1. Introduction
Ascienth (“we,” “us,” or “our”) is the data controller for personal information collected through the Service. We are committed to processing your data lawfully, fairly, and transparently, in compliance with applicable privacy laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant regional regulations. This policy applies to all personal data we process about registered account holders, billing contacts, and visitors to our platform. It does not apply to the content you store on your Ascienth servers: that data remains under your control and is subject to your own privacy obligations.2. Information We Collect
We collect information in the following categories: Account Information When you register for an account, we collect your name, email address, and any organizational details you provide. This information is necessary to create and manage your account. Usage Data We automatically collect technical information about how you interact with the platform, including IP addresses, browser type and version, pages visited within the dashboard, server events, API request logs, and error reports. This data helps us operate, secure, and improve the Service. Payment Information When you add a payment method, billing-related information — including your name, billing address, and card type — is collected. Raw card numbers and CVCs are processed directly by Stripe, our payment processor, and are not stored on Ascienth’s systems. We retain a tokenized reference and the last four digits of your card for display purposes. Server Content The files, databases, applications, and other data you store on your Ascienth virtual servers or snapshots (“Customer Data”) remain under your ownership and control. Ascienth does not routinely inspect or access Customer Data. We may access it only in strictly limited circumstances, such as responding to a verified legal request or performing maintenance with your consent. Communications If you contact our support team by email or through the dashboard, we retain records of that correspondence, including your email address and the content of your messages.3. How We Use Your Information
We use the information we collect for the following purposes:- Service delivery: To provision and manage your services, process API requests, authenticate your identity, and provide the features of the platform.
- Billing and payments: To calculate charges, generate invoices, process payments through Stripe, and handle refunds or disputes.
- Security and fraud prevention: To detect, investigate, and respond to unauthorized access, abuse, or violations of our Terms of Service.
- Communications: To send you transactional emails (such as invoices, payment receipts, and service alerts), respond to support requests, and notify you of changes to our terms or platform.
- Service improvement: To analyze usage patterns, diagnose technical issues, and inform product development decisions.
- Legal compliance: To fulfill our obligations under applicable law, respond to lawful requests from authorities, and enforce our Terms of Service.
4. Data Sharing and Third Parties
We do not sell your personal data. We share data with third parties only in the following circumstances: Payment processors We share billing information with Stripe to facilitate payment processing. Stripe processes card data under its own privacy policy and is PCI DSS Level 1 certified. You can review Stripe’s privacy practices at stripe.com/privacy. Infrastructure providers Ascienth uses third-party data centers and cloud infrastructure providers to deliver the Service. These providers may have physical or logical access to the hardware underlying your servers but operate under strict confidentiality obligations and do not access your data for their own purposes. Legal and compliance disclosures We may disclose your information to law enforcement, regulators, or courts when required to do so by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Ascienth, our customers, or the public. Business transfers In the event of a merger, acquisition, or sale of substantially all of our assets, customer data may be transferred to the acquiring entity. We will notify affected customers before such a transfer occurs and before their data becomes subject to a different privacy policy. We require all third parties who process personal data on our behalf to do so under appropriate data processing agreements that limit their use of the data to the specified purpose.5. Data Retention
We retain your personal data for as long as your account is active and for a reasonable period thereafter to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:- Account data is retained for the duration of your account and for up to 90 days after closure.
- Billing records and invoices are retained for a minimum of seven years to comply with financial record-keeping requirements.
- Support communications are retained for the duration of your account.
- Usage and access logs are retained for the duration of your account.
6. Security Measures
Ascienth employs a range of technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:- Encryption of data in transit using TLS 1.2 or higher across all platform endpoints.
- Encryption of data at rest for databases containing personal and billing information.
- Role-based access controls limiting employee access to personal data on a need-to-know basis.
- Regular security audits, vulnerability assessments, and penetration testing.
- Multi-factor authentication requirements for internal systems.
- Incident response procedures and breach notification protocols in compliance with applicable law.
No method of data transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. If you believe your account has been compromised, please contact us immediately at support@ascienth.com.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:- Right of access: You may request a copy of the personal data we hold about you.
- Right to correction: You may request that we correct any inaccurate or incomplete personal data.
- Right to deletion: You may request that we delete your personal data, subject to our legal retention obligations.
- Right to data portability: You may request that we provide your data in a structured, machine-readable format so you can transfer it to another service.
- Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
- Right to object: You may object to our processing of your data where we rely on legitimate interests as our legal basis.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.
8. Cookies and Tracking
Ascienth uses cookies and similar tracking technologies on the dashboard and marketing website to support platform functionality and understand how the Service is used.- Essential cookies: Required for the platform to function, including session authentication and security tokens. These cannot be disabled.
- Analytics cookies: Used to understand aggregate usage patterns and improve the platform. These are collected with anonymization where possible.
- Preference cookies: Used to remember your settings and display preferences.