Privacy Policy
This policy explains what personal data Ciphris LLC collects when you visit ciphris.com, sign up, or use the client portal and Site Editor, and what happens to it. For our clients' own websites, the client decides what those sites collect; we process that data on their behalf (see "Your website's visitors").
What we collect
- Account data: your name, email address, a securely hashed password, two-factor settings, and a record of logins (time, IP address and browser) for security.
- Order and billing data: your plan and add-ons, domain, and the date and version of the terms you accepted. Payments are handled by Stripe; we never see or store your card number.
- Your website content: the text and photos in your website and anything you upload.
- Messages: emails and contact-form messages you send us.
- Technical logs: our servers keep standard access logs (IP address, pages requested, browser) for security and troubleshooting.
Why we use it
To provide the services you signed up for (the contract with you), to keep accounts and servers secure, to send you service and billing emails, and to meet legal and tax obligations. We don't sell your data and don't use it for advertising.
Who we share it with
- Stripe - payments and billing.
- Porkbun - domain registration (registration details are required by domain rules).
- Our hosting provider [VPS provider name] and backup storage provider [e.g. Backblaze] - encrypted backups.
- Our email provider [SMTP provider name] - to send you emails.
- Cloudflare - delivers and protects hosted websites (it handles visitors' requests to them).
- Purelymail - hosts the business email included in our plans (your mailboxes and messages).
- Authorities, only where the law requires it.
Cookies
The ciphris.com website sets no tracking or advertising cookies. The client portal uses one essential cookie to keep you signed in. Fonts are loaded from Google Fonts on ciphris.com.
Your website's visitors
Websites we host for clients don't use tracking cookies. Visitor statistics we provide are built from server logs; IP addresses are converted into a daily-rotating, one-way code and are not stored in the statistics. Contact-form messages sent through a client's website are stored in that client's portal inbox and emailed to them. Visitors with questions about a client's website should contact that business directly; we help our clients answer such requests.
How long we keep it
Account and website data for as long as you're a client, plus up to 90 days afterwards (and backups for up to 6 months). Billing records as long as tax law requires. Security logs for up to 12 months.
Your rights
You can see, correct and download your data: use Account → Download my data in the client portal, or ask us. You can ask us to delete your account (Account → Delete my account); we'll confirm and delete it, keeping only what the law requires us to keep. Depending on where you live you may also have the right to object to or restrict processing and to complain to a data-protection authority.
Security
Passwords are stored as salted hashes, two-factor authentication is required, connections are encrypted (HTTPS), management of our servers is only reachable over a private network, and backups are encrypted.
Contact
Ciphris LLC, [registered business address]. Privacy questions: [support email, e.g. support@ciphris.com]. We'll update this page when our practices change; the version date is at the top.