Privacy Policy & Data Sovereignty

1. Scope of this Policy

This Privacy Policy explains how HONGKONG HUIHUANG INDUSTRIAL CO., LIMITED ("we", "us", or "our") and technical manufacturer SHENZHEN XTELL FUTURE TECHNOLOGY CO., LTD. handle information when you visit xmailbox.cn and purchase XMAILBOX hardware units.

2. Information Collected on our Website

We only collect the minimal information necessary to fulfill your hardware order and provide customer support:

• Order & Shipping Details: Contact name, corporate name, email address, physical delivery address, and telephone number (required exclusively by courier services like DHL/FedEx for international delivery).
• Billing & Invoicing: Tax identification number (VAT/EIN) if requesting a Proforma Invoice for corporate wire transfer.
• Payment Information: When paying by credit card, payment details are processed directly by our PCI-DSS Level 1 certified payment gateway (Stripe). We never view or store full credit card numbers on our servers.
• Technical Diagnostics (Optional): When you explicitly submit a customer support ticket, you may choose to provide system diagnostic logs to assist troubleshooting.

3. Zero Telemetry & Non-Invasive Firmware

Unlike conventional cloud email providers (Google Workspace, Microsoft 365) who retain backend access to your tenant:

• XMAILBOX does NOT transmit outgoing/incoming email data to external cloud servers.
• XMAILBOX firmware updates are delivered via cryptographically signed release packages without collecting your organizational directory.
• Spam filtering and antivirus engines run locally on the appliance hardware.

4. European Union GDPR Compliance

For European Union residents and organizations operating under the General Data Protection Regulation (GDPR):

• Role Definition: In relation to your email data, you are the Data Controller and Data Processor. Because XMAILBOX runs locally under your control, neither HONGKONG HUIHUANG nor SHENZHEN XTELL acts as a third-party sub-processor of your corporate communications.
• Website Data Rights: Regarding website order data, you have the right to access, correct, or request deletion of your commercial purchase records by contacting privacy@xmailbox.cn.

5. Data Retention & Third Parties

We retain commercial order records solely to fulfill statutory accounting and international trade warranty obligations. We do not sell, rent, or trade your contact details with any third-party marketing entities.

6. Data Protection Officer Contact