Your Data. Your Business.
Our Responsibility.
We built Aideators with security at its foundation, not as an afterthought. GDPR compliant, PECR compliant, encrypted, and tenant-isolated by design.
How We Protect Your Data
Six layers of security built into every part of the platform.
GDPR & PECR Compliant
Every email includes a one-click unsubscribe link. Opt-outs are honoured immediately and permanently. We never email contacts who have opted out. All data processing complies with UK GDPR and PECR regulations.
Data Encryption
All data in transit is protected with TLS 1.3 encryption. Data at rest is encrypted on our dedicated infrastructure. Your passwords are hashed with bcrypt and never stored in plain text.
Tenant Isolation
Every query is scoped to your company, and data isolation is tested continuously. No client can ever access another client's data.
UK Infrastructure
Hosted on dedicated UK/EU infrastructure with PostgreSQL 16. Not a shared multi-tenant cloud database. Your data stays on servers we control, not scattered across someone else's cloud.
Authentication
JWT token-based authentication on every API request. Passwords hashed with bcrypt. OAuth 2.0 for social media connections. Every session is validated, every endpoint is protected.
Regular Audits
SonarQube security scanning on every code change. Zero known vulnerabilities. Code review on every deployment. Automated testing with 177+ tests across 12 test suites before anything goes live.
You Own Your Data. Full Stop.
Under UK GDPR, you have clear rights over your personal data. Here is what you can do, any time.
Access Your Data
Request a full copy of all personal data we hold about you at any time.
Export Your Data
Download your campaigns, leads, contacts, and analytics in standard formats.
Delete Your Data
Request full data deletion. We process all requests within 30 days.
Opt Out
Opt out of marketing communications at any time with a single click.
Data Portability
Take your data with you. No lock-in, no barriers, no questions asked.
Read our full Privacy Policy or submit a Data Deletion Request.
Email That Plays By the Rules
Every email sent through Aideators meets the highest deliverability and compliance standards.
SPF, DKIM & DMARC Authentication
Full email authentication setup. SPF records validate sending servers. DKIM signs every message cryptographically. DMARC policies protect your domain from spoofing.
SendGrid Deliverability
Emails sent via SendGrid's trusted infrastructure with dedicated IP reputation management. Deliverability monitoring and automatic throttling to protect your sender reputation.
One-Click Unsubscribe in Every Email
Every single email includes a working unsubscribe link. Opt-outs are processed immediately and permanently. We never send another email to anyone who has unsubscribed.
Bounce Handling & Suppression Lists
Hard bounces are automatically suppressed. Invalid addresses are removed from future sends. Suppression lists are maintained per-client and globally to protect deliverability for everyone.
Real People. Real Company. Real Accountability.
We are not a faceless startup. We are a UK-registered company with a real founder you can contact.
UK Registered
Websposure Ltd. A real UK company with real accountability.
Real Founder
Built by Tej Mistry. Not a faceless corporation. A person you can reach.
Transparent Pricing
No hidden fees. No surprise charges. What you see is what you pay.
No Contracts
Cancel anytime. No lock-in periods. No cancellation fees. Ever.
Direct Contact
[email protected] — we actually reply.
Security Questions
Yes. Every email includes a one-click unsubscribe link. Opt-outs are honoured immediately and permanently. We never email contacts who have opted out. All data processing complies with UK GDPR and PECR regulations. You can access, export, or delete your data at any time.
No. Every database query is scoped by company_id. Tenant isolation is enforced at the application layer on every single query. No client can ever access, view, or modify another client's data. This is a core architectural principle, not an optional setting.
Your data is stored on dedicated UK/EU infrastructure running PostgreSQL 16. We use encrypted connections and TLS 1.3 for all data in transit. We do not use shared multi-tenant cloud databases. Your data stays on servers we control.
You can request full data deletion at any time via our Data Deletion page or by emailing [email protected]. We will process your request within 30 days as required by GDPR. You can also export all your data before deletion.
Questions about security?
We take data protection seriously. If you have any questions about how we handle your data, we are happy to answer.