Legal
Privacy Policy
Last updated: April 15, 2026
PT. XESS ONE GLOBAL ('XessOne', 'we', 'our') is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data.
1. Data We Collect
We collect information you provide directly (name, email, company), usage data (pages visited, features used), technical data (IP address, browser type, device), and billing information (stored securely via invoice records).
2. How We Use Your Data
To provide and improve our services, to communicate about your account, to send invoices and service notifications, to monitor system performance, and to comply with legal obligations.
3. Data Storage & Security
Your data is stored on Vultr infrastructure within our managed environment. We use encryption in transit (TLS) and at rest. Passwords are hashed and never stored in plain text.
4. Data Sharing
We do not sell your personal data. We share data only with infrastructure providers (Vultr, Wasabi, MXroute) as needed to deliver services, and with legal authorities when required by law.
5. Cookies
We use essential cookies for authentication and session management. No third-party advertising cookies are used on our platform.
6. Your Rights
You have the right to access, correct, or delete your personal data. To exercise these rights, contact privacy@xessone.com. We will respond within 30 days.
7. Data Retention
We retain account data for the duration of your contract plus 1 year. Invoice records are kept for 5 years for tax compliance. You may request earlier deletion of non-financial data.
8. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy occasionally. We will notify you via email or dashboard notification at least 14 days before significant changes take effect.
10. Contact
For privacy-related questions: privacy@xessone.com or PT. XESS ONE GLOBAL, Indonesia.
Questions? privacy@xessone.com
