Privacy Policy

This Privacy Notice explains how Express Konnect LLC ("e-Konnect", "we", "us"), a Delaware limited liability company located at 1111B South Governors Ave Suite, Dover, DE 19904, United States, collects, uses, discloses and protects personal information when you visit e-konnect.com or use our Cloud Backup Storage services (the "Services"). It also describes the choices and rights available to you, including specific rights for residents of California and other U.S. states, and for residents of the European Union, the European Economic Area and the United Kingdom.

1. Personal Information We Collect

We collect the following categories of personal information:

• Identifiers and contact details: name, email address, phone number, postal and billing address, country, account identifiers.
• Commercial information: plans ordered, order history, invoices, activation codes, refund requests.
• Payment information: handled directly by our payment processors (Stripe, PayPal). We receive only a transaction reference, the payment status and, where applicable, the last four digits and type of card. We never store full card numbers.
• Internet and device activity: IP address, browser type, device information, pages visited, date and time of access, and server logs, including access logs to your storage bucket.
• Communications: messages you send us through the contact form, by email or to our support team.
• Stored content: the files you back up through the Services ("Your Content"). Your Content is stored encrypted and we do not access or analyze it except as described in Section 4.

We collect this information directly from you (when you order, contact us or use the Services), automatically (through cookies and server logs, see our Cookie Policy) and from our payment processors.

We do not collect sensitive personal information such as government identification numbers, precise geolocation, health data or biometric data.

2. How We Use Personal Information

• To create and manage your account, authenticate you (one-time login codes sent by email) and deliver the Services you order;
• To process payments, issue invoices, handle refunds and prevent fraud and chargebacks;
• To provide customer support and respond to your requests;
• To send transactional communications: order confirmations, activation codes, renewal reminders, security alerts and changes to our terms;
• To send marketing communications about our Services, only where permitted by law and always with the ability to opt out;
• To secure, monitor, maintain and improve the Services and our website;
• To comply with legal obligations (tax, accounting, sanctions screening, lawful requests) and to enforce our Terms of Service.

3. How We Disclose Personal Information

We do not sell personal information, and we do not share it with third parties for cross-context behavioral advertising. We disclose personal information only to:

• Service providers acting on our behalf: payment processors (Stripe, PayPal), email delivery providers, and the data center and infrastructure providers in Europe that host the Services. They may use the information only to provide their services to us.
• Professional advisers such as accountants, lawyers and auditors, under confidentiality obligations.
• Authorities: courts, regulators and law enforcement when required by law, subpoena or court order, or to protect our rights, our customers or the public.
• A successor in the event of a merger, acquisition, financing or sale of all or part of our business, subject to this Privacy Notice.

4. Your Content

Your Content is encrypted in transit (TLS) and at rest (AES-256). We access Your Content only where necessary to operate the Services, at your request for support, to comply with a legal obligation, or to investigate a suspected violation of our Terms of Service. We never use Your Content for advertising or to train machine-learning models.

5. Data Retention

• Account and billing information: for the duration of our relationship, then for as long as required by U.S. tax, accounting and legal obligations (generally up to 7 years).
• Your Content: for the duration of your plan, then permanently deleted 7 days after expiration or cancellation (see our Terms of Service).
• Server and access logs: 12 months.

6. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, passwordless one-time-code authentication and logging. No system is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and the competent authorities as required by applicable law, including U.S. state breach notification laws.

7. International Data Transfers

We are located in the United States and our storage infrastructure is located in Europe. Personal information may therefore be accessed from and transferred to the United States, where privacy laws may differ from those of your country. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for transfers of personal information from the EEA, the United Kingdom and Switzerland.

8. Cookies, Do Not Track and Global Privacy Control

We use strictly necessary cookies only (session and security). We do not use advertising or third-party analytics cookies, and we do not track you across other websites. Because we do not engage in cross-site tracking, we do not respond to "Do Not Track" browser signals; however, we honor Global Privacy Control (GPC) signals as a valid opt-out of sale or sharing, even though we do not sell or share personal information. See our Cookie Policy.

9. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13, in accordance with the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal information, contact us and we will delete it.

10. Your Privacy Rights (United States)

Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws), you may have the right to: (a) know and access the personal information we hold about you; (b) correct inaccurate information; (c) delete your personal information; (d) obtain a portable copy; (e) opt out of the sale or sharing of personal information and of targeted advertising (we do not engage in these practices); and (f) not be discriminated against for exercising your rights.

California residents. Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, the categories of personal information we have collected in the preceding 12 months are those listed in Section 1, for the purposes described in Section 2, disclosed to the categories of recipients described in Section 3. We do not sell or share personal information, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. California Civil Code Section 1798.83 ("Shine the Light") permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes; we make no such disclosures.

To exercise any of these rights, email support@e-konnect.com from the address associated with your account, or write to the postal address below. We will verify your identity (for example, by sending a one-time code to your account email) and respond within 45 days, extendable once by a further 45 days where permitted by law. You may designate an authorized agent to make a request on your behalf, with written proof of authorization. If we deny your request, you may appeal by replying to our response; we will respond to your appeal within the period required by your state's law.

11. Additional Information for Residents of the EU, EEA and United Kingdom

If you reside in the European Union, the European Economic Area, Switzerland or the United Kingdom, the General Data Protection Regulation (GDPR) or the UK GDPR applies to our processing of your personal data. Express Konnect LLC is the controller. We have not appointed a representative in the EU or the UK under Article 27 GDPR; please address all requests to support@e-konnect.com.

Legal bases. We process your personal data (a) to perform our contract with you (account, Services, billing, support); (b) to comply with legal obligations (tax, accounting, sanctions); (c) for our legitimate interests in securing and improving the Services, preventing fraud and defending our rights, where those interests are not overridden by your rights; and (d) with your consent, for marketing communications, which you may withdraw at any time.

Your rights. You have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with your local supervisory authority, for example the Commission Nationale de l'Informatique et des Libertés (CNIL) in France (www.cnil.fr) or the Information Commissioner's Office (ICO) in the United Kingdom.

Transfers. Transfers of your personal data to the United States are governed by the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), as described in Section 7.

12. Changes to This Notice

We may update this Privacy Notice from time to time. The effective date is shown at the top of this page. If we make material changes, we will notify you by email or by a prominent notice on the website before they take effect.

13. Contact Us

Express Konnect LLC
1111B South Governors Ave Suite, Dover, DE 19904, United States
Email: support@e-konnect.com
Phone: +1 (302) 589-4323