隐私政策

最后更新时间: January 1, 2025

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Username
• Password (encrypted)

Cloud Provider Credentials (OBox MyCloud only)

• API keys and access tokens for cloud providers (DigitalOcean, AWS, etc.)
• These credentials are stored securely on your device using iOS Keychain
• We do NOT have access to or store these credentials on our servers

Payment Information

• For premium features, payment processing is handled by Apple's App Store
• We do not collect or store credit card information
• Purchase receipts are managed by Apple

Technical Information

• Device type and operating system version
• App version and crash reports (for debugging purposes)
• We do NOT collect browsing history or VPN usage data

2. How We Use Your Information

We use the collected information to:

• Provide and maintain the Application services
• Process your subscription and premium features
• Send service-related notifications
• Improve app functionality and user experience
• Provide customer support

3. Data Storage and Security

Local Storage

• Cloud provider API credentials (OBox MyCloud) are stored locally on your device using iOS Keychain
• VPN configuration data (OTun-M) is stored locally on your device
• We employ industry-standard encryption to protect your data

Server Storage

• Only basic account information (email, username) is stored on our servers
• We use secure, encrypted connections (HTTPS/TLS)
• No VPN connection data or logs are stored on our servers

5. Third-Party Services

Cloud Providers (OBox MyCloud)

• The Application connects to DigitalOcean, AWS, and other cloud providers using YOUR API credentials
• We do not share your credentials with any third parties
• Please refer to your cloud provider's privacy policy for their data practices

Analytics

• We may use anonymous analytics to understand app usage patterns
• No personally identifiable information is included in analytics data
• VPN connection data is never included in analytics

6. Data Sharing

We do NOT sell, trade, or rent your personal information to third parties.

We may share information only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect our rights, privacy, safety, or property

Important: Even under legal compulsion, we cannot provide VPN traffic data or browsing history because we do not collect or store this information.

7. Your Rights and Choices

You have the right to:

• Access your personal information
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Opt-out of promotional communications

To exercise these rights, contact us at service@situstechnologies.com

8. Children's Privacy

Our Applications are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information, please contact us immediately.

You must be at least 16 years of age (or the age of legal consent in your country) to use these Applications.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

Note: When using OTun-M, your VPN traffic is routed through your self-hosted server, which you control and deploy in a location of your choice.

10. Data Retention

We retain your personal information only for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes

When you delete your account, we will delete or anonymize your personal information within 30 days.

Local Data: Configuration data stored locally on your device (VPN credentials, server addresses, etc.) remains on your device until you manually delete it or uninstall the application.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new Privacy Policy in the Applications
• Sending an email notification (if you have an account)
• Updating the "Last Updated" date

Your continued use of the Applications after changes constitutes acceptance of the updated Privacy Policy.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt-out of the sale of personal information

Note: We do not sell personal information, and we do not collect VPN usage data.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including:

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing

Legal Basis for Processing: We process your personal data based on your consent, contract performance, and our legitimate interests in providing and improving our services.

14. Security Measures

We implement comprehensive security measures to protect your data:

• Encryption: All data transmission uses TLS/SSL encryption
• iOS Keychain: Sensitive credentials are stored using Apple's secure Keychain
• End-to-End Encryption: VPN traffic is encrypted from your device to your self-hosted server
• No Central Storage: VPN configuration and credentials are never stored on our servers
• Regular Security Audits: We regularly review and update our security practices

16. Your Consent

By using the Applications, you consent to the collection and use of information as described in this Privacy Policy. For OTun-M specifically, by connecting to your self-hosted VPN server, you acknowledge that your network traffic will be routed through your own infrastructure, which you control independently.

This privacy policy is effective as of January 1, 2025 and applies to both OBox MyCloud and OTun-M applications.