Privacy Policy

At Citrus Cloud Communications, we are committed to ensuring the confidentiality, integrity, and availability of the personal data of our clients and users. This Privacy Policy outlines, in a technical and transparent manner, how we manage the information collected through our IT infrastructure, cloud services, and communication platforms.

1. Information Asset Collection

We collect data strictly necessary for the operation of our telecommunications services, IT auditing, and technical support. This data collection is categorized as follows:

• Corporate Identification: Full names, professional titles, organizational roles, and contact information of legal representatives or technical liaisons.
• Network & Technical Metadata: Source/destination IP addresses, session duration, bandwidth utilization, MAC addresses, and device configuration parameters required for IT service provisioning and network security.
• Communication Logs: Metadatos generated by telecommunication traffic, including timestamps and routing information, excluding the content of private communications unless required by specific service features.
• Commercial & Billing Data: Fiscal information, billing addresses, and transaction history necessary for administrative and legal compliance.

2. Purpose and Data Processing

The processing of personal data by Citrus Cloud is governed by principles of legality, transparency, and purpose limitation. Information is used exclusively for:

• The provisioning, configuration, and maintenance of cloud-based network and unified communication services.
• Proactive monitoring of infrastructure to ensure 99.9% service availability and cybersecurity threat mitigation.
• Technical support management and resolution of critical incidents through our authorized ticketing systems.
• Verification of identity for access to restricted corporate portals and management consoles.
• Regulatory compliance with local and international telecommunications laws.

3. Data Retention and Storage

Citrus Cloud adheres to strict data minimization principles. Personal information is retained only for as long as necessary to fulfill the purposes outlined in this policy, or as mandated by statutory retention periods for telecommunications and tax records.

Upon termination of the contractual relationship or the expiration of legal retention periods, data is subjected to secure erasure protocols or irreversible anonymization to prevent future reconstruction.

4. Infrastructure & Cybersecurity Measures

We implement industry-standard security frameworks to protect information assets. These include:

• Encryption: Utilization of SSL/TLS protocols for data in transit and AES-256 for data at rest.
• Access Control: Strict Identity and Access Management (IAM) policies, including Multi-Factor Authentication (MFA).
• Redundancy: High-availability data center clusters with physical and logical security to ensure data persistence against catastrophic failures.

5. Cookies and Tracking Technologies

Our platforms may use technical cookies and analytical tools to improve user experience and monitor system performance. These tools collect non-identifiable data such as browser type, operating system, and navigation patterns. Users may configure their browser settings to reject cookies; however, this may limit the functionality of certain cloud management tools.

6. International Data Transfers

Due to the global nature of cloud services, information may be processed in servers located outside your country of residence. Citrus Cloud ensures that such transfers comply with international standards (such as Standard Contractual Clauses) to guarantee an equivalent level of protection for your data.

7. Data Subject Rights (ARCO)

You retain the right to Access, Rectification, Cancellation, and Opposition (ARCO) regarding your personal data. You also have the right to data portability and the restriction of processing. To exercise these rights, please contact our Compliance Department:

8. Policy Updates

Citrus Cloud Communications reserves the right to modify this Privacy Policy to reflect changes in legal requirements or service capabilities. Significant updates will be notified via our official portal or direct communication with the client's technical liaison.