Data Protection
Privacy Policy
At EnNube.com, we are committed to protecting your personal information and responsible use of your data.
Last updated: October 2025
Our Privacy Commitment
We may use the information we collect to occasionally send you information about our products and services that may be of interest to you.
We do not sell, trade, or transfer your personally identifiable information to third parties without your consent.
Your data is protected with the strictest security measures in the industry.
Information We Collect
- Account data: name, email address, contact information, and access credentials
- Billing information: payment data, billing address, and transaction details
- Usage data: information about how you use our services, including activity logs and performance metrics
- Technical data: IP address, browser type, operating system, and device configuration
- Support information: communications with our customer support team and support tickets
- Browsing behavior: pages visited, time spent, clicks, and interaction patterns
- Username and preferences: customized settings and account preferences
Data Collection Sources
- Direct information: data you provide directly when creating an account, completing forms, or contacting us
- Social media: public profile information when you choose to log in or connect your social media accounts
- Third-party services: data from payment platforms, analytics providers, and other integrated services
- Business partners: information shared by our authorized business partners when you interact with joint services
- Publicly available sources: information from public records, business directories, and commercial databases
- Cookies and similar technologies: data collected automatically through web tracking technologies
How We Use Your Information
- Service provision: provide, maintain, and improve our cloud infrastructure services
- Communication: send you account notifications, service updates, and occasionally information about relevant products
- Billing and payments: process transactions and generate invoices for contracted services
- Technical support: respond to your inquiries and resolve technical issues
- Continuous improvement: analyze service usage to optimize performance and develop new features
- Personalization: tailor your experience and recommendations based on your preferences and usage behavior
- Research and development: improve our existing products, services, and technologies
- Security: detect, prevent, and respond to fraudulent, security, or technical activities
- Legal compliance: comply with applicable legal, regulatory, and government requests
Communications and Marketing
- With your consent, we may send you occasional information about products, services, and updates we consider relevant to your business
- Promotional communications: newsletters, product announcements, and special offers tailored to your interests
- Targeted advertising: personalized ads based on your browsing behavior and preferences
- You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails
- You will always receive essential communications related to your account and contracted services, regardless of your marketing preferences
- We respect your inbox and keep our communications relevant and limited in frequency
Third-Party Services and Links
- Our website may contain links to third-party websites that are not under our control or operated by us
- We are not responsible for the content, privacy policies, or practices of third-party websites
- We recommend reviewing the privacy policies of any third-party websites you visit
- We integrate trusted third-party services (payment processors, analytics, support) that may collect your information according to their own policies
- These service providers are contractually obligated to protect your information and may only use it for the specific purposes we assign them
- We have no control over the privacy practices of social media platforms when you share content or interact with our social pages
Children's Privacy
- Our services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13
- If a parent or guardian discovers that their child has provided us with personal information without their consent, they should contact us immediately
- If we become aware that we have collected personal information from a child under 13 without parental consent verification, we will take steps to remove that information from our servers
- For users between 13 and 18 years old, we require consent from a parent or legal guardian before using our services
- We comply with the Children's Online Privacy Protection Act (COPPA) and similar regulations in other jurisdictions
Sharing Information with Third Parties
- We do not sell your personal information: We never sell, trade, or transfer your personally identifiable information to third parties for commercial purposes
- Service providers: We may share information with trusted service providers who help us operate our business (payment processors, analytics services), subject to strict confidentiality agreements
- Legal compliance: We may disclose information when required by law, court order, or legal process
- Rights protection: We may share information to protect our rights, property, or safety, as well as those of our users
- Business transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction
🔒 SEGURIDAD
Data Security
- Robust encryption: We use enterprise-grade SSL/TLS encryption to protect sensitive data transmission in transit
- Encryption at rest: Data stored in our systems is encrypted using advanced encryption standards (AES-256)
- Access controls: We implement strict role-based access controls and mandatory multi-factor authentication to protect your accounts
- Secure global infrastructure: Our globally distributed data centers have international security certifications (ISO 27001, SOC 2) and 24/7/365 monitoring
- Regular security audits: We conduct periodic security audits, penetration testing, and vulnerability assessments by independent third parties
- Continuous staff training: Our team receives mandatory training in security best practices, privacy, and sensitive data handling
- Rapid incident response: We have established procedures and a dedicated team to respond quickly to any security incident or data breach
- Physical security: Biometric access controls, continuous surveillance, and intrusion prevention systems at all our facilities
- Patch management: We apply security updates and critical patches promptly to protect against known vulnerabilities
Global Data Infrastructure
- We operate a globally distributed data infrastructure with data centers located in multiple geographic regions
- Your data may be processed and stored on servers located in different countries to provide efficient services and redundancy
- We implement appropriate technical and organizational measures to protect your data regardless of its geographic location
- We comply with applicable data protection laws in all jurisdictions where we operate or where our customers are located
- For European users, we provide adequate safeguards for international data transfers as required by GDPR
- We maintain geographic redundancy to ensure data availability and recovery in case of disasters
⚖️ SUS DERECHOS
Your Data Rights
EU Citizens' Rights under GDPR
1
Right of access: Obtain confirmation of whether we process your personal data and access a copy of such data
2
Right of rectification: Request correction of inaccurate or incomplete personal data
3
Right to erasure: Request deletion of your personal data under certain circumstances
4
Right to restriction of processing: Request that we limit processing of your personal data under specific conditions
5
Right to data portability: Receive your personal data in a structured, machine-readable format and transmit it to another controller
6
Right to object: Object to processing of your personal data for direct marketing purposes or on legitimate grounds
7
Rights related to automated decisions: Not be subject to decisions based solely on automated processing, including profiling
8
Right to lodge a complaint: File a complaint with a supervisory data protection authority if you believe we have violated your rights under GDPR
✓ CUMPLIMIENTO
Regulatory Compliance
GDPR (EU General Data Protection Regulation)
We fully comply with GDPR to protect data of European Union citizens. We guarantee all rights under GDPR: right of access, rectification, erasure ('right to be forgotten'), restriction of processing, data portability, objection to processing, and rights related to automated decisions and profiling. If you are in the EU/EEA, you may exercise these rights by contacting us. We have appointed an EU representative as required by GDPR.
CCPA/CalOPPA (California Privacy Rights)
We fully respect the privacy rights of California residents under CCPA and CalOPPA. California residents have the right to: (1) Know what personal information we collect, use, disclose, and sell; (2) Request deletion of their personal information; (3) Opt out of selling personal information (though we do not sell personal information); (4) Not be discriminated against for exercising their privacy rights. We also provide a 'Do Not Track' policy and disclose how we respond to Do Not Track browser signals. To exercise your rights under CCPA, contact us at [email protected].
ISO/IEC 27001
Our information security management systems comply with and are certified under the ISO/IEC 27001 international standard, demonstrating our commitment to security best practices.
SOC 2 Type II
Our security, availability, processing integrity, confidentiality, and privacy controls are regularly audited and comply with SOC 2 Type II criteria, verified by independent auditors.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy.
Active account data is retained while your account remains active or as necessary to provide you with services.
Billing and transaction data is retained in accordance with applicable legal and tax requirements (generally 5-7 years).
Technical support data is retained for a reasonable period to improve our services and resolve recurring issues.
When you request account deletion, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law.
Changes to This Privacy Policy
- We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or other factors
- When we make material changes to this policy, we will notify you prominently, such as by posting a notice on our website or sending you an email notification
- We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information
- Your continued use of our services after changes to this policy are posted constitutes your acceptance of such changes
- The 'Last updated' date at the top of this policy indicates when it was most recently revised
- If you do not agree with the changes, you should stop using our services and contact us to close your account
Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of the state of New Jersey, United States, without giving effect to any principles of conflicts of law
Any dispute related to this policy will be subject to the exclusive jurisdiction of courts located in Mercer County, New Jersey
However, we recognize and comply with applicable data protection laws in all jurisdictions where we operate or where our customers are located
For users in the European Union, we also comply with GDPR and recognize your right to file complaints with your local data protection authority