Privacy Policy
Draft v0 · Draft of 2026-07-27 · Hero Marketer Limited (Company 12983426), operating Aspex+
1. Who we are
Hero Marketer Limited operates Aspex+. For platform account data we are the controller; for the customer data our subscribers store (their contacts and conversations) we are a processor acting on their instructions.
2. What we hold (as actually built)
- Account data: name, email, sign-in credentials/passkeys, role memberships.
- Subscriber-stored data: contacts, conversations (SMS/email), campaign content, files.
- Billing data: wallet transactions and VAT invoices. Card details are held by our payment provider — full card numbers never touch our systems.
- Operational logs: an immutable audit trail of actions in each account (who/what/when), retained for compliance.
3. Where it lives
Data is stored in the United Kingdom/EEA region (London) with our cloud database provider. Messaging is delivered via telecoms and email carriers under their own processor terms.
4. Consent and messaging
The platform enforces per-contact consent, do-not-contact flags, quiet hours, and one-click unsubscribe on marketing email. Opt-outs are honoured immediately and recorded.
5. Your rights / contact
Requests regarding personal data: support@aspexplus.com. [DRAFT: retention schedules, sub-processor list, DPA reference, and lawful-basis mapping pending legal review.]