1. Who We Are

ArystoTech Software & AI Systems Ltd. ("ArystoTech," "we," "us," or "our") is an Alberta-incorporated software company that develops and distributes Windows desktop automation software. This Privacy Policy applies to all eight ArystoTech software products and to this website (arystotech.com).

2. What Data We Collect

We collect the absolute minimum data necessary to operate our business. The table below summarizes our data collection across all touchpoints:

3. Desktop Software Products

All eight ArystoTech desktop software products — PyBatScheduler, PyPsScheduler, PyApiMonitor, PyBackupScheduler, PySslMonitor, PyLogMonitor, PyDbScheduler, and PySvcMonitor — are designed with a minimal-data philosophy. The following principles apply:

• No configuration data is ever transmitted: The software does not record, report, or transmit what jobs, scripts, API endpoints, files, SSL domains, log patterns, database queries, or Windows services you configure. All configuration data remains in local files and/or a local SQLite database on your machine.
• No crash reporting: Errors are written to local log files only. Nothing is sent to our servers.
• Offline-first licence activation: License keys are validated using HMAC-SHA256 cryptography entirely on your local machine. No internet connection is required to activate or run the software.
• Anonymous startup analytics (if internet is available): On application startup, each product may send a small anonymous metadata payload to ArystoTech's first-party analytics service. This includes technical information such as the product name, installed version, operating system, approximate country, and license tier. No personal information — no name, email address, or file contents — is ever included. This call is non-blocking and will never affect application startup or functionality regardless of network conditions.

4. This Website

This website (arystotech.com) is hosted on Cloudflare Pages. When you visit the website, standard web server access logs may be generated by Cloudflare's infrastructure. These logs may include:

• IP address (may be anonymized at the edge by Cloudflare);
• Browser type and version;
• Pages visited and timestamps;
• HTTP referrer.

This data is used solely for security monitoring, abuse prevention, and aggregate traffic analysis. We do not use tracking pixels, third-party analytics scripts, or behavioural advertising tools on this website.

5. Contact & Notification Forms

This website includes a Contact Us form and a Launch Notification signup. Submissions via these forms are processed through Web3Forms (web3forms.com), a third-party form submission service. When you submit a form:

• Your submission data (name, email, message, and any other fields you complete) is transmitted to Web3Forms' servers and forwarded to the relevant ArystoTech email address — support@arystotech.com for technical support enquiries, or sales@arystotech.com for sales and general enquiries;
• Web3Forms processes form data in accordance with its own privacy policy, available at web3forms.com/privacy;
• ArystoTech retains your submission data (name, email, message) for the purpose of responding to your enquiry and maintaining a correspondence history. We do not add you to marketing lists without your explicit consent;
• Launch notification signups are retained until products launch in Q2 2026, at which point a single notification email will be sent. You may request removal from the notification list at any time by emailing support@arystotech.com.

6. Payment Processing

All purchases are processed by Paddle (paddle.com), our Merchant of Record. When you make a purchase:

• Your payment information (credit card details, billing address) is collected and processed entirely by Paddle. ArystoTech does not receive or store your payment card data;
• Paddle shares with us: your name, email address, order details, and license key assignment — for the purpose of fulfilling your purchase and providing support;
• Paddle's own privacy policy governs data they collect. We encourage you to review it at paddle.com/legal/privacy.

Following a purchase, we retain your name, email address, and order reference to support license key reissuance, upgrades, and support requests.

7. Email Communications

If you contact us directly at support@arystotech.com or sales@arystotech.com, we retain your email address and the content of your message for the purpose of responding to you and maintaining a support history. We do not subscribe you to marketing lists without your explicit consent.

8. How We Use Data

Data we collect is used solely for the following purposes:

• Fulfilling software purchases and delivering license keys;
• Responding to support requests, technical queries, and sales enquiries;
• Reissuing license keys if requested by a verified purchaser;
• Sending a single launch-day notification email to users who opted in;
• Notifying purchasers of critical security updates (where email contact is available);
• Aggregate internal analytics from launch pings — understanding version adoption rates, OS distribution, and license-tier breakdown across our installed base to inform product development decisions;
• Complying with applicable legal obligations.

We do not use your data for advertising, profiling, resale, behavioural tracking, or any purpose beyond the above.

9. Data Sharing

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Web3Forms: Contact and notification form submissions are routed through Web3Forms as described in Section 5. Web3Forms acts as a data processor on our behalf;
• Paddle: As our payment processor and Merchant of Record, Paddle receives purchase data as described in Section 6;
• Legal requirements: We may disclose data if required to do so by applicable law, court order, or government authority;
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, user data may be transferred as part of the transaction. We will notify affected users via email or website notice.

10. Data Retention

We retain purchase records (name, email, order reference) for a minimum of seven (7) years to comply with applicable tax and accounting regulations under the Income Tax Act (Canada) and Alberta corporate requirements. Support and enquiry email correspondence is retained for a minimum of two (2) years. Launch notification signups are deleted following the dispatch of the launch notification email. Launch ping analytics records (app name, version, OS, country, license type, license key, timestamp) are retained indefinitely in aggregate form for product analytics purposes; individual records older than two (2) years may be purged at our discretion. You may request deletion of your personal data at any time, subject to our legal retention obligations (see Section 11).

11. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you;
• Correction: Request correction of inaccurate or incomplete data;
• Deletion: Request deletion of your personal data, subject to legal retention requirements;
• Portability: Request your data in a machine-readable format;
• Objection: Object to processing of your data in certain circumstances;
• Withdrawal of Consent: Where processing is based on consent (e.g., launch notification signup), you may withdraw consent at any time.

Residents of Canada have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Residents of the European Economic Area have rights under the General Data Protection Regulation (GDPR). Residents of California have rights under the California Consumer Privacy Act (CCPA).

To exercise any of these rights, please contact us at sales@arystotech.com. We will respond within thirty (30) days.

12. Cookies

This website does not use tracking cookies, advertising cookies, or third-party analytics cookies. Cloudflare may set a strictly necessary session cookie (__cf_bm) for security and DDoS protection purposes. No cookie consent banner is displayed because we do not use non-essential cookies.

13. Children's Privacy

Our software products and website are not directed at children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@arystotech.com and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify purchasers via the email address on their account where possible. Continued use of our products or website after the effective date of the updated Policy constitutes acceptance.

15. Contact Us

For any privacy-related questions, requests, or concerns, please contact us:

© 2026 ArystoTech Software & AI Systems Ltd. All rights reserved. · Privacy Policy v1.2