This Privacy Policy should be read together with our Terms of Service, Data Processing Addendum, Cookie Notice and any applicable order form or agreement.
This Privacy Policy explains how 360 Degree Cloud collects, uses, shares and protects personal information in connection with the 360 DataCraft website at https://360datacraft.com (the “Website”), the 360 DataCraft backup, restore, archive and file transfer service, including the DataCraft web application at app.360datacraft.com (the “Platform”) and the 360 Data Craft app (together, the “Service”), and our sales and support activities.
The short version: 360 DataCraft moves your Salesforce data into your own AWS account. While a job runs, that data passes through our Platform encrypted, but we do not keep copies of it. We keep only the information we need to run the Service, sell and license it, and support you.
1. Who we are
360 DataCraft is a product of the 360 Degree Cloud group:
- 360 Degree Cloud Technologies Pvt. Ltd., India; and
- 360 Degree Cloud LLC, 1968 S. Coast Hwy 1412, Laguna Beach, CA 92651, USA.
In this Policy, “360 Degree Cloud”, “we”, “us” and “our” mean these companies. For customers, the company you contract with under our Terms of Service is responsible for your account information. For Website visitors and sales enquiries, both companies jointly decide how your information is used.
2. Your Salesforce data stays with you
When you use the Service, the Platform connects to your Salesforce/Cloud org and your own AWS account. It moves data between them and stores your backups and archives in the Amazon S3 storage in your AWS account.
In transit only. The Salesforce records, files and attachments you back up, archive, restore or transfer (your “Customer Data”) pass through the Platform encrypted while a job runs. They are held there only temporarily and are not kept afterwards. The same applies when you view archived records from inside Salesforce.
Your storage, your control. You decide where Customer Data is stored, how long it is kept, how it is encrypted and who can access it.
We act for you. When we process personal information within Customer Data, we do so only on your instructions, as your data processor (or “service provider”), under our Data Processing Addendum. Our staff do not access Customer Data except to provide support you request, to keep the Service secure, or where the law requires.
You are responsible for the personal information within your Customer Data, including telling the people it relates to how it is used. This Policy does not cover how you handle that data.
3. Information we collect
3.1 Information you give us
| Category | Examples | When |
|---|---|---|
| Contact details | Name, business email, company name, job title, phone number (optional) | You fill in a contact, demo or sign-up form, or email us |
| Enquiry details | The message you send us and your product interests | You contact sales or request a demo |
| Account and license details | Names and emails of admins and users, Salesforce user and org IDs, plan and license count | You buy, install or activate the Service |
| Permissions and roles | The DataCraft permissions and roles your admins assign to each user | Your admin sets up access in the Salesforce app |
| Connection details | Salesforce org IDs, usernames. | You connect a Salesforce org or AWS account to the Platform |
| Billing details | Billing contact, billing address, tax ID (such as GST or VAT number), invoices and payment history | You pay for the Service. Card details are handled by our payment provider, not stored by us |
| Support communications | Emails, chat messages, call recordings (where you agree), screenshots and logs you choose to share | You contact support |
3.2 Information collected automatically
| Category | Examples | Source |
|---|---|---|
| Website usage | Pages visited, links clicked, referring site, time on page | Cookies and similar technologies on the Website |
| Device and connection | IP address, browser type, operating system, approximate location (city or country) | Your browser when you visit the Website |
| Job and audit logs | Who ran which backup, restore or archive job and when, job status, record counts, record IDs, durations and error messages | The Platform, whenever a job runs |
| Platform usage | Log-ins, pages used, actions taken, IP address and browser | The Platform, when you or your users use it |
| Service usage and diagnostics | Package version, license status, Salesforce org ID and edition, feature usage, error codes | The Service, and Salesforce’s license management tools when you install a package |
Filters, queries, job logs and error messages may contain small amounts of Customer Data, such as record IDs or a field value in an error message. We use them only to run, secure and support the Service.
3.3 Information from others
We may receive information about you from:
- Salesforce, when you install the Service or contact us through Salesforce AgentExchange (for example, your name, email, company and org ID);
- business partners and resellers who refer you to us; and
- publicly available sources, such as your company’s website or professional profiles, to understand your business needs.
4. How we use your information
| Purpose | Information used | Legal basis (where GDPR or UK GDPR applies) |
|---|---|---|
| Responding to enquiries and arranging demos | Contact and enquiry details | Taking steps at your request before a contract; legitimate interests |
| Providing, licensing and activating the Service, and running the jobs you set up | Account, license, connection, policy, job and usage details | Performance of our contract with you |
| Keeping audit trails so your admins can see who did what | Job and audit logs | Performance of contract; legitimate interests |
| Billing, invoicing and collecting payment | Billing and account details | Performance of contract; legal obligation (tax and accounting) |
| Providing support and fixing problems | Support communications, diagnostics | Performance of contract; legitimate interests |
| Keeping the Service and Website secure and preventing misuse | Device, usage and diagnostic information | Legitimate interests; legal obligation |
| Improving the Service and Website | Usage and diagnostic information, in aggregated form where possible | Legitimate interests |
| Sending product updates and service notices | Contact and account details | Performance of contract; legitimate interests |
| Sending marketing emails | Contact details | Consent, or legitimate interests where the law allows. You can unsubscribe at any time |
| Meeting legal requirements and enforcing our Terms | Any relevant information | Legal obligation; legitimate interests |
We do not use your information for automated decisions that have legal or similarly significant effects on you.
5. Cookies and similar technologies
We use cookies and similar technologies on the Website and the Platform. The Platform uses necessary cookies to keep you signed in and secure. You can manage your choices through the cookie banner or your browser settings at any time.
6. How we share information
We do not sell your personal information. We share it only with:
- Our group companies, 360 Degree Cloud Technologies Pvt. Ltd. and [360 Degree Cloud LLC], to sell, provide and support the Service.
- Service providers who work for us under contract and only on our instructions, such as the cloud provider that hosts the Platform, website hosting, CRM, email delivery, live chat, analytics, payment processing and accounting providers.
- Salesforce, where you buy or install the Service through Salesforce AgentExchange, for license management.
- Partners and resellers, where you bought the Service through them or asked them to work with us.
- Professional advisers, such as lawyers, auditors and insurers, under confidentiality duties.
- Authorities, where required by law, court order or to protect rights, safety or security.
- A buyer or successor, if we are involved in a merger, acquisition or sale of assets, subject to this Policy.
7. International transfers
We are based in India and the United States, and our service providers may process information in other countries. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we use safeguards approved under those laws, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.
8. Security
We use technical and organizational measures to protect personal information. These include encryption of data in transit (HTTPS), encryption of stored credentials and tokens, access controls based on job role, multi-factor authentication for internal systems, regular vulnerability assessment and penetration testing, and confidentiality obligations for staff.
Because the Service writes Customer Data to your own AWS account, the security of that account, including IAM permissions, encryption keys and bucket settings, is your responsibility. No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the authorities where the law requires.
Salesforce, AWS and other third-party services maintain their own privacy notices governing processing for which they are independently responsible. Please review those notices. Our processing of personal information through our own service providers remains subject to our obligations under applicable law and our agreements.
9. Our rights
Depending on where you live, we may have the right to:
- access the personal information we hold about you;
- correct inaccurate or incomplete information;
- delete your information;
- object to or restrict certain processing;
- receive your information in a portable format;
- withdraw consent at any time, where we rely on consent;
10. Children
The Website and Service are for businesses and are not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. We will post the new version on this page and change the “Last updated” date.
12. Contact us and Grievance Officer
For privacy questions or requests, contact:
Privacy team: [legal@360degreecloud.com]
Grievance Officer:
Siddharth Sehgal
360 Degree Cloud Technologies Pvt. Ltd., [Registered Office Address], India
Email: [legal@360degreecloud.com]
United States: [360 Degree Cloud LLC], 1968 S. Coast Hwy 1412, Laguna Beach, CA 92651, USA