performance of the contract.
• Payments: card details never pass through our servers; they are handled by the payment provider (Mollie B.V. or Stripe). We keep only the amount, status, plan and transaction identifier. Legal basis: performance of the contract and legal obligation (accounting and tax records).
• Form messages from your sites: what visitors send (name, email, message) and their IP address, for protection against abuse. For this data you are the controller and we are the processor (see Terms, section 6). They are deleted automatically after 365 days and you can also delete them yourself.
• Technical data: IP address and request time for security and abuse prevention (rate limiting, error logging). Legal basis: legitimate interest in the security of the service.
• Service emails: we send only messages relating to your account and services. We keep a sending log (recipient, subject, success) for a few months for technical reasons.

Cookies

We use only one necessary session cookie (asid) to keep you signed in, which expires when you close the browser, and a cookie (as_lang) that remembers your language choice. We do not use advertising cookies. The pages load fonts from Google Fonts and icons from cdnjs, so these providers receive the visitor’s IP address.

The home page, the dashboard and the account pages load the support chat of tawk.to. tawk.to sets its own cookies, receives your IP address and whatever you write in the conversation, and processes it as the provider of the chat. You do not have to use it; you can also contact us by email.

Who we share data with

Only with providers that help the service run and are bound by a processing agreement: hosting and database, the email delivery provider (SMTP), payment providers (Mollie B.V., Stripe Payments Europe Ltd) and, for displaying the pages, Google (fonts) and Cloudflare cdnjs (icons). Some providers may process data outside the EEA; in that case they rely on adequacy decisions or standard contractual clauses. We do not sell personal data.

How long we keep data

Account and site data are deleted when you delete your account. Transaction records are kept as long as tax and accounting law requires. Backups are rotated and deleted data disappears from them within a reasonable period.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. You can download your data and delete your account from the “Account” page, or write to us at info@autositer.com. We will reply within one month. If you are a visitor to a site of one of our customers and want to exercise a right regarding a message you sent, contact the site owner first; you may also contact us and we will notify them.

You have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy) or with the authority of your country of residence.

Security breaches

In the event of a breach that puts your data at risk, we will notify the competent authority within 72 hours and, where required, you.