Privacy Policy

This Policy applies to personal data we process as a controller — for example, account, billing, website and support data. When we process personal data within Remote Sessions on behalf of a business customer, we act as a processor on that customer's instructions; that customer is the controller and its own privacy notice applies. Our processing as a processor is governed by our Data Processing Addendum (available at privacy@shareglo.com).

Because of the end-to-end encrypted design of the Service, ShareGlo does not have access to the Content of your Remote Sessions (such as the screens, files, keystrokes or audio exchanged between connected Devices). We process connection metadata needed to broker and secure connections, as described below.

Information you provide

• Account data: name, email address, password (hashed), organization, and role.
• Billing data: billing contact, plan, and transaction records. Card details are handled by our payment processors, not stored by us.
• Support data: the content of your support requests and related correspondence.

Information we collect automatically

• Device and connection data: device identifiers, IP address, operating system and Software version, and the metadata needed to establish, route and secure Remote Sessions (such as connection times, endpoints and session duration).
• Usage and diagnostic data: feature usage, performance metrics, and crash/error logs used to operate and improve the Service.
• Website data: cookies and similar technologies on our website (see §6).

We do not access the Content of Remote Sessions. We do not intentionally collect special-category or sensitive personal data through the Service; please do not submit it where it is not required.

We use personal data to: provide, secure and maintain the Service; authenticate users and broker connections; process payments and manage subscriptions; provide support; detect, prevent and investigate fraud, abuse and security incidents; comply with legal obligations; and improve and develop the Service. We also use contact details to send service and, where permitted, marketing communications you can opt out of.

Where the GDPR applies, our legal bases are: performance of a contract (to provide the Service you request); our legitimate interests (to secure, operate, improve and market the Service, balanced against your rights); compliance with a legal obligation; and your consent where required (for example, certain cookies and marketing). You may withdraw consent at any time without affecting prior processing.

Remote Sessions are end-to-end encrypted between the participating Devices and routed through our Relay. We process the metadata required to broker and secure those connections, but we do not have access to, and do not store, the Content exchanged during a session. A business customer that operates Devices may keep its own session records or audit logs under its own control and policies; those are governed by that customer's privacy notice, not this one.

Our website uses strictly necessary cookies to function, preference cookies to remember choices such as your language, and analytics cookies (Google Analytics 4) to understand how the site is used. How analytics are handled depends on where you are. If you are in the EEA, the United Kingdom or Switzerland, we load nothing non-essential until you accept: no analytics cookies are set and no analytics data is sent before you give consent. Elsewhere, including the United States, analytics load by default and you may turn them off at any time through the "Cookie settings" link in our website footer. In either case you can manage your choice through our cookie banner and your browser settings, and we honor recognized opt-out preference signals (such as Global Privacy Control), which disable analytics automatically where analytics would otherwise load by default.

We do not sell your personal data. We share personal data only as follows:

• Service providers (subprocessors): cloud hosting and Relay infrastructure, payment processors, email and support tools, and website analytics — bound by contract to process data only on our instructions. Our website analytics provider is Google LLC (Google Analytics 4), which receives website usage data such as pages viewed, approximate location derived from IP address, device and browser type, and a randomly generated analytics identifier, and processes it in the United States. A current list of subprocessors is available on request at privacy@shareglo.com.
• Within your organization: account administrators can see account and usage information for users they manage.
• Legal and safety: where required by law, to respond to lawful requests, to enforce our Terms, or to protect the rights, property or safety of ShareGlo, our users or the public.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this Policy.

ShareGlo is based in the United States, and we and our service providers may process personal data in the United States and other countries. Where we transfer personal data from the EEA, the UK or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards — primarily the European Commission's Standard Contractual Clauses (with the UK Addendum or Swiss amendments as applicable) — and we implement additional measures where needed. This includes website analytics data transferred to Google LLC in the United States, which for visitors in the EEA, the UK and Switzerland occurs only after you have given consent (see §5). You may request a copy of the relevant safeguards at privacy@shareglo.com.

We keep personal data only as long as needed for the purposes described, to provide the Service, to comply with legal, tax and accounting obligations, to resolve disputes and to enforce our agreements. Account data is generally retained for the life of your account and deleted or anonymized within a reasonable period after closure, subject to backup cycles and legal retention requirements. Connection and diagnostic metadata is retained for a limited period for security and operational purposes.

We use technical and organizational measures designed to protect personal data, including end-to-end encryption of Remote Session Content, encryption in transit, access controls and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security. If we become aware of a personal-data breach affecting you, we will notify you and the relevant authorities as required by law.

If you are in the EEA, the UK or Switzerland, you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests or to direct marketing, and to withdraw consent. You may exercise these rights by contacting privacy@shareglo.com. We will respond within the time limits required by law.

You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office; in Switzerland, the FDPIC). Our EU representative under Article 27 GDPR is [EU REPRESENTATIVE — name and address, Art. 27 GDPR], and our UK representative is [UK REPRESENTATIVE — name and address, UK GDPR Art. 27].

If you are a resident of California or another US state with a comprehensive privacy law, you have the right to know and access the personal information we collect, to request correction or deletion, and to opt out of "sale" or "sharing" of personal information and of targeted advertising. We do not sell your personal information and do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information beyond the purposes permitted by law, and we do not discriminate against you for exercising your rights.

In the past 12 months we have collected the categories of personal information described in §2 (identifiers, customer records, commercial information, internet/network activity, and geolocation inferred from IP), for the business purposes in §3, and disclosed them to the service providers in §6. To exercise your rights, contact privacy@shareglo.com; you may use an authorized agent, and we will verify your request. You may appeal a decision by replying to our response.

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact privacy@shareglo.com and we will delete it.

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice where required. Your continued use of the Service after the changes take effect constitutes acceptance.

For privacy questions or to exercise your rights, contact us at privacy@shareglo.com or Shareglo, Inc., [REGISTERED ADDRESS, CITY, STATE ZIP, USA]. EEA/UK data subjects may also contact our representatives named in §10.