Privacy Policy
Last updated: February 2026
1. Information We Collect
We collect the following information when you use Always ON:
- Account information: Username, email address, company name, phone number
- Payment information: Processed securely by Stripe. We do not store your credit card number.
- Site data: Domain names, WordPress site content, configuration settings
- Usage data: Server logs, monitoring metrics, deployment logs
- Technical data: IP address, browser type, operating system
2. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process payments and manage subscriptions
- Send service-related communications (deployment status, alerts, billing)
- Monitor and improve the Service
- Respond to support requests
- Comply with legal obligations
3. Data Storage and Security
Your data is stored on servers in secure data centers. We use industry-standard security measures including:
- SSL/TLS encryption for all data in transit
- Encrypted storage for sensitive credentials
- Firewall protection and intrusion detection
- Regular security updates and monitoring
4. Third-Party Services
We use the following third-party services:
- Stripe: Payment processing (Stripe Privacy Policy)
- SendGrid: Email delivery
- Let's Encrypt: SSL certificate provisioning
We do not sell your personal information to third parties.
5. Data Retention
We retain your account data for as long as your account is active. After account cancellation, we retain your data for 30 days before deletion. Backup copies may persist for up to 90 days.
You may delete your account at any time from your Profile page. When you delete your account, your personal information (email, name, company, phone) is permanently erased and your account is deactivated. Any active subscription is cancelled immediately.
Payment records are retained as required for accounting and legal compliance.
6. Your Rights
Under applicable data protection laws (including GDPR), you have the right to:
- Access your personal data through your account profile
- Rectification: Update or correct your information at any time in your profile
- Erasure: Delete your account and all associated personal data (requires password confirmation)
- Data portability: Export your data as a machine-readable JSON file including your profile, sites, billing, and deployment history
- Opt out of non-essential communications
You can exercise these rights directly from your profile page. For additional requests, contact us at support@alwayson.host.
7. Cookies
We use only essential cookies that are strictly necessary for the Service to function:
- Session cookie: Maintains your login session (expires on browser close or after idle timeout)
- CSRF cookie: Protects against cross-site request forgery attacks
We do not use tracking, analytics, or advertising cookies. Because we use only essential cookies under legitimate interest, no opt-in is required. A consent banner is displayed to inform you of this policy.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.