1. Who we are
Gotham City Holdings LLC, a Delaware limited liability company doing business as Aperture. Address: 8 The Green, Ste B, Dover, DE 19901. Contact: legal@aperturealexios.com.
This policy covers the Aperture website and the AlexiosTM compliance scan.
2. What we collect, and why
When you apply or request a scan, we collect exactly this:
- Your website address. It is the thing being evaluated. Without it there is no scan.
- Your business name. To identify the account and the scan record.
- An administrator email address. To send you the result and to reach you about the account.
- Your business type. To evaluate the site against the right standards.
- Your current monthly processing volume, as a range. To determine which fee band applies.
We do not collect a tax identification number. No EIN, no SSN, no ITIN. That was a deliberate decision, made because the fee and the scan do not need one.
We do not collect, receive, hold, or have access to cardholder data, bank account numbers, or any payment credentials. We are never the merchant of record and money never passes through us. Your payment account is opened by you directly with the processor, and the identity information that processor requires goes to the processor, not to us.
When you use the site, our hosting provider keeps ordinary server records of the visit, which include your IP address, your browser type, the pages you viewed, and the time of the visit. These records exist so the site can be operated, kept secure, and diagnosed when something breaks.
We also count visits to the site ourselves, on our own website, with no outside company involved. For each visit we record the day, the page, where the visitor came from (a search engine, another website, a campaign tag on the link, or directly), whether it was a phone or a computer, and whether the application form was started. To count each person once a day, we make a visitor code from your IP address and browser using a secret that is replaced every day. Your IP address itself is not kept. No cookie is used and nothing is stored on your device. People signed in to the site and automated robots are not counted. We use these counts only to see how many people visit and where they leave the application.
We do not run advertising trackers on this site. We do not use your visit to build a marketing profile, and we do not allow anyone else to.
3. What we collect from your website
AlexiosTM retrieves and evaluates your publicly available website. That means we fetch pages that anyone on the internet can already see, and we keep a record of what we found and the score we gave it, on the date we found it.
We keep that history deliberately, because a record of how a site changed over time is part of what the service is. It is not published, it is not sold, and it is not shown to anyone other than you and, where relevant, someone you have authorized.
We do not attempt to access any private, password protected, or non public part of your site.
4. How we use what we collect
- To run the scan and give you the result
- To keep evaluating your site on the recurring schedule while you are on the platform
- To operate, maintain and improve the service
- To contact you about your account, your results, and changes to the service
- To meet our own legal and record keeping obligations
We do not sell your information. We do not share it with advertisers. We do not use it to build marketing profiles.
5. Who else sees it
Only these, and only for the purpose named:
- Service providers who run our infrastructure, being our website hosting provider and our email provider. They act on our instructions and only to deliver the service. Our website hosting provider is Kinsta.
- The payment processor, at the point where you choose to open your account. You are sent to the processor's own sign up, and what you give them is between you and them under their privacy policy, not ours.
- Where the law requires it, or to respond to a valid legal request.
- If the business is sold or reorganized, as part of that transaction, with this policy continuing to apply.
6. How long we keep it
Account information: for as long as you have an account with us, and afterwards only for as long as we need it for our records and our legal obligations.
Scan history: for as long as you have an account with us, and for twenty four months after the account closes. After that it is deleted.
Website visit records kept by our hosting provider: for the period our hosting provider retains them in the ordinary course, which is a short operational period rather than a long term archive.
Visit counts we keep ourselves: for ninety days. After that they are deleted.
You can ask us to delete your account information. See section 8.
7. How we protect it
We use reasonable technical and organizational measures appropriate to what we hold, which is deliberately a small amount of business contact information and website evaluation records rather than payment or identity data. The site is served over an encrypted connection. No system is perfectly secure and we do not claim otherwise.
8. Your choices
You can ask us to:
- Tell you what we hold about you
- Correct anything wrong
- Delete your account information, subject to what we must keep for our records
- Stop sending you anything other than messages about your account
Write to legal@aperturealexios.com. We will respond within thirty days.
9. Children
The service is for businesses. It is not directed to anyone under 18 and we do not knowingly collect information from anyone under 18.
10. Changes
We may update this policy. The current version is always posted here with its effective date. Where a change is significant we will tell account holders by email.
11. Contact
legal@aperturealexios.com
Gotham City Holdings LLC dba Aperture
8 The Green, Ste B, Dover, DE 19901