Privacy Policy

01Introduction and scope

This privacy policy explains how Horanos Tech LLC collects, uses, processes and protects users' personal and non-personal data across all its sites and services, including the main website, the hosting platform, and the courses platform.

By using any of our services, you agree to the practices described in this policy.

02Data we collect

03How we use data

We use the data we collect to provide, operate and improve our services, process orders and payments, communicate with users, comply with legal obligations, and strengthen system security.

04Data protection

The company is committed to keeping client data confidential and protecting it within the limits of its technical capability. It is not disclosed except with written consent or under a court order.

05Support requests and quotes

When you open a support request, ask for a quote or write to us through the contact form, we store what you write: your name, e-mail address and phone number if you give it, the subject, the messages and any files you attach. We also store the IP address the request was sent from, to protect the system from abuse.

You follow your request through a secret link sent to your e-mail; we store that link only in encrypted form. If you choose to follow your request on Telegram, we store the ID of your chat with us there so we can send you the replies.

If you do not reply to a request we have answered, we remind you after 3 days and close it after 7 days. Closing does not delete the request; you can reopen it by replying.

If you rate your request as solved, we ask whether you would like to share your opinion. This is optional. If you agree, we keep your opinion and the name you type, and publish it on the site only after reviewing it. The same goes for an opinion sent with the "Share your opinion" button on the home page.

06Services your data passes through

We use outside services to run the site. Each one receives only the data it needs for its job:

• Google Gemini, and Anthropic Claude in its place: the text of your questions to the assistant, the project description in the domain name generator, and the text of an opinion you agreed to publish, when we publish it, to translate it into the other languages of our site. Your name, e-mail and phone number are never sent to them.
• Google Analytics: general browsing data, only if you accept analytics cookies, with part of the IP address hidden.
• Telegram: our team receives a notice of every new request with its number, subject, and the sender's name and e-mail. An encrypted copy of the database backup goes there too; only a key our team keeps can open it.
• Our e-mail provider: to send you the link to your request and the replies to it, and the domain alert messages if you asked for them.
• The hosting platform hosting.horanos.com: when you search for a domain, our site asks the platform about the domain you typed. Accounts, orders and payment happen there.
• Domain name registries: in the WHOIS lookup they receive only the domain name you type, never your address or any data about you.
• DNS servers: in the DNS check and the DNS propagation check, the domain name you type goes to the servers of its extension and of the domain itself, and to public DNS servers in several countries (listed in the result table), never your address or any data about you.
• Mail blacklists: in the mail blacklist check, the IP address you check (or the addresses of a domain's mail servers) goes to the operators of these lists, named in the result table, never your address or any data about you.

07Free tools

In the website check, the SSL checker, the DNS check, the DNS propagation check, the domain name generator, the WHOIS lookup and the mail blacklist check, we use what you type only to run the check or make the suggestions, and we do not store it. We use your IP address briefly in the server's memory to limit excessive requests, and we do not store it. We count how often each tool is used per day, without what you typed and without your address.

In the WHOIS lookup we send the domain name you type to its extension's registry over RDAP, the Syrian registry NIC.sy among them, and sometimes to the registrar of the domain. For .sy domains we may also ask NIC.sy through our hosting platform, and we ask the platform whether the name is free and its price. The answer stays in the server's memory for 10 minutes, to be reused for the same name, and is then deleted. What we show about a domain's owner is only what the registry publishes to everyone.

Domain alerts in the WHOIS lookup (optional): if you ask us to remind you before a domain expires, or to tell you when a name becomes free, we store your e-mail address, the domain name and your language. We first send a confirmation message, and the alert starts only when you press its confirm button; if you do not, we delete the request after two days. We check the domain once a day and send only the reminder or the news, and use your address for nothing else. Every message has a link to stop the alert, and stopping it deletes your address at once. An alert also ends by itself: waiting for a name after one year, expiry reminders after three years.

«Watch my site» in the site check tool (optional): if you ask us to watch a website, we store your e-mail address, the site's address and your language, confirmed by a message as for the domain alerts. We check the site every ten minutes and its SSL certificate once a day, and write only when it stops, when it is back and before the certificate expires. Every message has a link to stop, which deletes your address at once; the watch ends by itself after one year.

The monthly newsletter (optional): we store your e-mail address and language, and the subscription starts only with the confirm button of the first message; if you do not press it, we delete it after two days. Once a month we send the articles of the month before, nothing else, and every issue has a link to unsubscribe that deletes your address at once. New-article notifications in the browser (optional): we store only the subscription address your browser gives us and your language, no name or e-mail, and send the new article's title and link; stop them with the same button or in your browser settings.

The SPF record generator, the DMARC record generator and the CSR generator run in your browser. What you type there does not reach us, nor does the private key created for a certificate request. When you press “read current record”, we check the domain name as in the DNS check. In the SPF and DMARC generators we count only how often a result is copied. The CSR generator's page counts nothing, runs no Google Analytics or other tracking even if you accepted analytics cookies, and does not store the key in your browser.

In “What is my IP”, we read the IP address your request came from in order to show it to you. We look up its approximate country and provider in a data file on our own server, so your address is not sent to a geolocation service. We ask the domain name system (DNS) for your address's reverse name; that question reaches the servers of the provider that owns the address. We do not store your address.

08Consultations, your requests and your project

Booking a consultation: we keep your name, e-mail, phone number (required for a WhatsApp call), your project's topic, and the time and channel you chose, and send the booking to our team on Telegram. We e-mail you a reminder one hour and half an hour before it. We use your browser's time zone once to write the time in your own time, and do not keep it.

Telegram bot: when you use our tools or book a consultation in the bot, what you type passes through Telegram's servers. We keep your chat ID and the step you reached for fifteen minutes only, then delete them. We do not keep the domains or addresses you check; your project description in “domain name ideas” goes to the AI model, as on the website. A booking made in the bot is kept exactly like one made on the website, together with your chat ID so the two reminders reach the chat too; its cancel link goes to your e-mail, not into the chat.

“My requests”: when you ask for the link to your requests, we keep your e-mail and an encrypted fingerprint of the link (not the link itself) for seven days, then delete both. The link goes to your e-mail only.

“Talk to a person” in the assistant: we keep the visible conversation with the assistant (up to about 6,000 characters) with your name, e-mail and phone if you give it, as an ordinary support request kept like the others; our team is notified by e-mail and Telegram.

Your project page: when we build a website for you, we keep your name, your e-mail (if you give it), the project's stages and the weekly updates, and we send you each update by e-mail. The page opens with a private link that search engines do not index; we delete the project and its updates when you ask.

“Was this article helpful?”: we keep the article, the language, your yes or no, the line you write if you do, and the time, without your address or anything that identifies you, and delete it after one year. Only the fact that you answered stays in your browser, so you are not asked again.

09Backups

We back up the database regularly so your data is not lost in a failure. We keep the last 14 copies and older ones are deleted automatically. The copy that leaves the server is encrypted.

10The site assistant

What follows also applies to the AI domain name generator: only the project description you type is sent to the AI service, and we do not store it on our servers.

The automated assistant on our site (the robot) uses Google Gemini to process questions, and may use Anthropic Claude instead when Gemini is busy. Only the text of your question is sent to that service, together with public information from our site.

Do not type personal data, passwords or payment details into the assistant. We do not store the text of conversations on our servers; we only count the number of messages and their language. The conversation stays in your browser until you close it.

If you send a request to our team from the assistant's form, your details (name, e-mail, phone) go straight to our team, not to the AI service, and are stored with your request in our support system. If you choose to attach the conversation, it is stored with the request too.

11Speed measurement and anonymous counts

We measure how fast pages load in visitors' browsers in order to improve them: the time until content appears, the response to taps and clicks, and layout stability, together with the page path and the device type (phone or computer). This measurement is anonymous: no cookies, no visitor identifier, no IP address stored with it, and it is deleted after 30 days.

In the same anonymous way we count clicks on the order, WhatsApp and quote buttons with the page they came from, how often the site search is used, and the words searched that found nothing, to learn what the site is missing. These counts are deleted after 90 days.

12Your rights

• We do not sell your data, and we do not give it to anyone for advertising.
• You can ask for a copy of the data we hold about you, or ask us to correct or delete it, by writing to contact@horanos.com.
• We delete what you ask us to delete, except what the law requires us to keep, such as invoices.

13Contact us

For any question about your privacy or your data, write to contact@horanos.com or message us on WhatsApp at +963 948 332 124.