Privacy policy

This policy explains what Aldorock AB's apps for Wix sites do with personal data. It covers every app listed on this site. Version dated 2026-11-09.

1. Who we are

The apps are provided by Aldorock AB, Gammelgårdsvägen 58, 112 64 Stockholm, Sweden ("Aldorock", "we"). Contact: support@aldorock.com.

2. Roles under GDPR

The person or organisation that installs an app on its Wix site (the site owner, "the customer") decides what the app is used for and what content it handles. The customer is the controller. Aldorock processes personal data only on the customer's behalf and instructions and is the processor (Article 28 GDPR). A data processing agreement is available on request from support@aldorock.com.

Wix.com Ltd. provides the Wix platform to the customer under Wix's own terms and privacy policy. This policy covers our apps only.

3. What the apps read

• When the app is installed, the site owner approves the permissions the app asks for. The app reads only the site data those permissions allow and only what the feature needs, through Wix's APIs.
• Every app reads the app instance (site id, the plan the site owner has bought for the app, and the site's name, address and language) so that it knows which site it serves and which plan applies.
• What each app reads and stores beyond that is listed per app in section 5.

4. Where the data is stored

• The apps store their data on Wix's infrastructure: in collections in the site's own Wix data, or in the app's backend that Wix hosts. Wix processes it under its agreements with the site owner.
• Where an app needs a service that Wix cannot host, it uses a small service run by Aldorock on Cloudflare. That service keeps only what the feature needs, and the app's section below says so.
• Nothing is sold or shared with any other party. The apps contain no analytics, no advertising, no tracking and no third party scripts, and the widgets on the site set no cookies of their own.

5. App by app

No app is published yet.

6. Legal basis

We process the data on the customer's documented instructions, given by installing and configuring the app. The legal basis for the customer's own processing is for the customer to determine; typically it is the customer's legitimate interest in running its website (Article 6(1)(f) GDPR) or a contract with its own customers (Article 6(1)(b)).

7. Retention and deletion

• Data is kept while the app is installed, or shorter where the app's section says so.
• When the app is uninstalled it stops reading and storing data. Data kept on Aldorock's own service on Cloudflare is deleted within 30 days.
• Data in the site's own Wix collections is under the site owner's control in the Wix dashboard. On request we help delete it.
• The customer can ask for earlier deletion or a copy of the stored data at support@aldorock.com.

8. Security

• All traffic between the site, Wix, our services and the browser is encrypted with HTTPS.
• Requests to our backends are verified with Wix's signed app instance or access tokens before anything is read or stored. Dashboard actions are available only to people who can manage the site.
• Aldorock staff have no routine access to customer data. Access happens only to resolve a support request from the customer and only as far as needed.

9. Sub-processors

• Wix.com Ltd. (Israel, which the European Commission has found to give adequate protection) and its hosting providers, under Wix's own data processing terms: hosting of the apps' backends and data, as part of the Wix platform the customer already uses.
• Cloudflare, Inc. (USA, certified under the EU-U.S. Data Privacy Framework): only for apps whose section in part 5 says so.

We tell customers in the app listing and on this page before we add a sub-processor.

10. Site visitors

If you visited a website that uses one of our apps, the website owner is responsible for your data. The apps' widgets do not set cookies of their own and do not track you across sites. Please contact the website owner first about your data.

11. Your rights

You have the rights under GDPR to access, rectify, erase, restrict and object to processing, and to data portability, towards the controller (the website owner). Aldorock helps the controller to answer such requests. If you contact us directly at support@aldorock.com, we forward your request to the controller unless you ask us not to.

You may also lodge a complaint with a supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (IMY), imy.se.

12. Support correspondence

If you email us, we process your name, email address and the content of your message to answer you. We keep the correspondence as long as needed to resolve the matter and to show what was agreed. In that case we are the controller, and the legal basis is our legitimate interest in giving support (Article 6(1)(f)).

13. Changes to this policy

We may update this policy when the apps change. The current version is always at webapps.aldorock.com/privacy with its date at the top. Material changes are announced in the apps' listings.

14. Contact

Aldorock AB, Gammelgårdsvägen 58, 112 64 Stockholm, Sweden. support@aldorock.com.