Privacy Policy

1. Information We Collect

We collect information to provide our diverse range of services. The types of data we collect depend on which services you use:

• Account Information: Name, email address, phone number, and account password. This is collected when you register an account on our platform.
• Domain Registration: Registrant name, address, phone number, and email required for WHOIS data as mandated by ICANN. WHOIS privacy protection is available on eligible TLDs to protect your personal information from public view.
• Hosting & Server Data: Server log files, IP addresses, website traffic data, email metadata, FTP logs, and resource usage statistics collected for security monitoring, billing, and service optimization.
• Messaging & API Usage: WhatsApp message metadata, email sending logs, API request logs, sender and recipient identifiers, and delivery status data. Message content is processed in real-time and not stored permanently unless required for delivery logs.
• UMVA Pay & Crypto Transactions: Cryptocurrency wallet addresses, transaction hashes, payment amounts, and settlement records. We do not store private keys or seed phrases.
• Virtual Card Transactions: Card transaction history, merchant names, transaction amounts, and timestamps. Full card numbers are tokenized and never stored on our servers.
• UMVA AI Prompts & Outputs: AI prompts and generated responses are processed to fulfill your request and are immediately discarded. We do not train on your data or store your conversations.
• UMVA TV Viewing Data: Channel browsing history and watch preferences for service improvement. Individual viewing sessions are not associated with your identity beyond service delivery.
• Lab & SMM Orders: Social media profile URLs, order quantities, and service preferences required to fulfill your social media marketing orders.
• Payment Data: Transaction records, payment method tokens, and billing history. Full credit card numbers are processed by our PCI-compliant payment partners and never stored on our servers.
• Website Usage Data: Pages visited, time spent, referral sources, and interaction data collected through cookies and analytics tools to improve our platform experience.

2. How We Use Your Information

We use your data to deliver, maintain, and improve our services:

• Provision and activate services including hosting accounts, domain registrations, API keys, software licenses, virtual cards, TV subscriptions, and AI credits.
• Process payments, calculate applicable taxes, generate invoices, and manage billing cycles including recurring subscriptions.
• Verify your identity to prevent fraud, unauthorized access, and abusive activity across our platform.
• Communicate important service updates including domain expiry warnings, billing notices, security alerts, and maintenance schedules.
• Provide customer support and respond to your inquiries regarding any of our services.
• Improve our platform through anonymized usage analytics and performance monitoring.
• Comply with legal obligations including ICANN requirements for domain registration and financial record-keeping regulations.
• Process affiliate and referral program commissions and payouts.

3. Information Sharing & Disclosure

We share your information only in the following circumstances:

• Domain Registries & Registrars: Personal data required for domain registration is shared with ICANN-accredited registries and the appropriate registry operator for each TLD.
• Payment Processors: Transaction data is shared with our payment processing partners to facilitate payments via card, cryptocurrency, and bank transfer.
• Software Vendors: License activation data (IP address, server identifier) is shared with original software vendors (cPanel, CloudLinux, etc.) to provision and validate licenses on their licensing servers.
• Service Providers: We engage trusted third-party service providers for infrastructure hosting, CDN services, email delivery, analytics, and customer support tools. These providers are bound by data processing agreements.
• Legal Authorities: If compelled by law, court order, subpoena, or to report and prevent fraud, illegal activity, or violations of our terms of service.

We never sell your personal information to third-party marketers or data brokers.

4. Data Security

We implement comprehensive security measures to protect your data:

• SSL/TLS encryption (TLS 1.3) for all data transmitted between your devices and our services.
• AES-256 encryption for sensitive stored data including API keys, credentials, and personal information.
• Strict access controls with role-based permissions and regular access audits for our infrastructure and support systems.
• DDoS protection via Cloudflare with Web Application Firewall (WAF) for threat mitigation.
• Imunify360 for real-time malware scanning and intrusion detection on hosting platforms.
• Regular automated backups with encrypted storage for data recovery.
• Two-factor authentication (2FA) available for all user accounts.

5. Data Retention

We retain personal data only as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data is retained for the duration of your account activity.
• Closed Accounts: Personal data is deleted or anonymized within 90 days of account closure, subject to legal retention requirements.
• Financial Records: Transaction records and billing data are retained for at least 5 years as required by applicable tax and financial regulations.
• Domain Registration Data: WHOIS data is retained as required by ICANN and individual registry policies, typically for the duration of the domain registration plus a post-expiry period.
• AI Prompts & Outputs: Not stored. Processed in real-time and immediately discarded after the response is delivered.
• Communication Logs: Support ticket correspondence is retained for service quality and dispute resolution purposes.

6. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Deletion: Request deletion of your personal data (Right to be Forgotten), subject to legal retention requirements.
• Right to Data Portability: Request export of your personal data in a machine-readable format.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time.
• Right to Object: Object to the processing of your data for legitimate interests or direct marketing.

To exercise any of these rights, contact us at privacy@umva.net. We will respond to your request within the timeframe required by applicable law.

7. International Data Transfers

Your data may be processed in countries other than your own. Domain registration involves data transfer to registries located in various jurisdictions including the United States (Verisign, ICANN), Europe (EURid), and other regions. We ensure appropriate safeguards, including Standard Contractual Clauses where required, are in place for cross-border data transfers. Our infrastructure providers maintain data centers in North America and Europe.

8. Cookies & Tracking

We use cookies and similar technologies to manage session authentication, remember user preferences, track affiliate referrals, and analyze platform usage. You can control cookies through your browser settings. For full details, please see our Cookie Notice.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. Material changes will be notified via email to the address associated with your account. We encourage you to review this policy periodically.

11. Contact Information

For privacy-related inquiries or to exercise your data rights:
Email: privacy@umva.net
Support: Contact Form