Privacy Policy

Information we process

• Account and administrative data: names, work email addresses, organization and device identifiers, roles, and audit records of actions taken in the portal.
• Backup content: the files, mailboxes, drive items, calendars, contacts, notes and related data that an MSP or its customer selects for backup. We treat this content as confidential and do not inspect it except as needed to perform backup, restore and integrity checks.
• Operational metadata: job results, sizes, timestamps, error and warning messages, and storage usage used to run the service and show status.

How we use information

We use the information above only to provide and secure the service: to run backups and restores, to show status and send notifications, to meter storage and bill the MSP, to detect and fix faults, and to protect against abuse. We do not sell personal information, and we do not use backup content for advertising or to build or improve generalized artificial intelligence or machine learning models.

Microsoft 365 and Google Workspace data

When an organization connects a Microsoft 365 or Google Workspace tenant, its administrator grants CloudVault Pro access through Microsoft and Google consent. We use that access solely to enumerate the accounts selected for backup and to read their data in order to store encrypted backups, and, when the administrator enables it, to restore data back into the original or a chosen account.

CloudVault Pro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google Workspace APIs is used only to provide and improve the backup and restore features the user requested, is not transferred to others except as necessary to provide the service or as required by law, is not used for advertising, and is not used to train generalized AI models. Humans do not read this data except with the user's or administrator's explicit consent for support, for security or to comply with law.

We apply the same limits to data obtained through Microsoft Graph and other Microsoft 365 APIs: it is used only to deliver the backup and restore service, under the permissions the tenant administrator granted, and the administrator can revoke that access at any time in their Microsoft or Google admin console.

Storage, encryption and security

Backups are encrypted on the client side with AES-256 before they leave for storage, and are stored in the storage location the MSP chooses (for example an object storage bucket or a storage server). Where the storage supports it, backups are written with immutability so they cannot be altered or deleted for a retention period. Access to the service requires authentication, and administrative actions require multi-factor authentication.

Retention and deletion

Backups are retained according to the retention policy the MSP sets. When a connection or account is removed, new backups stop and existing backups are deleted according to that policy and the immutability period of the storage. An MSP or customer may request deletion of their data by contacting their MSP or us at the address below.

Service providers and storage

We host the control plane on reputable cloud infrastructure and store backups with the storage providers the MSP selects (such as object storage or a storage server). These providers process data on our or the MSP's instructions under contractual safeguards. We do not share personal information with third parties for their own purposes.

International transfers

CloudVault Pro can store data in the region the MSP chooses. Where data is transferred across borders, we rely on appropriate safeguards consistent with applicable law.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal information, and to object to or restrict certain processing. Because an MSP controls most end-user data, please direct these requests to the MSP that manages your account; we assist the MSP in fulfilling them. You may also contact us directly using the details below.

Children

CloudVault Pro is a business service and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the date above. Significant changes will be communicated through the service or to the MSP.

Contact

WebNetCom Ltd. (Websites Networks and Computers), Zefat, Israel. Email tech@webnetcom.co.il, phone +972 58 532 7000.