Sign In (Soon)

Privacy Policy

Last updated:

xthAB Limited, England and Wales

1. Introduction

xthAB Limited ("Villip", "we") is the data controller for personal data collected through the Villip platform and website. We are committed to protecting your privacy and processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

2.1 Account Data

When you create an account, we collect your name, email address, company name (if applicable), and billing information. This data is necessary to provide the Service.

2.2 Usage Data

We collect API request logs, message metadata (sender, recipient numbers, timestamps, delivery status), and dashboard activity. Message content is processed transiently and not stored beyond delivery.

2.3 Technical Data

We collect IP addresses, browser type, and device information when you access the dashboard or website. We do not use third-party analytics or tracking scripts.

3. How We Use Your Data

  • To provide and maintain the Service
  • To process payments and manage billing
  • To detect and prevent fraud, abuse, and security incidents
  • To comply with legal obligations, including telecommunications regulations
  • To communicate service updates and security notices

4. Legal Basis for Processing

We process personal data under the following legal bases:

  • Contract performance: To provide the Service you have subscribed to
  • Legitimate interests: Fraud prevention, security, and service improvement
  • Legal obligation: Compliance with telecommunications and financial regulations

5. Data Sharing

We do not sell personal data. We share data only with the entities listed in our Subprocessor List, strictly for the purpose of providing the Service. We may disclose data to law enforcement in accordance with our Law Enforcement Request Policy.

6. Data Retention

Account data is retained for the duration of your account plus 30 days. API logs and message metadata are retained for 90 days. Billing records are retained for 7 years as required by HMRC.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with the Information Commissioner's Office (ICO)

8. International Transfers

Your data is processed on infrastructure located in the United Kingdom and India. Where data is transferred outside the UK, we ensure adequate safeguards are in place, including Standard Contractual Clauses approved by the ICO.

9. Contact

For privacy-related enquiries, contact our Data Protection Officer at hello@villip.xyz.