Privacy Policy

AZTCO Vault Privacy Policy

Last updated: July 4, 2026

This Privacy Policy explains how AZTCO Vault handles information when customers, client administrators, global administrators, backup servers, installers, and backup agents use the AZTCO Vault online portal and client-side backup software.

1. Scope
This policy applies to the AZTCO Vault portal, client registration, license and billing management, installer downloads, backup server registration, backup agent communication, audit and anti-attack logging, email notifications, and related support operations.

2. Information We Collect
We may collect company and tenant information such as company name, tenant slug, domain, billing email, contact name, contact email, phone number, VAT number, country, city, address, time zone, license selections, invoice records, payment method, transfer reference numbers, and product bundle details.

We collect administrator account information such as name, email address, role, status, password hash, email verification challenges, password reset challenges, and session metadata.

Backup servers and agents may send server name, server key, version, status, last-seen time, workload names, backup job status, report messages, and structured operational payloads needed to show backup status and enforce licensing.

Security logging may include IP address, browser user agent, request method, path, response status, login failures, scanner/probe events, blocked IP records, audit actions, and timestamps.

3. How We Use Information
We use information to create and manage client accounts, authenticate users, send email MFA codes, process password reset and setup flows, manage products and license bundles, generate invoices, enforce license expiration, stop backup server communication when a license is expired or inactive, receive backup reports, display operational status, protect the platform against attack, and provide support.

4. Passwords and Authentication
Passwords are stored as cryptographic hashes. AZTCO Vault does not store plain text passwords. Login and password reset flows use email verification codes. Global administrators may trigger password reset emails for client backup administrators. Public registration sends a welcome/setup email so the client administrator can set the password through the reset flow.

5. Licensing and Backup Enforcement
AZTCO Vault uses license status, license expiry, product bundle configuration, and payment status to decide whether backup server communication and software functions are allowed. When a license expires or is inactive, backup operations and server report communication may be blocked until renewal.

6. Payments and Billing
AZTCO Vault may store invoice records, product and bundle line items, billing amounts, currency, payment method, Stripe checkout identifiers, transfer references, and company billing information. Card numbers are handled by Stripe when Stripe checkout is used and are not stored by AZTCO Vault.

7. Email Communications
AZTCO Vault sends operational emails such as login codes, password reset codes, welcome/setup emails, password change notices, backup reports, license notices, license-expiring alerts, and license-expired alerts. Email template content is controlled by global administrators from Global Settings.

8. Anti-Attack and Audit Logs
The platform records audit events and security events to protect the service, investigate misuse, detect scanner probes, block repeated attack behavior, and maintain accountability for administrative functions.

9. Data Access and Tenant Isolation
The portal is designed so global administrators can manage platform-wide clients, products, licenses, invoices, installers, settings, and audit data. Backup administrators are limited to their own client account, licenses, invoices, servers, and reports. PostgreSQL row-level security policies are used to support tenant isolation.

10. Data Sharing
We do not sell customer data. We may share limited information with service providers required to operate the service, such as email delivery providers, Stripe for payment processing, hosting providers, and infrastructure or security services. Information may also be disclosed if required by law or necessary to protect AZTCO, customers, users, or the platform.

11. Data Retention
Operational, billing, licensing, security, and audit records may be retained for service operation, compliance, troubleshooting, security investigations, and business records. Global administrators should configure and maintain retention practices appropriate for their deployment and legal requirements.

12. Customer Responsibilities
Customers are responsible for providing accurate company and billing information, protecting administrator accounts, keeping email addresses current, securing installed backup servers and agents, and ensuring they have authority to process backup and tenant data through AZTCO Vault.

13. Changes
AZTCO may update this Privacy Policy as the platform changes. The active Privacy Policy content is controlled in the AZTCO Vault portal by global administrators.

14. Contact
For privacy questions, contact AZTCO through the official company website: https://aztco.ae