> Data Backup Privacy Policy

1. Information We Collect

We collect information about you in a few different ways.

A. Information You Provide to Us

• Account Information: When you register for an account, we collect information such as your name, email address, and company name (if applicable).
• Payment Information: When you subscribe to our Services, you provide payment information, such as a credit card number. We may store this information to process your payments. In some cases, we may use a third-party payment processor, and in those instances, the third party's privacy policy will govern the collection and use of your information. We receive information about the transaction, such as the date and time it occurred.
• Communications: If you contact us directly for support or other inquiries, we may receive additional information about you, such as the contents of your messages and any attachments you may send us.

B. Information We Collect Automatically (Operational Data)

When you use our Services, we automatically collect certain information necessary for the operation and maintenance of the Services. This includes:

• Device and Usage Information: We collect information about the devices you register with our service, including the device name, operating system, public IP address, timezone, and statistics about your storage usage.
• Service Configuration: We collect the usernames you create on our server and information about which features of the Services you use.

C. Your Encrypted Backup Data ("User Content")

Our Services are designed with a zero-knowledge architecture to protect your privacy. The content of the files and folders you back up is encrypted on your device before it is sent to us. We do not have access to the substance of your encrypted User Content unless you take specific, optional actions as described in our Terms of Service (such as enabling administrator-assisted password reset).

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Services: To operate our backup services, authenticate you, process your backups and restores, and provide customer support.
• To Process Transactions: To bill you for the Services you subscribe to.
• To Communicate With You: To send you service-related announcements, technical notices, updates, and support messages.
• For Security and Fraud Prevention: To protect the security and integrity of our Services and our users, and to enforce our Terms of Service.
• To Comply with Legal Obligations: To comply with applicable laws, lawful requests, and legal processes, such as responding to subpoenas or requests from government authorities.

3. How We Share Your Information

We do not sell your personal information. We may share the information we collect with the following third parties:

• Service Providers: We share information with third-party vendors and service providers who perform services on our behalf. This includes:
  • Payment Processors: To process your payments.
  • Infrastructure Providers: We use our own local and cloud infrastructure to host our servers and store your encrypted User Content.
  • Software Vendor (Comet Backup): For licensing, billing, and software functionality purposes, our server shares limited operational data with Comet Backup (the provider of the backup platform). This includes our server's IP address, the usernames you create, and usage statistics. They do not receive any of your encrypted User Content.
• Law Enforcement and Government Authorities: As detailed in our Terms of Service, we cannot access or decrypt your User Content by default. However, if you have enabled the "Allow administrator to reset password" feature and we receive a legally binding request such as a warrant or court order, we may be compelled to use our access to decrypt and provide your data. We will notify you of such requests unless legally prohibited from doing so.
• Business Transfers: We may share information in connection with a business transaction, such as a merger, sale of company assets, or financing.

4. Data Security

We implement technical and organizational measures to protect your information. Our primary security feature is our end-to-end, zero-knowledge encryption.

As the encryption keys are derived from your password, the security of your data is critically dependent on you. You are solely responsible for keeping your password confidential and secure.

While we take security seriously, no system is impenetrable. We cannot guarantee the absolute security of your information.

5. Data Retention

We retain your account and operational data for as long as your account is active or as needed to provide you with the Services and for our own historical and accounting purposes.

Upon termination or cancellation of your account, your encrypted User Content will be scheduled for deletion. The data will be permanently removed from our systems during the next automated retention pass performed by the backup server.

6. Your Data Rights

The Virginia Consumer Data Protection Act (VCDPA) provides Virginia residents with specific rights over their personal data. However, these legal obligations apply only to businesses that meet certain data processing thresholds. As a local business, Widomaker currently operates below these thresholds and is therefore not legally subject to the VCDPA's requirements.

Nevertheless, we believe in the privacy principles underlying the VCDPA. As a matter of goodwill, we will make a reasonable effort to accommodate requests from our customers regarding their data, such as requests for access or deletion, when it is commercially feasible and does not create an undue financial or operational burden on our company. If you have a request regarding your personal data, please contact us.

7. Children's Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete such information from our files as soon as possible.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the new Privacy Policy on our website and, where feasible, by sending you an email. We encourage you to review this Privacy Policy periodically.

9. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us.