Privacy Policy

Version 1.3

XeroBank develops security-related software and provides services that aim to protect your privacy. We are committed to privacy and attach very great importance to protecting your privacy, including your privacy when visiting the XeroBank web site or using XeroBank software and services. Any use of these services or accessing of this web site signifies that you agree to XeroBank's Privacy Policy current at that time.

Personally Identifying Information

You may use most services and access most areas of this web site without registration and without providing any personal information about yourself. Personal information means any information that may be used to identify an individual, including, but not limited to, a first and last name, a home or work address, credit card credentials, email address or other contact information. However, for some personalized services, e.g. mailing lists or forums, you may be asked to provide us with the minimal personal information we need in order to provide you with the service. XeroBank itself, in compliance with applicable laws, only uses personal information, as far as collected or processed by XeroBank. XeroBank strives to comply with all applicable laws around the globe that are designed to protect your privacy.

Disclosure to Third Parties

XeroBank does not forward, sell, rent, loan, trade, or lease any personal information collected at our web site or via use of XeroBank software and services, including email lists, to any third party. This may not be effective in the event that XeroBank is legally forced to surrender the data. It is therefore our strict policy to collect only a minimal amount of personal information required to provide you with our services.

Requests from Law Enforcement

XeroBank has built its privacy networks to have client account data separated, segregated, and encrypted on multiple servers in multiple countries so no single party can compromise clients and their data. Most internal account transaction details are not mathematically reversible due to one-way operations. Subsequently, XeroBank does not have specific client data to share with network providers, legal authorities, or law enforcement of any jurisdiction. In the case that such authorities can validate claims of violation of XeroBank's Terms of Service, we may attempt to terminate the client account from which the abuse originated. If XeroBank is served with court orders of all applicable jurisdictions for all specific servers, we may be forced to attempt to trace live data connections. Violation of XeroBank's Terms of Service invalidates the privacy policy and enables XeroBank's prerogative to log offending traffic. XeroBank will not aid or protect criminals. If fraud or hacking is detected within XeroBank's networks, we will proactively notify and assist authorities with tracking and identification of the criminals involved. XeroBank is not a service to mask abusive or threatening activities; thieves and criminals beware.

Updates and Disclosure

You may request disclosure or deletion of your personal information from us at any time. In the event that any of your personal information has changed, for instance, if you have a new address, you are encouraged to update it yourself via the appropriate web interfaces or via contacting XeroBank and informing XeroBank about the changes.

Data Protection

XeroBank uses its best efforts to protect personal information and all related data against any unauthorized use or loss. This includes, but is not limited to, utilization of appropriate encryption technologies to securely transfer personal information (e.g. credit card credentials) between your client and our payment processors. Such personal information is never stored in plain text format, and internal transfers of such data are always encrypted.

Server Distribution

XeroBank servers are located in many countries. Servers that are used to pass anonymized client traffic may be securely hosted from any country, because they do not contain sensitive information and will cease to function if tampered with. Servers holding potentially sensitive information, such as client settings and data, are encrypted and secured against compromise by theft.

Email Anonymity

XeroBank email servers anonymize all outgoing email by rewriting email headers to originate from within the xerobank.com and xeromail.com servers. Access to XeroBank's mail servers can only be completed by encrypted connections. All email is stored outside the US and UK on encrypted servers with backup systems in place.

Security Audits

XeroBank employs security auditors to monitor and examine our networks, nodes, and procedures to ensure that no malicious or surreptitious activity or technology, other than those authorized by XeroBank, are used for monitoring network activity.

User Activity Logs

XeroBank does not log client activities or IP addresses when using the XeroBank anonymizing network, unless required by law, or unless an automated process has flagged traffic as being potentially malicious; however we may capture non-sensitive statistical data, used only to analyze network performance or locate problems. This data may be used to generate public traffic reports on XeroBank network health. In the event that suspected malicious traffic is captured, it will be reviewed by a human auditor. If the data is found to be non-malicious, the logged information will be securely wiped. In the situation that XeroBank is presented with court orders, to all involved XeroBank associates in their respective jurisdictions, XeroBank may be legally compelled to attempt to monitor that specific client's account, or trace the client's connection, but no others'. No "fishing expeditions" will be allowed under any circumstances.

Technical Logs

XeroBank does not collect IP addresses but may collect data that is not Personally Identifying Information when accessing XeroBank services and web sites. These technical logs are not personally identifiable, and XeroBank makes no attempt to link them with the individuals that actually use the service or web site. The log files are collected for internal system analysis and benchmarking purposes only and are being deleted after a maximum of 90 days. XeroBank may only store summarized access statistics, not containing any IP addresses or other personal information, unless this information is associated with a suspected violation of XeroBank's Terms of Service. XeroBank may employ Google Analytics in its web site in order to collect demographic data about visitors. XeroBank filters all Google Analytics data to replace visitor IP addresses with '0.0.0.0'.

Web Cookies

XeroBank does not use web cookies for user tracking or for reading data from your computer. XeroBank may, however, use cookies to enable persistent user sessions, such as through a user control panel requiring a login, or may offer diagnostic techniques for helping users determine the security of their browser by attempting to use cookies.

No Spyware

XeroBank does not install any kind of spyware, adware, or malware with or as part of any of its software products. All XeroBank software products are free from any kind of such spyware, adware, or malware.

Children's Privacy

XeroBank services are not designed to attract children. Accordingly, we do not intend to collect personal information from anyone we know to be under the age of consent.

Links to Other Web Sites

The web site may contain links to other web sites. XeroBank is not responsible for the content and the privacy practices of these web sites.

Changes

XeroBank reserves the right to change this privacy policy at any time. In such cases, we will take every reasonable step to ensure that these changes are brought to your attention by posting all changes prominently on the XeroBank web site for a reasonable period of time, before the new privacy policy becomes effective.

Contact

If you have any questions or comments regarding this privacy policy, please do not hesitate to contact XeroBank. This privacy policy has been developed based on the guidelines for online privacy policies, published by the Online Privacy Alliance.