Privacy Policy.

1. Personal data we may collect

• Contact details you provide, such as name, email address, organisation and message content.
• Subscription and licence details, such as plan, licence key, site URL, activation status and renewal status.
• Setup service details, such as setup package, website platform, site URL, calendar requirements, supplied event data and access arrangements you agree with AuroraStack.
• Support information, such as WordPress version, plugin version, screenshots, error messages and diagnostic details you choose to share.
• Billing metadata from Stripe, such as payment status, customer ID, plan and invoice records. AuroraStack does not receive full card numbers.
• Technical logs, such as IP address, browser information, request times and security logs.

2. How we use data

AuroraStack uses personal data to respond to enquiries, provide subscriptions and licence services, deliver setup services, deliver support, maintain security, process refunds or billing questions, improve products and meet legal or accounting duties.

3. Legal bases

Depending on the situation, AuroraStack relies on contract necessity, legitimate interests, consent, and legal obligations. For example, licence and billing records are used to perform a subscription contract, while security logs help protect the website and licence services.

4. Service providers

AuroraStack may use trusted providers including Stripe for payments, Microsoft Azure for hosting and storage, Cloudflare or domain providers for DNS and security, email providers for support messages, and WordPress.org for plugin distribution. These providers process data only as needed for their services.

5. Cookies and tracking

The AuroraStack website is designed to work without unnecessary tracking cookies. Stripe checkout and other third-party services may use cookies or similar technologies when you visit their hosted pages. If analytics are added later, this policy should be updated first.

6. Retention

• Enquiries: usually up to 24 months after the last contact.
• Customer, licence and invoice records: for the subscription term and up to 7 years where needed for accounting, tax or legal records.
• Support and setup records: usually up to 3 years after closure.
• Security and server logs: usually up to 90 days unless needed to investigate misuse, fraud or a security incident.

7. International transfers

Some service providers may process data outside the UK or EEA. Where that happens, AuroraStack expects providers to use appropriate safeguards such as standard contractual clauses or equivalent protections.

8. Your rights

You may have rights to access, correct, delete, restrict, object to processing, request portability, or withdraw consent where consent is used. You can contact AuroraStack using the email above. You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how your data is handled.