Privacy Policy

1.1 Information You Provide Directly

• Contact and inquiry information: name, email address, phone number, company name, job title, and any message content submitted through our contact forms, audit request forms, or chatbot interfaces.
• Account and billing information: name, billing address, payment method details (processed via third-party payment processors), and subscription preferences.
• Configuration and technical data: infrastructure preferences, deployment region selections (U.S., EU, or local), device information, and service customization requirements.
• Communications: correspondence with our support team, email exchanges, and chat transcripts.

1.2 Information Collected Automatically

• Log and usage data: IP addresses, browser type and version, operating system, referring URLs, pages viewed, time and date of access, and session duration.
• Device identifiers: unique device IDs, hardware model, and network information.
• Cookies and tracking technologies: session cookies, preference cookies, analytics tokens, and similar technologies (see Section 10 for details).
• Interaction data: how you navigate and interact with our Site, features accessed, and search queries entered via Aivorys Private Search.

1.3 Information From Third Parties

• Integration data: when you connect our Services to third-party platforms (e.g., WhatsApp, Instagram, Facebook Messenger, Google Sheets), we may receive data transmitted through those integrations as configured by you.
• Business partner data: information shared by referral partners or resellers for account setup purposes.

1.4 Information Generated Through Service Delivery

• Security monitoring data: system event logs, threat alerts, and endpoint telemetry generated by our Wazuh-based security monitoring services.
• Remote session data: connection logs and session metadata generated through our RustDesk remote IT management platform.
• AI interaction data: inputs and outputs from our Private AI Assistant and Multilingual Chatbot, which may include business content, customer messages, and lead information.
• Search queries: anonymized or pseudonymized queries submitted through our SearxNG private search engine. By design, SearxNG is built to minimize data retention and avoid user profiling.

4.1 Service Delivery and Operations

• To provision, configure, deploy, and manage our Services on your behalf, including RustDesk remote access, Wazuh security monitoring, Nextcloud CRM, Private AI, SearxNG search, and chatbot solutions.
• To authenticate users, manage account access, and ensure service availability and uptime.
• To process payments, generate invoices, and manage billing.

4.2 Customer Support and Communication

• To respond to inquiries, service requests, system audit requests, and support tickets.
• To provide onboarding, technical configuration assistance, and ongoing managed service support.
• To send transactional communications such as service confirmations, invoices, and scheduled maintenance notices.

4.3 Security and Fraud Prevention

• To monitor, detect, investigate, and respond to security threats, unauthorized access, and abuse of our platform.
• To enforce our Terms and Conditions and protect the integrity of our infrastructure.

4.4 Improvement and Analytics

• To analyze usage patterns and service performance for the purpose of improving our platform features, stability, and scalability.
• To conduct internal research, product development, and service optimization.

4.5 Marketing and Business Development

• To communicate with prospective clients about our Services, promotions, and updates where lawful to do so.
• To conduct lead qualification through our Multilingual Chatbot, including collecting names, email addresses, budgets, and intent data that you voluntarily provide.
• To send email newsletters or updates, subject to your consent or our legitimate interests, with a clear option to unsubscribe.

4.6 Legal and Compliance

• To comply with applicable law, regulation, or lawful governmental requests.
• To enforce our legal rights or defend against legal claims.

5.1 Service Providers and Subprocessors

We engage trusted third-party vendors to assist in delivering our Services, including:

• Cloud hosting and infrastructure providers (data centers and VPS providers in your selected region: U.S. or EU).
• Payment processors (e.g., Stripe or similar) who process billing information on our behalf under their own PCI-compliant frameworks.
• Email and communication platforms used for transactional and marketing communications.
• Analytics tools used to assess Site performance (configured to minimize personal data collection where possible).

These service providers are contractually required to process data only on our instructions and to maintain appropriate security safeguards.

5.2 Third-Party Platform Integrations

When you authorize integrations between our Services and third-party platforms (e.g., WhatsApp Business API, Instagram Messaging, Facebook Messenger, Google Sheets, or CRM systems), data shared with or received from those platforms is governed both by this Privacy Policy and the privacy policies of those third-party platforms. We are not responsible for the privacy practices of third-party platforms you choose to connect.

5.3 Open-Source Software Components

Our Services are built on open-source software components, including RustDesk, Wazuh, Nextcloud, Open WebUI, and SearxNG. These tools are deployed within your private infrastructure environment. We do not share your data with the upstream open-source project communities.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or similar corporate transaction, your personal information may be transferred to the successor entity, subject to the same privacy protections as described in this Policy.

5.5 Legal Compliance and Protection

We may disclose personal information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Carefree Computing, our clients, or the public.

9.1 Rights Under GDPR (EU/UK Residents)

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure ('right to be forgotten'): to request deletion of your personal data where no legitimate legal basis for continued processing exists.
• Right to restriction of processing: to request that we limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: with your relevant national data protection supervisory authority.

9.2 Rights Under CCPA/CPRA (California Residents)

California residents have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know: to request disclosure of the categories and specific pieces of personal information we have collected, the sources of collection, the purposes of use, and the categories of third parties with whom we share it.
• Right to delete: to request deletion of personal information we have collected, subject to applicable exceptions.
• Right to correct: to request correction of inaccurate personal information.
• Right to opt out of sale or sharing: we do not sell or share personal information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information: where applicable.
• Right to non-discrimination: we will not discriminate against you for exercising your CCPA/CPRA rights.

9.3 Other Jurisdictions

Residents of other jurisdictions with applicable privacy rights (including Canada, Australia, and other regions) may exercise similar rights to access, correct, or delete their personal data in accordance with local law. Please contact us to submit a request.

9.4 California Automatic Renewal Law Compliance

We comply with California's Automatic Renewal Law. We will notify you, the consumer, at least 7 days but no more than 30 days before new fees take effect. To cancel your contract with us, please notify us in writing by sending an email to contact@Aivorys.com for Aivorys or contact@carefreecomputing.cloud for Carefree Computing. We will confirm your cancellation date in writing.

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our Site. We also use similar tracking technologies such as web beacons, pixels, and local storage.

10.2 Categories of Cookies We Use

• Essential/Strictly Necessary Cookies: Required for core Site functionality such as navigation, form submission, and security. These cannot be disabled without impairing Site performance.
• Functional/Preference Cookies: Used to remember your preferences and settings (e.g., language, region selection) to enhance your experience.
• Analytics Cookies: Used to collect aggregated data about Site usage patterns and performance. We configure analytics tools to minimize personal data collection where feasible.
• Marketing and Tracking Cookies: We endeavor to minimize the use of third-party marketing cookies. Where such cookies are deployed by embedded third-party widgets or integrations, they are governed by the privacy policies of those third parties.

10.3 Your Cookie Choices

You may control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking essential cookies may impair Site functionality. Where required by applicable law, we present a cookie consent mechanism upon your first visit to our Site.

10.4 Aivorys Private Search

Our integrated Aivorys Private Search (powered by SearxNG) is specifically designed to provide anonymous, ad-free, tracking-free search results. Queries submitted through this tool are not associated with personal identifiers and are not stored for user profiling purposes.