Privacy Policy
Overview
We believe in transparency. This policy is written in plain language so you understand exactly what we do with your data and what control you have over it.
We recognise the following core privacy rights for all users:
- The right to know what personal data we hold about you
- The right to access, correct, or delete your personal data
- The right to withdraw consent for processing
- The right to data portability where technically feasible
- The right to non-discrimination for exercising your privacy rights
Definitions
User
Anyone who visits OnDemand.Website, whether or not they have created an account.
Customer
A User who has submitted the intake form and created an account. Customers receive a preview website and, upon subscribing, a live hosted website at a free ondemand.website address. Customers may optionally purchase a custom domain through their dashboard.
Aldis Cloud (Data Controller)
Aldis Cloud Inc. acts as the data controller for all personal information collected through OnDemand.Website. We determine the purposes and means of processing your personal data.
Third-Party Processors
Service providers we use to operate the platform. Each processor is listed in the Third-Party Providers section below and processes your data only as instructed by us.
Data we collect
Information you provide directly
When you submit the intake form or create an account:
- Business name, tagline, industry, and services description
- Target audience description and brand preferences
- Colour preferences and design references
- Logo and image file uploads
- Contact name, email address, and phone number
- Business address and social media profile links
- Preferred web address name or keywords (used to set up your free ondemand.website URL)
- Account password (stored in hashed form via Clerk; we never see your raw password)
Information collected automatically
When you visit OnDemand.Website, we and our service providers may automatically collect:
- IP address and approximate location
- Browser type and version
- Pages visited and time spent
- Referring URL
- Session data used for authentication (managed by Clerk)
Information from third parties
If you sign in using Google or Apple, we receive your name and email address from that provider. We do not receive your password from these providers.
How we use your data
We use your personal information only to operate and improve the service:
- To build and deliver your preview website from your intake form submission
- To provision and manage your production website, public URL, and SSL certificate
- To send notifications about your preview, subscription, and website status by email and SMS
- To process subscription payments through Stripe
- To manage your account and authenticate your identity through Clerk
- To respond to support requests and revision submissions
- To register and manage any custom domain you purchase, through NameSilo
- To monitor uptime of your production website through UptimeRobot
- To detect fraud, abuse, and security incidents
- To improve the platform based on aggregated, anonymised usage data
We do not use your personal information for advertising, for marketing to third parties, or to build advertising profiles.
No sale of personal data
We do not sell, lease, rent, or transfer your personal information to third parties for monetary or other consideration. Your data is used solely to operate OnDemand.Website and deliver the service you signed up for.
Third-party service providers
We share your information only with the providers required to operate the platform. We share the minimum necessary information for each purpose. In most cases this is limited to your email address and account identifier for authentication purposes. We do not share your content, uploaded assets, or business information with any provider unless that provider is directly involved in building or hosting your website.
Each processor handles your data only as instructed by us and only for the specific purpose listed:
- Microsoft Azure — cloud infrastructure and storage. Your intake data and uploaded assets are stored in Azure in the region closest to you. Microsoft Privacy Statement.
- Clerk — account authentication and session management. Clerk Privacy Policy.
- Stripe — subscription billing and payment processing. We do not store your credit card number. Stripe Privacy Policy.
- NameSilo — custom domain registration and DNS, when you purchase a custom domain. Domains are registered by Aldis Cloud as the registrant of record on your behalf; your personal contact details are not submitted to the registrar. NameSilo.
- Azure Communication Services — email and SMS delivery for service notifications.
- UptimeRobot — uptime monitoring for production websites. Only your website URL is shared. UptimeRobot Privacy Policy.
- GitHub — source control and automated deployment for your production website. GitHub Privacy Statement.
We do not share your information with any other third parties except as required by applicable law or legal process.
Storage and security
Where your data is stored
All personal data and uploaded assets are stored in Microsoft Azure in the region that serves your location. Your data is stored on Azure infrastructure and is subject to Azure's data residency commitments for that region. Each third-party processor listed above maintains their own data transfer compliance mechanisms.
Security measures
- HTTPS enforced on all connections to OnDemand.Website
- All Azure Storage is private with no public blob access
- Access controlled via Azure managed identity and role-based access controls
- Account credentials managed by Clerk using industry-standard hashing
- Payment data handled entirely by Stripe
- API secrets stored in Azure Key Vault with full audit logging
If we become aware of a breach affecting your personal data, we will notify you as required by applicable Canadian privacy law.
Domain registration data
When you purchase a custom domain, Aldis Cloud registers it through its registrar account with NameSilo as the registrant of record on your behalf. Your personal name and contact information are not submitted to the registrar and do not appear in public WHOIS records.
Custom domains are registered by Aldis Cloud as the registrant of record on your behalf, under its registrar account. You retain the contractual right to your domain at all times, including the right to request a transfer. Domain purchases involve a one-time registration fee and an annual renewal fee billed as a recurring charge. Both are processed through Stripe. Your free ondemand.website URL is managed by Aldis Cloud and does not require submission of WHOIS registration data.
Your rights
As a resident of Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation:
- Right of access — Request a copy of the personal data we hold about you.
- Right to correction — Request that we correct inaccurate or incomplete information.
- Right to deletion — Request deletion of your account and associated personal data, subject to our legal retention obligations.
- Right to withdraw consent — Withdraw consent for processing at any time. Note that withdrawal may prevent us from continuing to deliver the service.
- Right to complain — File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
To exercise any of these rights, email support@OnDemand.Website. We respond within 30 days. We will not discriminate against you for exercising your privacy rights.
Data retention
We retain your personal data for as long as your subscription is active. When you cancel, your account data is retained for up to one year before permanent deletion. Uploaded assets are deleted when your account is permanently removed.
Stripe retains payment records per its own data retention policy. Custom domain registration and renewal records are retained per ICANN and registrar requirements. Anonymised aggregate data may be retained indefinitely.
Children
OnDemand.Website is not directed at individuals under 18. We do not knowingly collect personal data from minors. Contact us at support@OnDemand.Website if you believe we have collected information from a minor and we will delete it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will notify active customers by email at least 14 days before the change takes effect. Continued use of the service after a change is posted constitutes acceptance of the updated policy.
Contact us
For privacy questions, requests, or complaints:
- Email: support@OnDemand.Website
- Service: OnDemand.Website
- Legal entity: Aldis Cloud Inc., federally incorporated under the Canada Business Corporations Act
We respond to all privacy inquiries within 30 days of receipt.