Data processing terms

1. Roles

For the visitors of the sites you protect, you are the controller and AegisX is the processor. We process their data only to provide the service, following your settings in the dashboard, and not for our own purposes.

2. What is processed

• IP address, and the country found from it;
• the request: method, address of the page, protocol, headers such as User-Agent and Referer, size;
• the response: status, size, time taken, whether it came from the cache;
• the decision of the protection: allowed, checked, limited or blocked, and why;
• for browser checks: a session cookie and technical signs of the browser (screen size, time zone, number of processor cores), used to tell people from bots.

We do not read or store the bodies of requests and responses, except what is kept in the cache to serve it again.

3. How long

Request logs and security events are kept for the period of your plan (7, 14, 30 or 90 days) and then deleted. Counters without personal data (requests per minute per site) are kept up to 31 days. Addresses that attacked are remembered for a limited time to block them sooner; you can see and clear this in the dashboard.

4. Security

Traffic between our servers is encrypted, and so is traffic from visitors when the site uses HTTPS (the default). Logs are available only to you and your team in the dashboard and to the people who run the service.

5. Sub-processors

The data centres that host our edge servers and the dashboard. The locations of edge servers are listed on the Network page. We tell you about a new sub-processor before it starts processing data, and you may object.

6. Help with requests

We help you answer visitors who exercise their rights and tell you without undue delay, and no later than 48 hours after we learn of it, about a breach that affects the data of your visitors.

7. End of processing

When you remove a site or close the account, its logs are deleted at the end of the retention period at the latest, and you can delete them earlier by asking support@aegisx.network.