RoyalSonic Privacy Policy

Operated by J.R.D. Company Ltd. · Established May 2001 · Last revised: July 28, 2026 · Governed by the laws of New Taipei City, Taiwan

J.R.D. Company Ltd. (“J.R.D.,” “RoyalSonic,” “we,” “us,” or “our”) is committed to protecting the privacy and security of our customers, partners, and clients. This Privacy Policy describes how we collect, use, share, and protect your personal data when you visit royalsonic.com, manage your services via whmcs.royalsonic.com, or use our email hosting and productivity applications (collectively, the “Service”).

By accessing our website or using our Service, you acknowledge and agree to the data practices described in this policy.

1. Information We Collect

We collect only the minimum necessary data to provision, secure, and bill your email hosting services.

Account and Profile Data: When you create an account, purchase a plan, or redeem a code, we collect your full name, email address, phone number, company name (optional), billing address, city, state/region, postal code, and country.

Billing Information: Payment transactions are handled securely via third-party processors (such as PayPal). We store billing profile metadata and invoicing records, but we do not store or host raw credit card or financial account numbers on our servers.

Technical Log Data: To safeguard our infrastructure and maintain high network reputation, our fixed-hardware servers (including our NVMe and ZFS pools) automatically log technical data. This includes your IP address, browser type, operating system, timestamp of access, and IMAP/POP3/SMTP connection metrics.

User-Generated Content: This includes the emails, contacts, calendars, tasks, notes, and chat messages you store on our servers. We treat this data as strictly private and confidential.

2. How We Use Your Information

We use the collected information for the following specific infrastructure and operational purposes:

• Service Provisioning: To create your administrative profiles, set up your mailboxes, and route your incoming and outgoing email traffic.
• Security & Anti-Abuse Monitoring: To enforce our Anti-Abuse & Fair Use Policy, detect automated spam loops, prevent malicious phishing attempts, and protect our server IP ranges from global blacklisting.
• Billing and System Notifications: To generate invoices, process renewals, verify accounts, and send critical service alerts (such as system maintenance updates or disk quota warnings).
• Customer Support: To verify your identity when you open a support ticket via our client area.

3. Data Protection and Infrastructure Security

Your data is securely hosted on our own dedicated server infrastructure. We implement strict security layers to safeguard your information:

• Hardware Failover Protection: Your email data is managed on enterprise ZFS arrays (configured in RAIDZ2), providing a dual-drive failure protection framework that protects data integrity against sudden mechanical disk errors.
• Access Throttling and Encryption: All webmail, administrative client portals, and mail transmission connections (IMAP, POP3, SMTP) are fully encrypted via SSL/TLS protocols.
• System Hardening: Our automated billing structures (whmcs.royalsonic.com) are heavily hardened against external vulnerabilities with firewall protections, isolated configurations, and mandatory admin two-factor authentication (2FA).

4. Data Retention and Account Cancellation

We maintain a strict and clean data retention cycle to optimize our storage architecture:

• Active Accounts: We retain your account data and user-generated content for as long as your account remains active and paid.
• Cancellation / Non-Payment Deletion Buffer: If an account is explicitly cancelled or suspended due to billing failures, your access to the Service will be revoked immediately. To protect you against accidental data loss, we securely retain your email data archives for a grace period of fourteen (14) calendar days, after which the data pool is permanently and completely purged from our hard drives and cannot be recovered. J.R.D. accepts no liability for loss of content resulting from this automated purge.
• Policy Violations: Data belonging to accounts permanently terminated for violating our Anti-Abuse or Spam policy may be deleted immediately at our sole discretion, without refund.

5. Third-Party Disclosures & Integrations

We do not sell, rent, trade, or lease your personal information or email contents to marketing companies or third parties. We only share information with third parties in the following limited scenarios:

• Essential Service Providers: With third-party software, plug-ins, or financial processors (such as PayPal or Stripe) required to process payments and handle billing automated operations.
• Legal Compliance: We may disclose your information if required to do so by a binding court order, legal process, or government authority operating under the jurisdiction of New Taipei City, Taiwan.
• Infrastructure Protection: We may share technical tracking metrics (such as abusive IP addresses) with global spam blocklists or threat intelligence platforms to protect the integrity of our mail network.

6. General Data Protection Regulation (GDPR) Compliance

If you are accessing our services from the European Economic Area (EEA), you possess specific data rights under the GDPR. J.R.D. Company Ltd. acts as a Data Processor regarding the email content you host for your business, and a Data Controller regarding your billing and registration account profile.

You have the right to request access to your personal data, object to processing, request data rectification, or ask for total data erasure (subject to our 14-day permanent deletion cycle upon contract cancellation). To exercise these rights, please open a verified ticket inside your billing panel or email us directly at [email protected]. See also our GDPR Compliance Notice.

7. Changes to This Privacy Policy

J.R.D. Company Ltd. reserves the right to modify, adjust, or update this Privacy Policy at any time to reflect software changes, infrastructure expansions, or evolving legal frameworks. Any changes will become immediately effective upon publication on this website. Continued use of the Service after publication constitutes acceptance.

Terms of Service ·
Fair Use Policy ·
Email Use Policy ·
Privacy Policy ·
Refund Policy ·
GDPR