Data is collected when you use the service (e.g. create an account, make a purchase, send messages, create a ticket or send xat an email). The following data may be collected:
You may provide personally identifiable information in order to use certain Services and to obtain support from xat. If you do not want to provide xat with any personally identifiable information, you should not use the Services that require such information. Other Users may also provide xat with your personally identifiable information.
xat only uses this data, which may include potentially personal data, when it is lawful for xat to do so (e.g. to provide the service you have requested, for our legitimate interests in managing and improving the service and to comply with legal or regulatory obligations). Any potentially personal data that is collected is only used for the purposes for which it was originally collected.
To deliver you the Service and send you notices related to the Service, your Account and necessary updates. This includes fulfilling your requests for products and services and delivering content to you that is sent by other Users. To deliver your content to other Users (we will share your User name with Users to whom you send content). If you do not want to share this information, you should limit the content that you share and the Users that you share it with.
To manage your Account and Account access, provide you with Software and Materials, purchase confirmations, support and customer service and to keep track of support and customer service requests.
To determine the technical capabilities of your device and the appropriate content to deliver to you. xat may disclose personally identifiable information to its partners in order to provide the Service, resolve service problems and correct errors in the Service (including customer inquiries, billing and credit corrections), to communicate with you about the Service, and to enhance your experience on the Service.
Your data may be transferred to a different legal jurisdiction and this will only be done where adequate level of data protection is available. For example, in the case of the USA; an approved contract and Privacy Shield registration.
Potentially personal data is only retained for as long as necessary. The duration the data is retained varies; considering the quantity of data, the type of data, the risk of harm should the data be accessed without authorization. In addition, there are regulatory, security, tax, law enforcement and legal requirements that may require data to be retained for a longer period of time. Where it is practical the retained data is encrypted and/or anonymized.
In some circumstances, you may request your potentially personal data and/or its deletion e.g. where there is no good reason for xat to retain or process it. The will likely require xat to confirm your identity to ensure that data is neither made available to an unauthorized third party or incorrectly deleted. Alternatively, you can use the self service tools to delete your account or group.
When you visit any web site, it may store or retrieve information on your browser. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. This service stores data (e.g. HTTP Cookies, HTML5 Local Storage) in your browser to deliver the service.
These are needed for the service to function and cannot be switched off in our systems (e.g. setting your privacy preferences, Cloudflare security functionality). You can set your browser to block or alert you about these, but some parts of the site cannot work work without them. They do not store any personally identifiable information.
Third party: Cloudflare, Amazon AWS ELB
They are usually only set in response to actions made by you which amount to a request for services e.g. creating an account, setting your preferences on the service.
These are used to monitor the service for the purposes of management and development of the service. They do not store any personally identifiable information.
Third party: Google Analytics
xat does not knowingly collect personal information from children under the age of 13. xat requests that children under the age of 13 not use the Service nor submit any personal information to the Service. Since information regarding children under the age of 13 is not collected, xat does not knowingly use or distribute personal information regarding children under the age of 13. If xat obtains actual knowledge that it has collected personal information about a child under the age of 13, that information will be immediately deleted from our database.
xat takes appropriate steps to help ensure data privacy and security including through various hardware and software methodologies. However, due to the open communication nature of the Internet, xat cannot guarantee that communications between you and the Service, and the Service and you, will be free from unauthorized access by third parties. Users of the Service do so at their own risk. xat cannot guarantee the security of any information that is disclosed online.
The service may contain links to third party websites/content. xat is not responsible for the privacy policies of websites and services to which the Service links, or of which the Service is a part. If you provide any information to such third parties different rules regarding the collection and use of your personal information may apply. xat strongly suggest you review such third party's privacy policies before providing any data to them.
If you have any questions or comments about this policy, please contact https://xat.com/Support.
Date: 25 May 2018