Blueclone Networks Privacy Policy

---

1. Scope and Roles.

This Policy applies to Blueclone-controlled websites, forms, marketing communications, telephone and video communications, meetings, events, and business interactions that reference it. It does not replace a client’s Managed Services Agreement, Consulting and Project Services terms, Requested Services document, statement of work, DPA, Service Guide, service attachment, or applicable third-party terms (collectively, the “Client Agreement”). If this Policy conflicts with a Client Agreement concerning Client Personal Data, the Client Agreement controls.

Third-party websites, applications, portals, and services have their own privacy practices. Providers that Blueclone may use, integrate, administer, or resell are identified in our Third-Party Services Schedule.

2. Personal Information We Collect.

Depending on how you interact with us, we may collect:

• Identity and contact information: name, company, title, business address, email address, telephone number, signature, and account identifiers.
• Inquiry, sales, and relationship information: form submissions, requested services, meeting details, communications, preferences, survey responses, referrals, and information about an organization’s technology, business needs, and purchasing timeline.
• Account, authentication, and support information: usernames, authentication data, device and network information, support requests, ticket content, diagnostic information, audit records, and security events. Please do not submit passwords, private encryption keys, recovery codes, or other secrets through public website forms.
• Transaction information: products or services requested, billing contacts, invoices, payment status, and limited payment-related information. Payment providers may collect payment-card or banking information directly under their own policies.
• Communications and recordings: telephone calls, voicemail, SMS, email, chat, meeting audio or video, transcripts, summaries, speaker information, calendar information, and related metadata where collected in accordance with applicable law.
• Website and device information: IP address, device identifiers, browser, operating system, internet service provider, language, time zone, access times, referring URLs, pages viewed, links clicked, form activity, approximate location derived from IP address, cookie identifiers, session replay, heatmaps, and interaction data.
• Information from other sources: information from clients, authorized users, vendors, referral partners, event organizers, public sources, professional networks, data providers, security tools, and third-party platforms, where permitted by law.

3. Cookies, Analytics, Advertising, and Session Replay.

We and our providers may use cookies, pixels, tags, local storage, scripts, and similar technologies for essential functionality, preferences, security, fraud prevention, analytics, site improvement, attribution, and advertising. Our website may use tools such as Google Tag Manager, Microsoft Clarity, and Microsoft Advertising. Microsoft Clarity may collect interaction data through behavioral metrics, heatmaps, and session replay. These tools may associate website activity with identifiers or other information held by their providers under the providers’ terms and privacy notices.

You may control certain cookies through available consent tools, browser or device settings, and provider opt-out mechanisms. Blocking cookies may affect Site functionality. We do not sell personal information for money. Some analytics or advertising activity may be treated as a “sale,” “sharing,” or targeted advertising under certain privacy laws even when no money is exchanged. Where required by applicable law, we will provide an applicable opt-out method and process legally recognized browser-based universal opt-out signals.

4. AI Systems and Automated Processing.

Blueclone may use artificial intelligence, machine learning, automation, conversational agents, meeting assistants, and similar technologies (“AI Systems”) to support website interactions, scheduling, lead qualification, sales inquiries, inbound and overflow calls, service-ticket intake and routing, voicemail, outgoing calls, meetings, transcription, translation, summaries, documentation, quality assurance, analytics, security, and internal workflows.

Information processed by an AI System may include the content and metadata of communications, prompts, responses, recordings, transcripts, summaries, ticket details, and business contact information. Blueclone may use third-party AI providers and may apply administrative, contractual, and technical controls appropriate to the context. We do not represent that AI-generated content is complete or accurate, and AI Systems are not authorized to make binding commitments on Blueclone’s behalf. Client Personal Data processed through an AI-enabled Client Service remains subject to the applicable Client Agreement and DPA.

5. Call, Meeting, and Communication Recording.

To the maximum extent permitted by applicable law, Blueclone may monitor, record, transcribe, summarize, and analyze inbound and outbound calls, video or web meetings, voicemail, chats, and other communications for service delivery, ticket documentation, training, quality assurance, security, compliance, sales, and business-record purposes. Processing may be performed by personnel, telecommunications platforms, meeting assistants, AI Systems, or other service providers.

We may provide notice through an automated announcement, visual indicator, meeting invitation, written notice, or another legally sufficient method. If you do not consent to a recording after receiving notice, notify the Blueclone representative before continuing and discontinue the recorded communication. Another method may be offered when reasonably available. If you invite or connect other participants, you are responsible for providing notice and obtaining consent where required by law. Blueclone is not obligated to record or retain any communication.

6. How We Use Personal Information.

We may use personal information to:

• operate, secure, maintain, troubleshoot, personalize, and improve our websites, communications, and services;
• respond to inquiries, schedule meetings, qualify opportunities, prepare proposals, manage relationships, and provide customer service;
• authenticate users, administer accounts and portals, create and route support tickets, communicate service status, and maintain business records;
• process transactions, administer billing, collect amounts due, and prevent fraud;
• send operational, security, support, billing, legal, and administrative communications;
• send marketing communications where permitted, measure campaign effectiveness, and manage preferences;
• record, transcribe, summarize, analyze, document, and quality-check communications as described above;
• use AI Systems and automation for the purposes described in this Policy;
• detect, investigate, prevent, and respond to security incidents, abuse, unlawful activity, and threats to persons, property, systems, or services;
• enforce agreements, establish or defend legal claims, satisfy legal obligations, and cooperate with lawful requests; and
• create aggregated, de-identified, or statistical information that is not reasonably linkable to an identified person and use it for lawful business purposes.

7. How We Disclose Personal Information.

We may disclose personal information as reasonably necessary to:

• Service providers and subprocessors: hosting, cloud, cybersecurity, IT operations, communications, telephone, meeting, AI, analytics, advertising, billing, payment, professional, support, and back-office providers that process information for us or a client.
• Technology, reseller, white-label, and co-branded partners: when a product or service is supplied, administered, integrated, facilitated, or resold with that provider.
• Clients and authorized users: when communications, tickets, meetings, accounts, or services relate to their organization.
• Professional advisers and insurers: attorneys, accountants, auditors, consultants, brokers, and insurance carriers acting in a professional capacity.
• Legal and safety recipients: government authorities, courts, regulators, law enforcement, affected persons, or others when we reasonably believe disclosure is necessary to comply with law, respond to legal process, enforce agreements, protect rights or property, investigate misconduct, or address a security or safety risk.
• Business transaction recipients: actual or prospective purchasers, investors, lenders, affiliates, and advisers in connection with a merger, acquisition, financing, reorganization, due diligence, sale of assets, change of control, bankruptcy, or similar transaction.
• At your direction or with your authorization: recipients you designate or disclosures you request or authorize.

SMS and Mobile Information: Blueclone Networks does not share mobile phone numbers or other mobile information with third parties or affiliates for marketing or promotional purposes. All information-sharing categories described in this Privacy Policy exclude SMS messaging originator opt-in data and consent. Such information will not be shared with third parties for their own purposes. Blueclone may use authorized service providers to process this information solely for operational SMS delivery, consent management, and related service functions, subject to appropriate confidentiality and data protection obligations.

8. SMS, Telephone, and Marketing Preferences.

We may use contact information for support, ticket updates, account notices, appointment reminders, user authentication, identity verification, security codes, billing, and service updates. Message frequency varies, and message and data rates may apply. To opt out of SMS messages, reply STOP, CANCEL, UNSUBSCRIBE, or END. You may receive one confirmation message. Reply HELP or contact us for assistance.

You may opt out of marketing email by using the Unsubscribe or Manage Preferences link. An opt-out does not prevent service, security, transactional, legal, or other non-promotional communications. Telephone and SMS communications may use automated technology or AI Systems where permitted by law.

9. Client Personal Data and Regulated Data.

When Blueclone processes Client Personal Data on a client’s behalf, the Client Agreement and DPA govern processing instructions, confidentiality, security, subprocessors, incident notification, assistance, retention, return, deletion, and other processor obligations. Contractual security-incident and breach-notification commitments are contained in those agreements rather than this public Policy.

Clients must disclose before processing any regulated data, special-category data, protected health information, payment-card data, export-controlled data, geographic restriction, data-residency requirement, direct obligation, or up-chain contractual or compliance requirement. Blueclone does not accept undisclosed regulated-data obligations through this Policy.

10. Security.

We use administrative, technical, and physical safeguards designed to protect personal information in light of its nature and the circumstances of processing. No system, transmission, storage method, or security measure is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials, authentication factors, devices, encryption keys, and recovery information; limiting authorized access; and promptly reporting suspected unauthorized access. Log out of shared devices and do not transmit secrets through public forms or insecure channels.

11. Retention.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to maintain accounts and relationships, provide services, document communications, comply with legal and contractual requirements, resolve disputes, enforce agreements, address security and fraud, and maintain appropriate business records. Retention periods vary based on the type of information, sensitivity, context, legal requirements, operational needs, and applicable Client Agreement. We may retain aggregated or de-identified information where permitted by law. Backup and archival copies may remain until overwritten or deleted through ordinary cycles.

12. International and Cross-Border Processing.

Blueclone and its providers may process personal information in the United States and other countries where Blueclone, its personnel, clients, affiliates, or providers operate. Those countries may have different privacy laws. Where applicable law requires a transfer mechanism or additional safeguard, the applicable Client Agreement, DPA, provider terms, or legally recognized transfer mechanism will govern.

13. Privacy Rights and Requests.

Depending on your location and applicable law, you may have rights to request access, confirmation, correction, deletion, portability, restriction, objection, withdrawal of consent, or an appeal; to opt out of certain targeted advertising, sale, sharing, or profiling; or to lodge a complaint with a regulator. These rights are subject to legal definitions, exceptions, verification, and Blueclone’s role.

To submit a privacy request, use our contact page and identify the request as a “Privacy Request.” We may verify your identity and authority, request information necessary to locate records, decline or limit a request where permitted by law, and retain information required for security, fraud prevention, legal compliance, or recordkeeping. If Blueclone processes information solely on behalf of a client, we may direct the request to that client. Authorized agents must provide legally sufficient authorization. We will not unlawfully discriminate against you for exercising an applicable privacy right.

14. Children.

Our websites and business services are not directed to children under thirteen (13), and we do not knowingly collect personal information directly from a child under thirteen through the Site. Individuals under eighteen (18) should not submit personal information or use a Blueclone service without authorization from a parent, guardian, school, employer, or other responsible organization as applicable. If you believe a child provided personal information improperly, please contact us.

15. External Sites and Third-Party Services.

Our websites may contain links to third-party sites and services. Blueclone does not control and is not responsible for their content, security, availability, privacy practices, or terms. A link or reference does not constitute endorsement. Review the privacy notice and terms of a third-party service before providing information or using it.

16. Changes to this Privacy Policy.

We may update this Policy by posting the revised version and changing the “Last Revised” date. Changes apply prospectively. If required by applicable law, we will provide additional notice or obtain consent. We encourage you to review this Policy periodically.

17. Contact Blueclone Networks.

For questions, concerns, privacy requests, or suspected privacy issues, please use our contact page. Please do not include sensitive personal information, passwords, encryption keys, or regulated data in an initial public-form submission.