Privacy Policy

Last updated: 2026-05-02 | Version 2.1

Plain-language summary: This Privacy Policy explains how G4 Cloud collects, uses, and protects your personal information. We collect only what is necessary to provide our services. We never sell your personal data. We use industry-standard encryption to protect your data in transit and at rest. You have the right to access, correct, export, and delete your data. We comply with GDPR, CCPA, and other applicable privacy laws.

1. Who We Are

G4 Cloud Inc. (“G4,” “we,” “us,” “our”) is the data controller for the personal information we collect through our services. Our registered address is 1209 Orange Street, Wilmington, DE 19801, United States.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, company name, job title, and password when you create an account.
Billing Information: Payment card details, billing address, and VAT/GST identification number. Payment card data is processed by our PCI-DSS compliant payment processor and is not stored by G4.
Profile Information: Avatar, phone number, and preferences you choose to add to your profile.
Communication Data: Information you provide when contacting our support team, including correspondence and call recordings (with notice).
Service Content: The emails, files, documents, and other content you create, upload, or share using our services.

2.2 Information Collected Automatically

Usage Data: IP address, browser type and version, device type, operating system, pages visited, feature usage, and timestamps.
Cookies and Similar Technologies: We use cookies as described in our Cookie Policy. You can manage your cookie preferences through our consent banner.

2.3 Information from Third Parties

Authentication providers if you use SSO/SAML.
Referral sources and advertising partners (only with your consent).

3. How We Use Your Information

To provide and maintain the Service — including authentication, billing, support, and feature delivery.
To improve and develop the Service — using aggregated usage data to enhance functionality, performance, and security.
To communicate with you — service updates, security alerts, billing notices, and (with your consent) marketing communications.
To detect and prevent abuse — fraud detection, spam filtering, threat analysis, and enforcement of our AUP and Terms.
To comply with legal obligations — responding to lawful requests, maintaining records, and exercising legal rights.

4. Legal Bases for Processing (EEA and UK Users)

Contractual Necessity: To perform our contract with you (providing the Service).
Legitimate Interests: For security, fraud prevention, service improvement, and direct marketing (with opt-out).
Consent: Where we ask for your consent (e.g., marketing cookies, optional features).
Legal Obligation: To comply with applicable laws and regulations.

5. Data Sharing and Disclosure

5.1 Service Providers

We engage trusted third-party service providers to help us deliver the Service, including cloud infrastructure providers, payment processors, email delivery services, and analytics providers. All providers are contractually bound to protect your data and use it only for the purposes we specify.

5.2 Corporate Transactions

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5.3 Legal Requirements

We may disclose your information if required by law, legal process, or governmental request, or when necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

5.4 No Sale of Personal Data

We do not sell your personal information. We do not share your personal information for cross-context behavioural advertising.

6. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

Account information: Retained for the duration of the account plus 90 days after termination, then anonymised or deleted.
Billing records: Retained for seven (7) years to comply with tax and accounting requirements.
Support correspondence: Retained for three (3) years after the last interaction.
Usage logs: Retained for twelve (12) months.
Customer Data: Retained as specified in your service plan and deleted within 30 days of account termination.

7. Data Subject Rights

Right of Access: Request a copy of the personal information we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal information, subject to legal retention requirements.
Right to Restrict Processing: Request restriction of processing in certain circumstances.
Right to Data Portability: Request a structured, machine-readable copy of your data.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at privacy@g4.business. We will respond within thirty (30) days.

8. International Data Transfers

G4 is a US-based company. Data may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) as adopted by the European Commission and UK authorities.

9. Security

We implement comprehensive technical and organisational measures to protect your personal information, including:

Encryption at rest (AES-256) and in transit (TLS 1.3)
Access controls and multi-factor authentication
Regular security audits and penetration testing
SOC 2 Type II certification (audited annually)
ISO 27001 certification
24/7 security monitoring and incident response

10. Children’s Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or by posting a prominent notice in the Service. Your continued use of the Service after the effective date of the updated policy constitutes acceptance.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data subject rights, please contact us:

Email: privacy@g4.business
Post: G4 Cloud Inc., Attn: Privacy, 1209 Orange Street, Wilmington, DE 19801, United States
Data Protection Officer: dpo@g4.business

12.1 EU Representative

For users in the European Union, our EU representative is: G4 Cloud EU Ltd., 1 Burlington Road, Dublin 4, Ireland.

12.2 UK Representative

For users in the United Kingdom, our UK representative is: G4 Cloud UK Ltd., 71 Queen Victoria Street, London EC4V 4AY, United Kingdom.