Privacy Policy

1. Information We Collect

We collect information directly from you when you register an account, order managed cloud VPS services, configure DNS domains, or request technical support. The categories of information processed include:

• Account & Identity Credentials: Full name, company affiliation, primary billing email address, contact telephone number, and authentication tokens.
• Billing & Transaction Records: Invoicing histories, tax identification details, and localized payment gateway transaction tokens (such as NowPayments cryptocurrency confirmations, credit card processor transaction IDs, and regional payment identifiers). We do not store full credit card numbers on our local servers.
• Technical & Telemetry Data: Public IPv4/IPv6 addresses, user-agent signatures, server access logs, resource utilization metrics (CPU shares, RAM allocation, NVMe storage usage), and firewall connection logs necessary to prevent brute-force intrusion.

2. Purpose & Lawful Basis of Data Processing

We strictly process data in compliance with international privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Information is processed solely for the following business purposes:

• Provisioning, maintaining, and scaling isolated Docker container instances and cloud VPS configurations.
• Fulfilling automated daily disaster recovery snapshots and database backup retention policies.
• Delivering critical infrastructure notifications, SSL expiration alerts, and security patch bulletins.
• Enforcing network security rules, blocking malicious traffic via Web Application Firewalls (WAF), and mitigating Distributed Denial of Service (DDoS) attempts.

3. Data Retention & Container Privacy

We do not inspect, monetize, or harvest the contents of client databases, WordPress file directories, or application databases hosted inside container pools. Client data remains the exclusive intellectual property of the account holder. Backup snapshots are encrypted at rest using industry-standard AES-256 encryption protocols and retained strictly according to your service plan schedule. Upon verified account termination, hosted server images and associated data are permanently wiped following cryptographic zero-fill standards.

4. Your International Privacy Rights

Regardless of your geographic location, you retain the right to access, rectify, port, or request the erasure of your personal account information. If you wish to execute a formal Data Subject Access Request (DSAR) or request account data deletion, our Data Protection Officer is reachable directly.

5. Contact Our Privacy & Security Team

For questions regarding this policy, security vulnerability reporting, or data access requests, please contact our administrative team:

RackUp IT Solutions • Legal & Compliance Division