Data Controller & Registered Entity
The controller responsible for the processing of personal data on this website and associated applications is clon1x.
We take user privacy with the utmost seriousness and uphold European General Data Protection Regulation (GDPR - EU 2016/679) and California Consumer Privacy Act (CCPA) standards.
Personal Data We Collect
We collect only the minimum information necessary to authenticate users, manage active license tiers, and ensure system stability:
- Account Details: Email address and securely hashed password (or Google OAuth profile identifier).
- Subscription & Billing Metadata: Active tier, profile allocation quota, payment transaction identifiers, and expiration dates.
- Technical Log Data: IP address during login (for anomaly and brute-force intrusion prevention) and client app version.
- Hardware Telemetry & Anti-Abuse Identifiers: Technical hardware identifiers of your PC (CPU model, GPU renderer string, OS build, machine GUID, and screen resolution). This data is collected solely to detect bug abuse, prevent automated exploits, block DDoS attempts, and enforce plan limits against users creating 3 or more multi-accounts to bypass free quotas.
Payment Processing & Card Security (Monobank & Crypto)
Bank Card Security & PCI DSS Compliance (Monobank)
Bank card payments (Visa, Mastercard, Apple Pay, Google Pay) are processed by our licensed partner bank Monobank (JSC «UNIVERSAL BANK»). All transactions are protected via 3D-Secure 2.0 and processed on hardware certified according to PCI DSS Level 1 standards. clon1x NEVER stores, receives, or transmits full card numbers, expiration dates, or CVV/CVC codes on its servers.
Cryptocurrency Processing Architecture (CCPayment)
Cryptocurrency transactions are processed through authorized payment gateway CCPayment (supporting 900+ digital assets). Verification is conducted decentralized on the respective blockchain network. Digital software license keys and profile limits are provisioned automatically upon payment confirmation.
Zero-Knowledge Profile Architecture
We practice a strict Zero-Knowledge privacy model regarding user browsing activities. Browser profiles, cookies, tabs, bookmarks, and local storage are client-side encrypted before synchronization to our cloud vault using AES-256-GCM.
Our personnel have no cryptographic means to inspect target websites, credentials stored in profiles, or network traffic routed through your configured proxies.
Legal Basis for Processing (GDPR Article 6)
- Performance of Contract (Art. 6(1)(b)): To deliver access to software licenses, profile synchronization, and customer support.
- Legitimate Interests (Art. 6(1)(f)): To prevent abuse, detect DDoS attacks, enforce license boundaries, and protect the integrity of our systems.
- Legal Compliance (Art. 6(1)(c)): To comply with mandatory accounting, financial, and tax reporting regulations.
Data Retention & AES-256 Security
We retain account data for as long as your account remains active. If an account is deleted or inactive for more than 12 months, profile data and associated encrypted sessions are permanently removed from our primary storage.
Immediate Purge upon Security Termination
If an account is banned for attempting vulnerability exploits, DDoS attacks, multi-accounting bug abuse, or severe AUP violations, all active profile metadata, cloud session vaults, and local caches associated with that user are immediately and irrevocably purged from the database.
All data is stored in certified EU data centers compliant with ISO-27001 and SOC 2 Type II security certifications.
Your Rights Under GDPR & CCPA
Under applicable European and international privacy regulations, you are entitled to exercise the following rights at any time without fees:
Request a full copy of your personal metadata and account records.
Request permanent deletion of your profile, account, and cloud vaults.
Export your configuration and profile list in structured JSON format.
Correct inaccurate email or profile parameters associated with your account.
International Data Transfers
When data is processed outside the European Economic Area (EEA), such transfers are governed by European Commission Standard Contractual Clauses (SCCs) to guarantee an equivalent level of protection.
Privacy Inquiries & Data Protection Officer
For inquiries regarding this Privacy Policy, GDPR requests, or exercising your rights, contact our Data Protection team directly:
clon1x Privacy & Security Team
Email: [email protected]
Telegram: @clon1x_bot ↗
Support hours: Daily 09:00 - 21:00 (online response guaranteed within 2 hours)