Privacy Policy

We adhere strictly to the principle of data minimization. We only collect information essential to evaluating project inquiries, executing professional engineering agreements, and delivering high-concurrency systems:

• Direct Inquiries & Contact Details: Name, work email address, telephone number, organization name, and country submitted when you request technical consultations or project proposals.
• Technical & Project Specifications: Architectural requirements, scope documentation, target delivery milestones, and technical requirements provided to prepare Master Services Agreements (MSA) and Statements of Work (SOW).
• Platform Telemetry: Standard web server connection data (IP address, browser user-agent, operating system, and timestamp) collected automatically to defend against distributed denial-of-service (DDoS) and ensure web availability.

Every piece of information processed by Aerox Solutions serves a legitimate commercial, contractual, or engineering objective:

• Responding promptly to technical inquiries and providing transparent scope estimates.
• Assigning senior engineers, project managers, and technical architects to active client contracts.
• Administering billing, invoicing, and statutory tax reporting in compliance with international commercial standards.
• Maintaining continuous integration, automated testing, and secure staging environments.

Confidentiality is at the heart of our engineering practice. Prior to receiving proprietary schemas, product roadmaps, or existing codebases, we execute binding bilateral Non-Disclosure Agreements (NDAs).

All intellectual property, proprietary algorithms, database schemas, and codebase commits developed during your engagement belong unconditionally to you upon invoice settlement. Work is committed directly into your designated version control repositories from day one.

We apply modern DevSecOps standards across our physical offices and digital infrastructure:

• Encryption in Transit & At Rest: All web communication is secured using TLS 1.3 encryption. Internal datastores enforce AES-256 bit encryption at rest.
• Role-Based Access Control (RBAC): Access to client codebases and staging environments is restricted to named engineers bound by confidentiality clauses on a strict need-to-know basis.
• Multi-Factor Authentication (MFA): Mandatory hardware or authenticator-based MFA enforced across all internal email, cloud consoles (AWS, Azure), and repository management platforms.

Aerox Solutions operates from Multan, Pakistan, serving enterprise and scale-up clients across nine countries including the United Kingdom, United States, the Gulf (UAE, Saudi Arabia), and North America.

When project data or communication crosses international borders, we ensure adequate protection through standardized contractual clauses, encrypted channels, and adherence to international transfer guidelines comparable to EU Standard Contractual Clauses (SCCs).

Regardless of your geographic location, Aerox Solutions honors standard data subject rights:

• Right to Access: You may request a verified copy of any personal data we hold relating to you.
• Right to Rectification: You may request immediate correction of inaccurate or incomplete contact records.
• Right to Erasure: You may request permanent deletion of your inquiry data once commercial discussions conclude, subject to legal recordkeeping mandates.

To exercise any of these rights, email our data governance officer at info@aeroxsolutions.com. We respond to verified requests within 10 business days.

Our web estate is intentionally lightweight and privacy-respecting. We do not use third-party behavioral advertising trackers, cross-site profiling cookies, or data brokers.

Essential cookies or local storage entries are limited to functional necessities, such as remembering your UI preferences (e.g. theme state) and routing security tokens.