Built to be trusted.
Plain answers on how AppsZone protects your data, runs our infrastructure and handles payments — and where to go if you need more detail.
Last updated: October 17, 2026
- Encrypted in transitHTTPS/TLS across our sites and apps
- Card data never storedHandled by PCI-DSS compliant gateways
- No sale of personal dataWe never sell, trade or rent your data
- Daily backupsWith rollback on managed hosting
- 24/7 monitoringHermes AI agent on managed VPS
- 99.99% target uptimeManaged VPS hosting
How we protect your work
The practices behind our websites, hosting and AI products.
Data protection
- HTTPS/TLS encryption for data in transit
- Access controls and secure server infrastructure
- Data is securely deleted or anonymized when no longer required
Infrastructure & hosting
- Modern NVMe VPS managed by AppsZone engineers
- Free SSL and CDN, with a dedicated IP on managed plans
- Full site isolation per environment
Backups & recovery
- Daily backups with rollback
- Managed migrations verified with checksums
- Staged cutovers with on-call cover after go-live
Monitoring & response
- Hermes AI agent watches uptime, vulnerabilities and server health 24/7
- Instant incident detection on managed hosting
- Critical issues: under 1 hour first response on Growth & Enterprise
Payments
- We do not store full card details on our servers
- Processed through PCI-DSS compliant third-party gateways
- We receive only confirmation data — transaction ID, last 4 digits, status
AI products
- AuraRoute: per-key daily quotas and rate limits, plus a request log in the dashboard
- AuraRoute: provider failover so upstream outages don't reach your app
- Managed Hermes agents: isolated profiles with separate keys, ports and tool policies
Standards & commitments
What we can stand behind today. Need a security questionnaire or a data-processing agreement? Ask us.
PCI-DSS (through our payment gateways)
Card payments are handled by PCI-DSS compliant gateways, so card numbers never touch AppsZone servers.
Data-subject rights
Access, correction, deletion and consent withdrawal requests are handled directly by our team.
Published policies
Our Privacy Policy and Refund Policy are public and dated, and we post changes with a revised date.
Who helps us run AppsZone
Trusted third parties that process data on our behalf. They receive only what they need to do their job.
| Vendor | Category | Purpose |
|---|---|---|
| Cloudflare | Hosting & CDN | Content delivery and edge hosting |
| Amazon Web Services | Hosting | Cloud infrastructure |
| EPS | Payments | Card payment processing for subscriptions |
| SSLCommerz | Payments | Payment processing |
| Stripe | Payments | Payment processing |
| Google Analytics | Analytics | Aggregate website usage analytics |
| Email delivery providers | Communications | Transactional email and support replies |
This list may change as we add or replace vendors. See the Privacy Policy for how we share data.
You stay in control
We use your data to deliver services, bill you, support you and meet legal obligations. We never sell it. We keep it for as long as needed, typically up to five years, and then delete or anonymize it.
Make a data requestYour rights
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data, subject to legal obligations
- Withdraw consent for marketing communications at any time
- Lodge a complaint with a relevant data protection authority
Policies & resources
Privacy Policy
What we collect, how we use it, who we share it with, and your rights.
Refund Policy
Refunds and cancellations for products, subscriptions and hosting.
Terms & support
Support hours, response targets and how to open a ticket.
AuraRoute status
Live provider health and failover status for the AuraRoute AI API.
Found a vulnerability? Tell us.
Email us with the affected URL or product, steps to reproduce and any proof of concept. Please give us reasonable time to investigate and fix before sharing details publicly.
