Clonerix Privacy Policy

Your privacy matters to us. This Privacy Policy explains exactly what information Clonerix collects when you visit our marketing site or use our application, what we do with that information, who we share it with, how long we keep it, and what rights you have over your personal data. We have written this document to be readable by a normal human being, not just lawyers.

Introduction

This Privacy Policy applies to the Clonerix website located at vt.visionclass.shop, the Clonerix web application accessible at dash.vt.visionclass.shop, the Clonerix Help Center at help.vt.visionclass.shop, and all associated subdomains, APIs, and services operated by or on behalf of Clonerix. Collectively we refer to all of these as the "Service."

By accessing or using the Service, you acknowledge that you have read, understood, and agreed to the collection, use, and disclosure practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Service immediately.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you either by posting a prominent notice on the Service or by sending an email to the address associated with your account. Your continued use of the Service after the effective date of a revised policy constitutes acceptance of the changes.

Clonerix is the controller of the personal data described in this policy. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices generally, our contact details are at the bottom of this page.

Information We Collect

We collect different categories of information depending on how you interact with the Service. We do not collect more data than we reasonably need to operate, improve, and secure the product.

Account and registration data. When you create a Clonerix account, we collect your email address and a password hash. We never store your password in plaintext. If you authenticate using a third-party identity provider such as Google or GitHub, we receive only the minimal profile information necessary to create and associate your account, which typically includes your email address, display name, and profile picture URL.

Billing and payment data. If you upgrade to a paid plan, our payment processor collects and processes your full payment card or banking details. We receive and store only limited payment metadata on our own systems: a payment token, the last four digits of the card, the card expiration date, and the billing name and email address. Full card numbers, CVC codes, and bank account credentials never touch Clonerix servers.

Usage and application data. When you are signed in to the Clonerix application, we collect information about how you interact with the product: which pages you visit, which clones you create, which features you use, error and crash log data, performance metrics, and clickstream activity. We use this information to operate, secure, debug, and improve the Service.

Project content data. Any URLs you paste into the clone interface, any projects you create, any text or imagery you upload or edit within projects, and any exported files you generate using the Service are stored as part of your account workspace. We consider this content yours and we do not access it for any purpose other than providing the Service to you, unless required by law.

Marketing site analytics data. When you visit the public marketing pages of the Service, we automatically collect certain standard information from your browser and device. This typically includes your IP address, browser user agent, referring URL, exit URL, pages viewed within the session, approximate geographic location derived from IP address, and device type. We collect this information for aggregate analytics purposes and for security monitoring.

Communications with us. When you email our support team, submit a bug report, or otherwise correspond with us, we retain the content of the communication and our response in order to provide you with support, track issues, and improve the Service over time.

How We Use Your Information

We use the information we collect for a focused set of specific, legitimate business purposes. We do not sell your personal data to third parties for any reason. Ever.

Provision of the Service. The primary use of your data is to operate the Clonerix product, authenticate your account, render your projects, run clone jobs, publish cloned sites, handle billing and invoicing, and generally deliver the functionality you signed up for.

Product improvement and development. Aggregated, de-identified usage data helps us understand which parts of the product are working well and which parts need more investment. We look at feature adoption, performance bottlenecks, common error paths, and workflow patterns to prioritize engineering work.

Security, fraud prevention, and compliance. We process data to detect and prevent abusive, fraudulent, or illegal activity on the platform, to enforce our Terms of Service and Responsible Use Policy, to respond to legal process from competent authorities, and to protect the rights, property, and safety of Clonerix, our users, and the public.

Customer support. We use account and communication data to respond to support tickets, investigate bug reports, answer billing questions, and provide general assistance to users of the Service.

Transactional communications. We send service-related emails when necessary to inform you about account changes, billing receipts, plan renewals, scheduled maintenance, security incidents, or material changes to our terms or policies. You cannot opt out of these essential transactional communications while you hold an active account.

Marketing communications. If you have explicitly opted in to receive marketing communications from us, we will occasionally send emails about new product features, updates, educational content, promotions, and company news. You can unsubscribe from marketing emails at any time by following the unsubscribe link included in every message.

Sharing and Disclosure

We share your personal information with a very small number of third parties, and only when such sharing is necessary for the operation of the Service or required by law.

Service providers and subprocessors. We engage carefully vetted third-party service providers to perform specific functions on our behalf. Current categories of subprocessors include cloud infrastructure providers, payment processors, email delivery services, analytics providers, error monitoring tools, customer support platforms, and hosting providers. All subprocessors are contractually required to protect your personal data and may only process it on our documented instructions.

Legal requirements and law enforcement. We may disclose personal information if we have a good-faith belief that disclosure is required by applicable law, regulation, legal process, or enforceable governmental request. We attempt to give users reasonable advance notice of any such disclosure where legally permitted and practically feasible.

Protection of rights and safety. We may also disclose information when we believe disclosure is appropriate to protect our rights, property, or safety, or the rights, property, or safety of our users or members of the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.

Business transfers. In the event of a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, or sale of all or a portion of Clonerix assets, your personal information may be transferred as part of that transaction. We will use reasonable efforts to notify you before your personal information becomes subject to a materially different privacy policy.

With your explicit consent. In any other situation not already described above, we will ask for your explicit consent before sharing your personal information with a third party.

Security Measures

We treat the security of your personal information with appropriate seriousness. While no method of transmission over the internet or electronic storage is one hundred percent secure, we implement a layered set of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, alteration, disclosure, or destruction.

All data transmitted between your browser and the Service is encrypted in transit using Transport Layer Security (TLS) 1.3. Sensitive personal data at rest is encrypted using AES-256, a modern industry-standard symmetric encryption algorithm.

Access to production systems is limited to a small number of named personnel on a strict need-to-know basis, enforced using multi-factor authentication, single sign-on, and role-based access controls. All access to production data is logged and audited on a regular basis.

We run periodic vulnerability scans, quarterly third-party penetration tests of core systems, and annual security reviews of our full stack. Security incidents that create a significant risk of harm to users are disclosed to affected users and relevant regulators in accordance with applicable law and within the timeframes specified by regulation.

Account security is a shared responsibility. We strongly recommend that every Clonerix account use a unique, high-entropy password and enable any available multi-factor authentication options. You are responsible for maintaining the confidentiality of your own credentials.

Data Retention

We retain personal information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, and reporting requirements. Different categories of data have different retention periods.

Account data is retained for the duration of your active account. If you close your account, we schedule account data and project content for deletion within thirty days, with residual backup copies purged within one hundred and eighty days, subject to legal exceptions described below.

Billing records and transaction history are retained for the longer of seven years or as required by applicable tax and accounting law. This is a legal requirement and we cannot shorten this period.

Marketing site access logs and de-identified analytics data are retained for a rolling twenty-four month period for trend analysis, after which they are either fully anonymized or purged entirely.

Support communications and enforcement records are retained for a minimum of three years from the date of closure of the ticket or enforcement action to allow for follow-up and pattern analysis.

Notwithstanding the above, we may retain specific data for longer periods if and to the extent that we are legally required to do so, or if we have a good-faith belief that retention is reasonably necessary to resolve disputes, enforce our agreements, or comply with legal process served on us.

Your Rights and Choices

Depending on your jurisdiction, you may have a number of statutory rights in relation to your personal data. We respect all applicable rights and will respond to valid requests within the timeframes required by law.

Right of access. You may request a copy of the personal information we hold about you, in a structured, commonly used and machine-readable format where applicable.

Right of rectification. You may request that we correct any inaccurate or incomplete personal information we hold about you. You can update most core account information directly in the account settings interface.

Right of erasure. You may request that we delete your personal information, subject to certain legal exceptions where we are required to retain data. In many cases, closing your account via the settings interface achieves this automatically.

Right of restriction. In certain circumstances, you may request that we restrict processing of your personal data. For example, where you contest the accuracy of the data, or where our processing is unlawful but you oppose erasure.

Right of portability. Where we process personal data you have provided to us on the basis of consent or contract, you may request that we transfer that data in a machine-readable format to another controller, where technically feasible.

Right to object. You may object to processing of your personal data based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Right to withdraw consent. Where processing is based on your explicit consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of these rights, please contact us using the information at the bottom of this page. We may require reasonable verification of your identity before fulfilling a request to ensure we are disclosing information to the correct person.

Cookies and Tracking

Cookies are small text files placed on your device by websites you visit. Like most modern web services, Clonerix uses cookies and similar technologies for a variety of functional and analytical purposes.

Essential cookies. These cookies are strictly necessary for the operation of the Service. They handle session management, authentication, security, and load-balancing functions. The Service would not work correctly without these cookies, and they cannot be disabled in our settings interface.

Preference cookies. These cookies store choices you make inside the application, such as editor state, theme preference, last visited project, and interface layout preferences. They are designed to make your next visit more convenient.

Analytics cookies. These cookies help us understand how visitors interact with our marketing site and application, so we can improve the product over time. We primarily use first-party analytics and do not share raw analytics data with third-party advertising networks.

Most web browsers allow you to control cookies through their own settings menus. You can block cookies entirely, delete existing cookies, or configure alerts before new cookies are placed on your device. Please note that disabling essential cookies may prevent parts of the Service from functioning correctly.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, our data practices generally, or if you wish to exercise any of the statutory rights described above, please contact our data protection and privacy team by email at privacy@vt.visionclass.shop.

You can also reach us by postal mail at our principal place of business. Please see the footer of our website for the most up-to-date physical address.

We will acknowledge receipt of privacy-related inquiries and requests within five business days and provide a substantive response within thirty calendar days. In complex cases we may extend the response period by a further sixty days, in which case we will notify you of the extension and the reason for the delay within the initial thirty-day window.

If you are located in the European Economic Area and believe our processing of your personal data does not comply with applicable data protection law, you have the right to lodge a complaint with your local supervisory authority at any time.

Effective date: January 1, 2026