Privacy Policy | ClonePartner

We, Yin Yang Inc. (“we”, “us”, “our”, “Company”) are the owners and operators of clonepartner.com (the “Website”) and the associated products and services collectively referred to in this Privacy Policy as the “Services”. Our Services include bespoke data migration solutions (delivered both as software and as professional services), custom integrations, automated data backup and recovery, continuous data‑synchronization, and implementation‑partner engagements.

We respect your privacy rights and are committed to protecting the personal information we collect through the Website and any related online or offline channels (collectively, the “Platform”). This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you interact with the Platform.

Please read this Privacy Policy carefully. By using the Platform or providing Personal Information to us, you acknowledge the practices described in it. Where a processing activity requires your consent, we will ask for it separately, and you may withdraw that consent at any time.

If you access or use the Platform on behalf of a third party, you represent that you have authority to bind that third party to this Privacy Policy. If you lack such authority, or if you (or the third party) do not agree to these terms, refrain from using the Platform.

1. Definitions

“User”, “you”, “your” – Any individual who visits, accesses, or uses the Platform.

“Customer” – Any person or entity that purchases, subscribes to, or otherwise uses the Services.

“Personal Information” – Information that identifies or can reasonably identify an individual, including but not limited to first and last name, mobile number, residential address, email address (personal or company), company name, and designation.

“Controller” – A natural or legal person that determines the purposes and means of processing Personal Information.

“Processor” – A natural or legal person that processes Personal Information on behalf of the Controller.

2. Personal Information We Collect

2.1 Information Provided Directly by You

Website interactions: When you complete forms, request demos, or send messages on the Website, you may share your name, email address, phone number, company name, designation, and any other details you include in your message. The Company acts as Controller for this data.
User account creation: When you register for an account, you provide your name, email address, company name, designation, username, and password. The Company is the Controller.
Payment processing: To purchase Services you provide your name and email address; payment‑card information is given directly to our payment processor and never stored by us. The Company is the Controller for the limited data we receive.
Recruitment: If you apply for a job through our careers page, you may provide your name, email address, phone number, résumé, education history, and employment details. The Company is the Controller.
Social media: We may collect publicly available information and any messages you send to us via our LinkedIn, X (Twitter), Facebook, Instagram, or YouTube pages. The Company is the Controller.

2.2 Personal Information Processed on Behalf of a Customer or Partner

When a Customer engages our Services (e.g., to execute a migration, run backups, or maintain continuous data sync), we may receive Personal Information about that Customer’s end‑users. In such cases, the Customer acts as Controller and Yin Yang Inc. acts solely as Processor, handling data strictly under the Customer’s documented instructions.

If you believe your Personal Information has been provided to us by a Customer and you wish to exercise any privacy right, please contact that Customer directly. We will forward or otherwise support resolution of any data‑subject requests we receive in our Processor capacity.

Delivery models. How end‑user Personal Information flows depends on how an engagement is delivered:

Cloud delivery — data extracted from the Customer’s source system is held temporarily in an encrypted staging database provisioned in the Customer’s selected hosting region, and is then delivered to the destination system. Staging databases are automatically purged no later than 30 days after the project closes, or earlier on request.
Self‑hosted (on‑premises) delivery — our migration software runs inside the Customer’s own infrastructure and is operated by the Customer. Under this model we do not access, receive, or store end‑user Personal Information; we receive only account, configuration, support, and diagnostic telemetry data.

We rely on vetted sub‑processors. The current list, including each vendor’s purpose and location, is maintained in the Subprocessors section of our Trust Center. Full data‑processing terms are set out in our Data Processing Agreement (DPA), and a signed copy is available via legal@clonepartner.com.

3. Cookies and Similar Technologies

We use cookies, web beacons, tags, and similar technologies to:

recognise repeat visitors;
analyse traffic and usage patterns; and
improve Platform performance and user experience.

Our Website loads these technologies through Google Tag Manager. The tags currently in use include Google Analytics (traffic analytics), Microsoft Clarity (session analytics and heatmaps), and Google Ads conversion measurement. The specific cookies each tool sets are listed in our Cookie Policy.

You may disable non‑essential cookies through your browser settings. For details, see our Cookie Policy at https://clonepartner.com/cookie-policy

4. Accuracy of Information

You are responsible for ensuring that any Personal Information you provide (whether your own or that of a third party) is accurate, current, and lawful. If you share Personal Information about another individual, you represent that you have lawful authority and any required consent to do so.

5. How We Use Personal Information

We use Personal Information to:

respond to inquiries, demo requests, and other communications;
deliver, operate, maintain, and improve the Services and Platform;
provide customer support and manage our relationship with you;
create business‑intelligence or analytics relating to the Services (using secure third‑party tools where needed);
process payments and fulfil contractual obligations;
evaluate and process job applications; and
comply with legal obligations and enforce our rights.

6. Disclosures of Personal Information

We do not sell or rent your Personal Information. We disclose it only in the limited circumstances below:

Affiliates: We may share Personal Information with our corporate affiliates so they can help support, improve, or develop the Services. All affiliates are bound by privacy commitments that reflect this Privacy Policy.
Service providers: Trusted service partners assist us with hosting, analytics, customer support, and payment processing. They may access Personal Information solely to perform these tasks under strict confidentiality and security obligations.
Corporate transactions: In connection with a merger, acquisition, bankruptcy, or sale of assets, Personal Information may be transferred to a successor entity that must continue to honour this Privacy Policy.
Legal and regulatory authorities: We may disclose Personal Information when required by law, to enforce our agreements, protect the rights and safety of the Company or others, prevent fraud, or respond to legal process.

7. Data Retention

We retain Personal Information only for as long as necessary for the purposes described in this Privacy Policy, and by default:

Website inquiries and marketing contacts — up to 24 months after our last interaction with you;
Job applications — up to 12 months after the recruitment process ends, or longer with your consent;
Customer account and billing data — for the duration of the customer relationship plus 90 days, consistent with our Data Processing Agreement, unless tax or accounting laws require longer;
End‑user data processed on a Customer’s behalf — as described in the Data Processing Agreement, including automatic purge of migration staging databases no later than 30 days after project close.

When retention is no longer necessary, data is securely deleted or anonymised.

8. Security

Personal Information is stored on third‑party cloud servers secured with industry‑standard measures, including AES‑256 encryption at rest and TLS 1.2+ in transit. For migration engagements delivered through our cloud, staging data is held in the Customer’s selected hosting region and automatically purged after the project closes. Our security programme — independently audited for SOC 2 Type II and ISO 27001 — is described on our Security page and in our Trust Center. While we maintain strong safeguards, no system is guaranteed impenetrable. If a data breach affects your Personal Information and notice is required by applicable law, we will notify you and the relevant authorities without undue delay.

9. Your Rights

Subject to applicable law, you may have the right to:

access the Personal Information we hold about you;
request correction, deletion, or restriction of processing;
object to our processing;
withdraw consent at any time (which does not affect processing already performed under valid consent);
data portability; and
lodge a complaint with a supervisory authority.

To exercise any right, email legal@clonepartner.com. We may request verification information to protect your data.

10. Information for EU & UK Residents

We adhere to the EU General Data Protection Regulation (“GDPR”), the UK GDPR, the UK Data Protection Act 2018, and related regulations.

Legal bases – We process Personal Information only where we have a lawful basis: performance of a contract (delivering the Services, managing accounts, processing payments); legitimate interests (responding to inquiries, securing and improving the Platform, business analytics, and communicating with business contacts, in each case where not overridden by your rights); consent (non‑essential cookies and analytics where required, marketing where required, and recruitment data retained beyond the application process); and legal obligation (tax, accounting, and compliance records).
International transfers – Where we transfer Personal Information outside the EU/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
Additional rights – EU/UK residents may contact their supervisory authority (e.g., the ICO in the UK). We encourage direct contact with us first so we can address concerns.
Automated decision‑making – We do not use your Personal Information for automated decision‑making or profiling that produces legal or similarly significant effects.

Our appointed representatives under Article 27:

EU Representative (GDPR Art. 27): Rickert Rechtsanwaltsgesellschaft mbH – YIN YANG, INC.
Colmantstraße 15, 53115 Bonn, Germany
art-27-rep-yinyang@rickert.law
UK Representative (UK GDPR Art. 27): Rickert Services Ltd UK – YIN YANG, INC.
PO Box 1487, Peterborough PE1 9XX, United Kingdom
art-27-rep-yinyang@rickert-services.uk

11. Choice & Opt‑Out

We may send administrative notices and, where permitted, marketing communications. You may opt out of marketing emails by following the unsubscribe instructions included in each message or by emailing legal@clonepartner.com.

12. Third‑Party Links

The Platform may contain links to third‑party websites or applications. We do not control and are not responsible for the privacy practices of such third parties. Review the privacy policies of any site you visit via external links.

13. Children’s Privacy

The Platform and Services are designed for business use and are not directed to individuals under 16. We do not knowingly collect Personal Information from anyone under 16; if we learn that we have, we will delete it promptly. If you believe a person under 16 has provided us Personal Information, contact legal@clonepartner.com

14. California Privacy Notice

We do not sell or share Personal Information as defined by the CCPA/CPRA, and we have not done so in the preceding 12 months. Because we do not sell or share Personal Information, opt‑out preference signals such as Global Privacy Control do not change how we process your data. California residents can review additional disclosures, including the categories of Personal Information we collect and the rights available under California law, in our CCPA Notice.

15. Governing Law & Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the State of Delaware, USA. The courts located in the State of Delaware shall have exclusive jurisdiction over any disputes arising under this Privacy Policy.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the Website or via email. The “Last updated” date at the top indicates when the latest version was posted.

17. Contact Us

For questions, concerns, or requests related to privacy, please contact our privacy team or our Data Protection Officer:

Data Protection Officer: dpo@clonepartner.com
Privacy team: legal@clonepartner.com
Postal Address: 9450 SW Gemini Dr, PMB 69868, Beaverton, Oregon 97008‑7105, USA