This Privacy Policy ("Policy") describes how XCloudPhone ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website and use our Cloud Phone software platform ("Service"). We are committed to protecting your privacy and ensuring transparency in how we handle your data, in compliance with international data protection standards such as the GDPR and CCPA.
1. Scope and Consent
This Policy applies to all individuals and organizations who register for or use the XCloudPhone Service. By accessing or using our Service, you signify your understanding of and agreement to the terms of this Privacy Policy.
2. Information We Collect
We collect only the information necessary to provide and improve our Service securely and effectively.
A. Information You Provide Directly
- Personal Identification Information: Your name, email address, and phone number when you register for an account.
- Payment Information: Billing details necessary to process transactions, which are collected and processed securely by our third-party payment gateway partners. We do not store your credit card information on our servers.
- Communications: The content of your inquiries and correspondence when you contact our customer support team.
B. Information We Collect Automatically
- Log and Usage Data: IP address, browser type and version, operating system, access times, pages viewed, and the duration of your sessions. This data is collected for security, diagnostic, and analytical purposes.
- Service Performance Data (Anonymized): Technical metrics related to your interaction with the XCloudPhone platform, such as features used and session duration. This data is collected in an aggregated and anonymized form to help us improve service quality.
- Cookies: We use essential cookies to maintain your session and ensure the core functionality of our website. For non-essential cookies, we will obtain your consent.
C. Information We DO NOT Collect
Our Core Privacy Commitment: We do NOT, and are architecturally UNABLE to, access, view, scan, or collect any content that you create, store, or process inside your private Cloud Phone environment. This includes:
- Applications you install and their data.
- Accounts (gaming, social media, etc.) you log into.
- Files, images, messages, and other personal data.
- Your activity within any application.
Your Cloud Phone instance is a private, isolated environment.
3. Purpose and Legal Basis for Data Processing
We process your data based on your consent and for the performance of our contract to provide the Service, for the following specific purposes:
- To provide, operate, and maintain our Service.
- To manage your account and process payments.
- To communicate with you, including sending important service updates, security alerts, and technical support.
- To improve our Service by analyzing anonymized usage data.
- To ensure security and prevent fraud by monitoring for malicious or unauthorized activities.
- To comply with legal obligations and enforce our terms and policies.
4. Data Sharing and Disclosure
The XCloudPhone Promise: We do not sell your data. We do not sell, rent, or trade your personal information. We only share data in the following limited circumstances:
- Service Providers: We may share information with trusted third-party partners who provide services on our behalf, such as cloud infrastructure, payment processing, and analytics. These partners are bound by strict data protection agreements.
- Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
- Protection of Rights: We may disclose information where we believe it is necessary to protect the rights, property, or safety of XCloudPhone, our users, or the public.
5. Data Security
Protecting your data is a top priority. We implement appropriate technical and organizational measures, including:
- Encryption: Data is encrypted in transit (using SSL/TLS) and at rest (using AES-256).
- Access Control: We apply the principle of least privilege, restricting internal access to your data to authorized personnel only.
- Monitoring and Auditing: We regularly review and audit our security measures to protect against emerging threats.
6. Your Data Rights (GDPR & CCPA)
You have rights over your personal data. Depending on your jurisdiction, these may include:
- The right to access: You can request copies of your personal data.
- The right to rectification: You can request that we correct any information you believe is inaccurate.
- The right to erasure (Right to be Forgotten): You can request that we delete your personal data, under certain conditions.
- The right to data portability: You can request that we transfer the data we have collected to another organization, or directly to you.
- The right to object to processing: You can object to our processing of your personal data. You can exercise these rights through your account dashboard or by contacting us directly.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable laws (e.g., for tax and accounting purposes). When your account is deleted, we will securely erase or anonymize your data.
8. Children's Privacy
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information without your consent, please contact us.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.