The short version
- We collect what you give us (name, work email, company, message) and basic technical data (IP address, browser, pages viewed).
- We use it to answer you, deliver what you asked for, run and secure the site, and, with your permission, send you updates.
- We do not sell personal information. We do not process sensitive categories of data. We do not buy data about you from third parties.
- You can ask to see, correct or delete your data at any time at privacy@xcelocloud.com.
What we collect
Information you type into a form, plus the technical signals every website receives.
Information you provide
When you book an advisory session, request a gated download, apply for a role, or contact us, we collect the details you enter: name, work email, company, role, phone (if given), your message, and, for job applicants, your résumé and the information in it.
Information collected automatically
Our hosting and analytics providers log IP address, approximate location derived from it, browser and device type, operating system, referring page, pages viewed and time on page. This data is used for security, performance and aggregate analytics, and does not on its own identify you.
What we do not collect
We do not knowingly collect sensitive personal information (health, biometric, precise geolocation, government identifiers), data from children under 18, or information purchased from data brokers.
How we use it
To respond to you, deliver the service you asked for, keep the site running, and comply with the law.
- Respond to inquiries, schedule advisory sessions and route emergency engagement requests to our on-call engineers.
- Deliver downloads you request and, if you opted in, send related resources and announcements. Every marketing email includes an unsubscribe link.
- Evaluate job applications and communicate with candidates.
- Operate, secure, debug and improve the website.
- Meet legal, accounting and regulatory obligations, and protect our rights and the safety of others.
Legal bases (EEA, UK, Switzerland)
Where GDPR or UK GDPR applies, we rely on: your consent (marketing, optional cookies), performance of a contract or pre-contract steps (responding to a request), our legitimate interests in running and protecting a business website, and compliance with legal obligations. You may withdraw consent at any time without affecting earlier processing.
Canada
We process personal information with your express or implied consent, except where law permits otherwise (for example, fraud investigation or a legal demand).
How long we keep it
Only as long as we need it for the purpose you gave it to us.
- Form inquiries and advisory requests: up to 24 months after our last contact, unless you become a customer or partner.
- Job applications: 12 months after the role closes, unless you ask us to keep your details or we are legally required to retain them longer.
- Marketing subscriptions: until you unsubscribe.
- Server and security logs: typically 90 days.
When data is no longer needed we delete or anonymize it. Where it persists in backups, it is isolated from further use until deletion.
How we protect it
We apply the same discipline to our own data that we apply to our customers’: encryption in transit, access limited to staff who need it, multi-factor authentication on internal systems, and logging. No internet transmission is perfectly secure, so we cannot guarantee against every unauthorized access, but we will notify you and regulators of a breach where the law requires.
Your rights and choices
See it, fix it, delete it, take it with you, or object. Email privacy@xcelocloud.com.
Depending on where you live, you may have the right to access the personal information we hold about you, correct inaccuracies, request deletion, receive a portable copy, restrict or object to processing, opt out of marketing, and not be subject to automated decisions with legal effect. We do not discriminate against anyone for exercising these rights.
United States state privacy laws
Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia and other states with comprehensive privacy laws have the rights above. In the past twelve months we have collected identifiers (name, email, IP address), professional information (company, role) and internet activity (pages visited) and have not sold or shared personal information for cross-context behavioral advertising. You may appoint an authorized agent; we will verify identity before acting. If we decline a request you may appeal by email and then to your state attorney general. California residents may also request our “Shine the Light” disclosure once a year.
EEA, UK and Switzerland
You may lodge a complaint with your national data protection authority, the UK Information Commissioner’s Office or the Swiss Federal Data Protection and Information Commissioner. Our Services are hosted in the United States; by using them you consent to transfer of your data to the US under appropriate safeguards.
Australia, New Zealand and South Africa
We process personal information in line with the Australian Privacy Act 1988, the New Zealand Privacy Act 2020 and South Africa’s POPIA. You may request access or correction, and complain to the OAIC, the NZ Privacy Commissioner or the South African Information Regulator.
Do Not Track
There is no agreed standard for browser Do-Not-Track signals, so we do not respond to them. We do honor Global Privacy Control signals.
Text messaging (SMS)
Operational texts only: security codes, ticket updates, outage notices. Reply STOP to opt out.
If you give us a mobile number through our Emergency Engagement form or in the course of a service relationship, we may text you for identity verification, incident callbacks and updates, support-ticket updates, technician coordination, maintenance and security alerts. Mobile numbers and SMS opt-in consent are never shared with or sold to third parties for marketing or any other purpose. We never send marketing texts without separate written consent, and your number is never sold or shared for advertising. Message frequency varies with your activity; carrier rates may apply. Reply STOP at any time; some service features may then be unavailable. Messages may be logged for audit and troubleshooting. Third-party messaging providers act only on our instructions.
Changes to this policy
We update this policy when our practices or the law change and show the revision date at the top. Material changes will be flagged on this page or sent to you directly where we have your contact details.
Contact
Privacy questions, requests and appeals: privacy@xcelocloud.com. Xcelocloud Inc., 5331 East Mockingbird Lane, Dallas, TX 75206, United States.