Privacy Policy – XPLUS

Last updated: April 2, 2022

1.Introduction

This Privacy Policy sets out how we, XPLUS, use and protect your personal data that you provide to us, or that is otherwise obtained or generated by us, in connection with your use of our cloud-based messaging services (the “Services”). For the purposes of this Privacy Policy, ‘we’, ‘us’ and ‘our’ refers to XPLUS, and ‘you’ refers to you, the user of the Services. Please read carefully and confirm that you fully understand all the rules and points of XPLUS Privacy Policy before continuing to use our products and services. By using XPLUS products and services, you are consenting to the collection, storage and processing and transfer or your personal information as described in this Privacy Policy If you have any questions or objection as to how we collect and process your personal information, please contact info@xplus.com. When you consent to our processing your personal information for a specified purpose, you may withdraw your consent at any time. In addition, subject to applicable law, you have the right to request access to correct and delete your personal data, and to ask for data portability. You may also object to our processing of your personal data or ask that we restrict the processing of your personal data in certain instances, by contacting info@xplus.com


1.1 Privacy Principles information?

XPLUS has two fundamental principles when it comes to collecting and processing private data:
● We don't use your data to show you ads.
● We only store the data that XPLUS needs to function as a secure and feature-rich messaging service.

1.2 Terms of Service

This Privacy Policy forms part of our Terms of Service, which describes the terms under which you use our Services and which are available at https://xplus.com/privacy-policy/. This Privacy Policy should therefore be read in conjunction with those terms.

1.3 Table of Contents

This Privacy Policy explains the following:
● The legal basis for processing your personal data;
● What personal data we may collect from you;
● How we keep your personal data safe;
● What we may use your personal data for;
● Who your personal data may be shared with; 
● Your rights regarding your personal data.

2.Legal Ground for Processing Your Personal Data

We process your personal data on the ground that such processing is necessary to further our legitimate interests (including: 
(1)Providing effective and innovative Services to our users;
(2)To detect, prevent or otherwise address fraud or security issues in respect of our provision of Services), unless those interests are overridden by your interest or fundamental rights and freedoms that require protections of personal data.

3.What Personal Data We Use

3.1 Basic Account Data

XPLUS is a communication service. You provide your mobile number and basic account data (The account name, password, mobile number, email and your own contact information you plan to use, we may verify whether your identity is valid by sending text messages or emails.) to create a XPLUS account.
To make it easier for your contacts and other people to reach you and recognize who you are, the screen name you choose, your profile pictures, and your username (should you choose to set one) on XPLUS are always public. We don't want to know your real name, gender, age or what you like.

3.2 Your Messages

3.2.1 Cloud Chats

XPLUS is a cloud service. We store messages, photos, videos and documents from your cloud chats on our servers so that you can access your data from any of your devices anytime without having to rely on third-party backups. All data is stored heavily encrypted and the encryption keys in each case are stored in several other data centers in different jurisdictions. This way local engineers or physical intruders cannot get access to user data.

3.2.2 Secret Chats

Secret chats use end-to-end encryption. This means that all data is encrypted with a key that only you and the recipient know. There is no way for us or anybody else without direct access to your device to learn what content is being sent in those messages. We do not store your secret chats on our servers. We also do not keep any logs for messages in secret chats, so after a short period of time we no longer know who or when you messaged via secret chats. For the same reasons secret chats are not available in the cloud — you can only access those messages from the device they were sent to or from.

3.2.3 Media in Secret Chats

When you send photos, videos or files via secret chats, before being uploaded, each item is encrypted with a separate key, not known to the server. This key and the file’s location are then encrypted again, this time with the secret chat’s key — and sent to your recipient. They can then download and decipher the file. This means that the file is technically on one of XPLUS’s servers, but it looks like a piece of random indecipherable garbage to everyone except for you and the recipient. We don’t know what this random data stands for and we have no idea which particular chat it belongs to. We periodically purge this random data from our servers to save disk space.

3.3 Phone Number and Contacts

XPLUS uses phone numbers as unique identifiers so that it is easy for you to switch from SMS and other messaging apps and retain your social graph. We ask your permission before syncing your contacts.
We store your up-to-date contacts in order to notify you as soon as one of your contacts signs up for XPLUS and to properly display names in notifications. We only need the number and name (first and last) for this to work and store no other data about your contacts.
Our automatic algorithms can also use anonymized sets of phone numbers to calculate the approximate number of potential contacts an unregistered phone number may have on XPLUS. When you open the 'Invite friends' interface, we display the resulting statistics next to your contacts to give you an idea of who could benefit most from joining XPLUS.
You can always stop syncing contacts or delete them from our servers in Settings > Privacy & Security > Data Settings.
If you are using Android, XPLUS will ask you for permission to access your phone call logs (READ_CALL_LOG). If you grant this permission, XPLUS will be able verify your account by transmitting a phone call instead of asking you to enter a code. XPLUS uses this permission only to confirm receipt of the confirmation call by verifying the number in the call log.

3.4 Location Data

If you share a location in a chat, this location data is treated like other messages in cloud or secret chats respectively.
If you share your Live Location in any chat or turn on ’Make Myself Visible’ in People Nearby, XPLUS will use your data to display your location to those users with whom you are sharing it, even when the app is closed – for as long as you keep these optional features activated.

3.5 Cookies

The only cookies we use are those to operate and provide our Services on the web. We do not use cookies for profiling or advertising. The cookies we use are small text files that allow us to provide and customize our Services, and in doing so provide you with an enhanced user experience. Your browser should allow you to control these cookies, including whether or not to accept them and how to remove them. You may choose to block cookies with your web browser, however, if you do disable these cookies you will not be able to log in to XPLUS Web.

4.Keeping Your Personal Data Safe

4.1 End-to-End Encrypted Data

Your messages, media and files from secret chats , as well as the contents of your calls and the data you store in your XPLUS Passport are processed only on your device and on the device of your recipient. Before this data reaches our servers, it is encrypted with a key known only to you and the recipient. While XPLUS servers will handle this end-to-end encrypted data to deliver it to the recipient – or store it in the case of XPLUS Passport data, we have no ways of deciphering the actual information. In this case, we neither store nor process your personal data, rather we store and process random sequences of symbols that have no meaning without the keys which we don’t have.

4.2 Retention

Unless stated otherwise in this Privacy Policy, the personal data that you provide us will only be stored for as long as it is necessary for us to fulfill our obligations in respect of the provision of the Services.

5.Processing Your Personal Data

5.1 Our Services

XPLUS is a cloud service. We will process your data to deliver your cloud chat history, including messages, media and files, to any devices of your choosing without a need for you to use third-party backups or cloud storage.

5.2 Safety and Security

To improve the security of your account, as well as to prevent spam, abuse, and other violations of our Terms of Service, XPLUS may collect metadata such as your IP address, devices and XPLUS apps you've used, history of username changes, etc. If collected, this metadata can be kept for 12 months maximum.

5.3 Spam and Abuse

To prevent phishing, spam and other kinds of abuse and violations of XPLUS’s Terms of Service, our moderators may check messages that were reported to them by their recipients. If a spam report on a message you sent is confirmed by our moderators, your account may be limited from contacting strangers – temporarily or permanently. You can contact info@xplus.com.. In case of more serious violations, your account may be banned. We may also use automated algorithms to analyze messages in cloud chats to stop spam and phishing.

5.4 Advanced features

We may use some aggregated data about how you use XPLUS to build useful features. For example, when you open the Search menu, XPLUS displays the people you are more likely to message in a box at the top of the screen. To do this, we calculate a rating that shows which people you message frequently. A similar rating is calculated for inline bots so that the app can suggest the bots you are most likely to use in the attachment menu (or when you start a new message with “@”). To turn this feature off and delete the relevant data, go to Settings > Privacy & Security > Data Settings and disable “Suggest Frequent Contacts”.

5.5 No Ads Based on User Data

Unlike other services, we don't use your data for ad targeting or other commercial purposes. XPLUS only stores the information it needs to function as a secure and feature-rich cloud service.
XPLUS offers a tool for advertisers to promote their messages in public one-to-many channels, but these sponsored messages are based solely on the topic of the public channels in which they are shown. No user data is mined or analyzed to display ads or sponsored messages.

6.Who Your Personal Data May Be Shared With

6.1 Other XPLUS Users

Note that by entering into the Terms of Service and choosing to communicate with such other users of XPLUS, you are instructing us to transfer your personal data, on your behalf, to those users in accordance with this Privacy Policy. We employ all appropriate technical and organizational measures (including encryption of your personal data) to ensure a level of security for your personal data that is appropriate to the risk.

6.2 Your Rights

Under applicable data protection legislation, in certain circumstances, you have rights concerning your personal data. You have a right to: (1) request a copy of all your personal data that we store and to transmit that copy to another data controller; (2) delete or amend your personal data; (3) restrict, or object to, the processing of your personal data; (4) correct any inaccurate or incomplete personal data we hold on you.

6.3 Data Settings

You can control how your data is used (e.g., delete synced contacts) in Settings > Privacy & Security > Data Settings (using one of our mobile apps).