At xShellz (www.xshellz.com), we recognize that your privacy is a fundamental right. We are committed to ensuring that any personal information collected is handled with the highest level of integrity, transparency, and security. This policy outlines our data practices, our legal basis for processing information, and your rights regarding the data you entrust to our platform.

1. Information Collection and Usage

• Personally Identifiable Information (PII): We collect personal information when you register an account, log in to our xPanel, or subscribe to our services. This includes your name, email address, and billing details. This data is kept only for as long as is strictly necessary to provide the services you have requested or to comply with legal record-keeping obligations.
• Voluntary Disclosure: You may browse our public-facing website without disclosing any personal information. We do not automatically record personal data that could identify you unless you choose to provide it by creating an account, participating in our community forums, or contacting our support team.
• Automated Metadata Collection: To maintain the stability, performance, and security of our shell environment, our servers automatically record certain non-personal technical information in system log files. This includes:
  • Browser fingerprints, user-agent strings, and operating system versions.
  • Detailed timestamps, including the date, time, and duration of your session.
  • Your Internet Protocol (IP) address and approximate geographic location (ISP-level).
  • Referral headers (the specific URL that directed you to xShellz).

2. Third-Party Data Processing and Partnerships

• Email Verification & Fraud Prevention: To prevent platform abuse, automated signups, and to maintain the reputation of our IP ranges, we utilize third-party validation services during the registration process. For custom or private domains, we share only the domain suffix (e.g., @example.com) to verify validity. Standard providers like Google (Gmail), Yahoo, and Microsoft (Outlook/MSN) are exempt from these specific validation checks.
• Transactional Communication: We employ specialized third-party mailing providers to ensure the reliable delivery of system alerts, password resets, and billing notifications. Your full email address is shared with these providers strictly for delivery purposes and may be logged in their secure systems to monitor delivery success, bounce rates, and spam reports.
• Financial Transactions: As detailed in our Billing Policy, all financial transactions are processed via 2checkout. xShellz does not store, log, or process your sensitive credit card numbers or PayPal credentials on our local infrastructure. All payment data is encrypted and handled by the processor.
• Analytical Insights: Our website uses Google Analytics to help us analyze user behavior and site traffic patterns. This tool uses 'cookies' to generate data regarding your interaction with our site. This information is transmitted to and stored by Google. We strictly prohibit the use of analytics tools to track or collect sensitive PII, such as user passwords or private shell commands.

3. Cookies, Tracking, and Session Integrity

• Essential Cookies: We utilize "First-Party" cookies to maintain your session state, authenticate your identity, and ensure you remain logged into the xPanel during your visit. These are strictly necessary for the technical functionality of our service.
• Preference Control: You have the right to decline or clear cookies via your browser settings. However, please be aware that disabling cookies will result in a degraded experience, including an inability to access the xPanel, manage your shells, or complete successful authentication attempts.

4. Data Security and Infrastructure Protection

• Internal Security: We implement robust technical and organizational security protocols to protect against unauthorized access, alteration, disclosure, or destruction of data. This includes encrypted connections (SSL/TLS) and restricted access to database environments.
• Monitoring: We do not attempt to identify individual users or monitor private browsing activities unless required to do so by law or in response to a documented violation of our Terms of Service (e.g., unauthorized network scanning or hosting of malicious content).
• Data Retention: System logs and temporary files are periodically purged. We retain account data for the duration of your active subscription and for a reasonable period thereafter to comply with tax, legal, and auditing requirements.

5. Your Legal Rights

• Access and Rectification: You have the right to request a copy of the personal information we hold about you and to request corrections to any inaccuracies. This can be managed directly through your account settings or by contacting our support team.
• Right to Erasure: Upon request, and subject to legal hold requirements, we will delete your personal data from our active databases. Please note that deleting account data will result in the immediate termination of your shell services.
• International Transfers: By using xShellz, you acknowledge that your data may be processed on servers located outside of your home country. We take all necessary steps to ensure that your data is treated securely and in accordance with this policy regardless of location.
• Children's Privacy: Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a minor has provided us with data, we will take immediate steps to delete such information.

6. Law Enforcement and Legal Disclosures

• xShellz will not sell, rent, or lease your personal information to third parties for marketing purposes. We will only disclose your information to third parties when required to do so by a valid court order, subpoena, or to investigate a direct and malicious breach of our Acceptable Use Policy (e.g., launching DDoS attacks or hosting illegal material).

By continuing to use the xShellz website and services, you hereby consent to the collection, processing, and storage of information as outlined in this Privacy Policy. We reserve the right to update this policy at any time; your continued use of the service constitutes acceptance of those changes.