- Karen Wildfoerster
Privacy and Policies
- Karen Wildfoerster
XMission has created this privacy statement in order to demonstrate our firm commitment to privacy. The following discloses our information gathering and dissemination practices.
Personal Information Collection and Use
Most of the information given to XMission in the registration process, or at any other time is for XMission's use only. XMission is the sole owner of this information and we will not sell, share, or rent this information to others. A court order is the only way that this information can be accessed by another party or organization. The one exception to this is the “Online Name” field that's filled out during registration. When someone runs the UNIX “finger” command on an account (e.g., 'finger email@example.com'), it will show this “Online Name”. This will also be displayed on a new customer's default Web page. This is the only information that is made public and you, as a customer, may elect to put anything you'd like (or nothing at all) in this particular field. It can also be modified at any time. XMission does not offer services or sell products to children and does not request or knowingly collect personally identifiable contact information from anyone under the age of 13.
Law Enforcement Guidelines
XMission retains customer website client access logs indefinitely for analytics, but will remove or rotate them upon customer request. We retain server logs for up to 30 days for debugging purposes. XMission honors specific law enforcement requests for preservation; however, we require that law enforcement serve warrants for extraction. Our Tor server has zero log retention.
XMission will hold data for up to six months upon receipt of a specific retention request. If a subsequent warrant for the data is not served in that time, the data will be discarded.
XMission makes a single exception for sharing customer contact information when processing a credit card. Otherwise, no customer data or demographic information is sold or shared without a warrant.
XMission charges $250 per hour for administrative services.
All information logged by our various systems is also used for internal purposes only, and will not be released unless under a court issued warrant with the proper jurisdiction. XMission customers will be notified of all government and law-enforcement requests for their private data, whether done according to U.S. and Utah constitutions with a court issued warrant or improperly without.
Public Forums and Links
XMission makes chat rooms (IRC), forums, message boards, and news groups available to its customers. Please remember that any information that you choose to disclose in these areas becomes public information and you should exercise caution before disclosing your personal information. XMission's customers should also be aware that any information they disclose on their own websites becomes publicly available. XMission is not responsible for any information our customers choose to make available in any of these forums. Also, please note that XMission has links to other sites. We encourage our customers to be aware when they leave our site and to read the privacy statements of each and every Web site that collects personally identifiable information. This privacy statement applies solely to information collected by XMission's Web site.
XMission takes every precaution to protect our customers' information. When customers submit sensitive information via our Web site, your information is protected using the safest and most secure methods available. When our registration or service request forms ask customers to enter sensitive information (such as a credit card number), that information is encrypted and is protected with the best encryption software in the industry for the Web - SSL. While on a secure page, such as our secure credit card payment form, the lock icon on the bottom of Web browsers. While we use SSL encryption to protect sensitive information online, we also do everything in our power to protect user-information off-line. All of our customers' information, not just the sensitive information mentioned above, is restricted in our offices and data center. Only employees who need the information to perform a specific job (for example, our billing clerk or a customer service representative) are granted access to personally identifiable information. Our employees must use a secure shell (ssh) to access this information and must also be allowed access from a specific IP address within the office. Furthermore, ALL employees are kept up-to-date on our security and privacy practices to avoid security breaches through what is called, “social engineering.” Important details and changes are discussed in staff meetings and email memos. Finally, the servers that we store personally identifiable information on are kept in a secure environment, protected by a firewall and kept in a secure room in our data center. If you have any questions about XMission's security, please feel free to contact firstname.lastname@example.org .
Necessary Submission of Information
Personally identifiable consumer information is shared with Authorize.Net, the credit card processing company we use, to the extent it is necessary for them to provide payment processing services.
Correction/Updating Personal Information
If a user's personally identifiable information changes (such as your zip code), or if a user no longer desires our service, we will endeavor to provide a way to correct, update or remove that user's personal data provided to us. This can be done by contacting email@example.com or by calling 801-539-0852. The person changing the information MUST be the contact on the account. Normally, the contact is the person who opened the account or a person who was assigned to the account by the business. To change the information, you must be able to verify that you are, in fact, the contact on the account.
All account contact changes must be completed by the customer using an XMission Contact Addition Form. Customers can request this form from any XMission employee. This form should be completed, printed on the customer's business letterhead, and returned to XMission via FAX, postal mail, or secure email. If sent via email, the digital copy must be in a readable format (e.g. PDF, JPG) and emailed to firstname.lastname@example.org An XMission staff member will send a confirmation email to the customer to verify that the email address is valid for the company. When the customer responds to that confirmation email, he or she can be added as a contact.
Notification of Changes
If you have any questions about this privacy statement, the practices of this site, or your dealings with XMission, you can contact XMission's support staff.