This covers information gathered by the website and by the services bought through it. For the people who buy here, section three usually matters more than the rest, so the discretion practices are written out rather than left to be inferred.
Section 01What is held
| The account | An email address, plus whatever name you choose to offer. A legal name is not required for the account itself. |
|---|---|
| Payment | Records of subscriptions and receipts. Stripe handles the card end to end and it never lands on our servers. The cardholder name reaches Stripe because a card payment cannot happen otherwise. Visible to us: four digits and whether it worked. |
| Service metadata | Which devices, handsets, mailboxes, machines, company files and tenants are covered, and the condition each is in. |
| Protected material | On the backup lines, the copied material itself, sealed with 256 bit AES where it sits and protected where it moves. Yours, in our keeping, and not a dataset of ours. |
| Website logs | Ordinary server logs: address, time, page requested. Nothing that follows you elsewhere. |
Section 02What is done with it
- Setting the services up, running them, invoicing them and supporting them.
- Warning you when something has stopped working, when something smells like an intrusion, and when the account is waiting on a decision from your side.
- Meeting obligations that tax authorities and courts impose on any company.
Nothing else. Personal information here is not for sale. Material held on your behalf is not read for insight, sampled for research, or fed to any model. The only thing we intend to do with it is give it back.
Section 03Discretion, as practised
These are working practices rather than aspirations:
- The bank learns nothing. Receipts and statements carry FORTIFY 24X7, the name of a security company with a large and unremarkable customer base. Reconciling a month reveals no brand, no service, and no subject.
- We ask for very little. An account is known by its email address. Where a manager or an assistant would rather hold it in their own name for you, that is ordinary here and needs no justification.
- No list of who buys here leaves this company. We do not name clients, we do not confirm names when asked, we operate no reference scheme, and no likeness of yours will appear anywhere in our material. There is nothing for you to decline.
- Cases belong to the account. Support work is done against the account record, and a case raised by somebody you nominated is answered back to them.
- Internal reach is narrow and recorded. Our staff enter an account only where the work requires it, and that entry is logged.
Section 04Who else handles it
Only the suppliers this could not operate without: Stripe, which takes the money; the platform vendors behind the agents and the vaults; the storage providers keeping encrypted copies; and one mail delivery service that carries receipts, warnings and the links you sign in with. Each is bound to instruction from us, with no purpose of its own in play.
When a legal demand lands, we satisfy precisely what it compels and not an inch more, and you will hear that it happened unless we are barred from saying so.
Section 05How long it stays
Covered material lasts exactly as long as the line you took says it does: file versions for four weeks, Exchange mail for seven years, the Microsoft file workloads for a year, and Entra ID configuration with no ceiling at all. When a subscription finishes, the material beneath it is cleared on whatever teardown timetable the vendor runs. Records of the account itself, and of payments, persist for the span tax authorities insist upon.
Section 06What you may demand
Californians, and residents of a widening list of other places, have rights in statute to look at, correct, take away or wipe whatever a business holds on them. Write in from the account address and we will do whichever of those applies. Wiping an account is final, and so is wiping the copies sitting inside it. Expect a request to confirm before anything is destroyed.
Section 07Reaching us
Fortify 24x7 · care@celebritycloudservices.com