Privacy Policy

1. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on Personal Data, whether or not by automated means (e.g., collection, storage, use, disclosure).
• "Controller" means the entity that determines the purposes and means of Processing Personal Data; for the purposes of this policy, Extreme Solution is the Controller.

2. Personal Data We Collect

We collect the following categories of Personal Data:

• Account & Contact Data: name, company name, role/title, email address, phone number, postal address.
• Subscription & Billing Data: Google Cloud or Google Workspace license details, payment method, VAT/tax identifiers, transaction history.
• Usage & Log Data: IP address, browser type, device identifiers, timestamps, pages viewed, and interactions with our Services.
• Support & Communications Data: content of emails, chat messages, or other communications with us, and metadata related to those communications.
• Marketing Preferences: your choices regarding newsletters, event invitations, and other marketing communications.

We do not intentionally collect sensitive Personal Data (e.g., health or biometric data) unless required by law and with your explicit consent.

3. How We Collect Personal Data

• Directly from you when you create an account, submit an Order, complete a form, or communicate with us.
• Automatically through cookies and similar technologies when you interact with our websites or dashboards.
• From third‑party sources such as Google (for license provisioning) or payment processors, as permitted by law.

4. Legal Bases for Processing (EEA/UK Users)

We rely on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract Performance: Processing necessary to provide the Services you requested.
• Legitimate Interests: Improving and securing our Services, preventing fraud, and contacting you about similar products (you may opt out).
• Legal Obligation: Compliance with accounting, tax, and other regulatory requirements.
• Consent: Sending marketing emails where consent is required (you may withdraw consent at any time).

5. How We Use Personal Data

We use your Personal Data to:

• Provide, operate, and maintain the Services, including license management and billing.
• Manage your account, respond to inquiries, and provide customer support.
• Send transactional messages (e.g., invoices, policy updates, service notices).
• Improve and enhance the Services, perform analytics, and develop new features.
• Detect, investigate, and prevent security incidents and fraudulent activities.
• Comply with legal obligations and enforce our contracts.

6. How We Share Personal Data

We do not sell or rent your Personal Data. We share it only as described below:

• Service Providers: Cloud hosting, payment processors, email delivery, and analytics providers who act on our instructions and are bound by confidentiality.
• Google: To provision and manage Google Cloud and Google Workspace licenses in our capacity as an authorized reseller.
• Legal & Compliance: When required by law, court order, or to protect our rights, property, or safety, or that of our users or others.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, subject to confidentiality.

7. International Data Transfers

Your Personal Data may be transferred to and processed in countries other than your own. We implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to ensure an adequate level of protection.

8. Data Security

• Encryption in transit (TLS) and at rest for sensitive data.
• Role‑based access controls and multi‑factor authentication for systems containing Personal Data.
• Regular security assessments, vulnerability scanning, and incident‑response procedures.

9. Data Retention

We retain Personal Data only as long as necessary for the purposes described in this policy, including:

• Active Account: for the duration of your account.
• Legal & Compliance: to meet legal, tax, and regulatory requirements (typically up to 7 years after account closure).
• Dispute Resolution: to resolve disputes or enforce agreements.

Data no longer required is securely deleted or anonymized.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access your Personal Data and receive a copy.
• Correct inaccurate or incomplete Personal Data.
• Delete (erase) your Personal Data.
• Restrict or object to the Processing of your Personal Data.
• Receive your Personal Data in a portable format (data portability).
• Withdraw consent where Processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise your rights, contact us using the details in Section 14. We will respond within the time period required by applicable law.

11. Cookies & Tracking Technologies

We use cookies and similar technologies to recognize your browser, improve site performance, and collect usage statistics. You can manage cookie preferences through your browser settings. For more details, see our Cookie Notice.

12. Children's Privacy

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will post the updated version on our website and, if the changes are material, provide notice (e.g., email) at least thirty (30) days before they take effect.

14. Contact Us

If you have questions, requests, or concerns regarding privacy, contact us at: