Privacy policy

Who is responsible for your data

VESOPA SOFTWARE LTD, Baglan, Port Talbot, Wales, SA12 7AX, is the data controller for the personal data described here. Contact us at support@vesopa.com about anything in this policy.

What we collect, and why

Account and billing details

Your name, email address, postal address, phone number and company name. We need these to provide the service, to invoice you, and — for domain registrations — because the registry requires a real registrant. Legal basis: performance of a contract.

Payment information

We never see or store your card number. Payments are handled by our payment provider on their own systems; we receive only a reference and the last four digits.

Technical logs

Server logs record IP addresses, requests and timestamps. We use them to keep the service running, to investigate faults and to detect abuse. Legal basis: our legitimate interest in operating a secure service. Retained for 90 days.

Support correspondence

Tickets and emails you send us, kept so that the next person to help you can see what has already been tried.

Vesopa AI, if you switch it on

The assistant on this site is off until you tap it. If you allow the microphone, what you say is sent to our AI provider (Amazon Web Services, Bedrock) to be written down and understood, and the audio is not kept by us or, under their terms, used to train anything. If you choose Bangla, your browser's own speech recognition writes down what you say where the browser has it (Google's service in Chrome and on Android, Microsoft's in Edge), under that company's terms. The assistant's spoken replies are made by Google (Gemini): the text of each reply is sent to them to be turned into speech, and nothing you say is. What you type or say, and what the assistant learned about your needs, is kept in your browser until you sign in and with your account afterwards, so it can carry on where you left off; you can wipe it from the assistant at any time. The assistant only ever sees the page you are on and your own account. Legal basis: your consent, which you give by allowing the microphone or typing to it, and can withdraw by switching it off.

Your customers' data

Whatever you store on your hosting account is yours. We do not access it except when you ask us to, when we must to fix a fault or investigate abuse, or when legally required. In respect of that data you are the controller and we are your processor.

What we do not do

• We do not sell your personal data. Not to anyone, for any price.
• We do not run advertising trackers on this website. There is no analytics cookie, no pixel and no third-party script.
• We do not read your email or your site's database for any purpose of our own.

Cookies

This site sets a small number of strictly necessary cookies: one to keep you signed in, one to protect forms against cross-site request forgery, one for your basket, and a short-lived one to carry a status message across a page redirect. There are no analytics or advertising cookies, which is why you have not been shown a consent banner — none is required for cookies that are strictly necessary.

Who we share it with

• Domain registries and our registrar — registrant details, because registration cannot happen otherwise.
• Our payment provider — to take payment.
• Microsoft Azure — our servers are hosted there, in a UK region.
• Amazon Web Services (Bedrock) — what you say or type to Vesopa AI, only while you use it.
• Google (Gemini) — the text of Vesopa AI's replies, to speak them aloud.
• Law enforcement or a court — where we are legally obliged.

Where your data is held

Hosting infrastructure and backups are in the United Kingdom. Some suppliers may process limited data outside the UK; where they do, we rely on adequacy regulations or standard contractual clauses.

How long we keep it

• Account records — for as long as you are a customer, then 7 years, because HMRC requires it of business records.
• Site data and backups — deleted 30 days after a service ends.
• Server logs — 90 days.
• Support tickets — 3 years.

Your rights

You have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing, and to receive it in a portable form. Email us and we will respond within one month.

If you think we have handled your data badly, please tell us first — but you are entitled to complain directly to the Information Commissioner's Office at ico.org.uk.

Security

Passwords are stored hashed with bcrypt and are never recoverable in plain text, including by us. Traffic to this site and to your control panel is encrypted. Accounts on our servers are isolated from one another. We patch on a schedule rather than in response to incidents.

---

Questions about this document? Email support@vesopa.com or write to VESOPA SOFTWARE LTD, Baglan, Port Talbot, Wales, SA12 7AX.