Effective Date: January 1, 2026
Last Updated: January 14, 2026
Document Version: 1.0
Cross Country Communications Corp. ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the HoneyCloud™ platform and related services (collectively, the "Service"). Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
We collect information in several ways depending on how you interact with our Service:
| Data Category | Examples | Purpose |
|---|---|---|
| Account Information | Name, email address, company name, phone number, billing address | Account creation, communication, billing |
| Payment Information | Credit card number, billing address, payment history | Payment processing (handled by Stripe) |
| Company Information | Business name, logo, branding preferences, SMTP settings | White-label customization, email delivery |
| User Information | Names, email addresses, roles of your team members | User management, access control |
| Communications | Support requests, feedback, correspondence | Customer support, service improvement |
| Data Category | Examples | Purpose |
|---|---|---|
| Usage Data | Features accessed, actions taken, time spent, click patterns | Service improvement, analytics |
| Device Information | IP address, browser type, operating system, device identifiers | Security, troubleshooting, optimization |
| Log Data | Access times, pages viewed, error logs, referring URLs | Security monitoring, debugging |
| Location Data | Approximate location based on IP address | Security, compliance, localization |
| Data Category | Examples | Purpose |
|---|---|---|
| Attack Data | Attacker IP addresses, attack types, timestamps, protocols used | Threat detection, alerting, reporting |
| Appliance Data | Serial numbers, IP addresses, software versions, health status | Device management, support |
| Threat Intelligence | Aggregated attack patterns, malicious IP lists, threat indicators | Security enhancement, optional sharing |
| Network Data | Connection logs, honeytrap interactions, captured credentials (attacker-submitted) | Threat analysis, forensics |
We use the information we collect for the following purposes:
For users in the European Economic Area (EEA), we process personal data based on the following legal grounds:
The HoneyCloud™ platform offers optional threat intelligence sharing features that enable anonymized threat data to be shared among platform participants. This collective intelligence helps all participants improve their security posture.
Participation in threat sharing is entirely optional. You can configure your preferences at any time in your account settings:
We may share your information with third-party service providers who perform services on our behalf:
| Provider Type | Purpose | Data Shared |
|---|---|---|
| Cloud Infrastructure (AWS) | Hosting, storage, compute | All platform data (encrypted) |
| Payment Processor (Stripe) | Payment processing | Billing information |
| Email Service | Transactional emails, alerts | Email addresses, notification content |
| Analytics | Usage analytics, improvement | Anonymized usage data |
We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have regarding your information.
We may share your information with third parties when you have given us explicit consent to do so.
| Data Type | Retention Period |
|---|---|
| Account Information | Duration of account + 30 days after termination |
| Attack/Threat Data | Configurable per plan (default 90 days) |
| Usage Logs | 12 months |
| Payment Records | 7 years (legal requirement) |
| Support Communications | 3 years |
Upon termination of your account, you may request export of your data within thirty (30) days. After this period, we will delete or anonymize your personal data, except where retention is required by law or for legitimate business purposes.
We implement comprehensive technical and organizational measures to protect your information:
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you acknowledge that you provide information at your own risk.
In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by law, typically within 72 hours of becoming aware of the breach.
You have the right to request a copy of the personal data we hold about you in a structured, commonly used, machine-readable format.
You have the right to request correction of inaccurate or incomplete personal data.
You have the right to request deletion of your personal data, subject to certain legal exceptions.
You have the right to request restriction of processing of your personal data in certain circumstances.
You have the right to object to processing of your personal data based on legitimate interests.
Where processing is based on consent, you have the right to withdraw consent at any time.
To exercise any of these rights, please contact us at support@crosscountrycomm.com. We will respond to your request within thirty (30) days.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential/Session | Authentication, security, session management | Session |
| Preferences | Remember your settings and preferences | 1 year |
| Security | Fraud prevention, CSRF protection | Session |
We do not use third-party advertising cookies or tracking pixels. We do not sell your data to advertisers or data brokers.
We currently do not respond to "Do Not Track" browser signals as there is no industry standard for compliance.
Your information may be transferred to and processed in the United States, where our servers and company are located. By using the Service, you consent to this transfer.
For users in the EEA, UK, or other jurisdictions with data transfer restrictions, we implement appropriate safeguards including:
The Service is intended for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.
California residents have additional rights under the California Consumer Privacy Act (CCPA):
To exercise these rights, contact us at support@crosscountrycomm.com or call (903) 885-2900.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:
Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Cross Country Communications Corp.
Attn: Privacy Officer
Sulphur Springs, Texas 75482
United States of America
Email: support@crosscountrycomm.com
Phone: (903) 885-2900
For EEA residents, you also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.