Personal Data & Privacy Policy for Cloud Mac Rental

Scope & your consent

ZovCloud ("we") treats user privacy and data security as foundational to platform operations. This Privacy Policy ("this Policy") applies to all related services you access, register for, or use through zovcloud.com and its subdomains (collectively, the "Services"), and explains how we handle personal information relating to you.

By accessing or using the Services, you confirm that you have read, understood, and agree to this Policy.If you do not agree with any part of it, please stop using the Services. This Policy, together with theTerms of Serviceforms the complete agreement between you and ZovCloud. Where they conflict on personal data processing, this Policy prevails.

Business data you store, run, or transmit on rented devices (source code, build artifacts, database contents, etc.) is primarily managed by you as the data controller. This Policy focuses on account, transaction, and access information collected on the platform side.

What we collect

Information you provide

• Account information:Email address at registration, login password (stored as an encrypted hash — we cannot read plaintext), and any other details you voluntarily provide
• Orders & configuration:Selected data center node, rental period, add-ons such as SSD expansion or Thunderbolt 5 clustering, and order notes
• Payment-related:Transaction amount, payment status, order ID, and redacted billing summaries. Full card numbers and on-chain wallet private keys are handled by third parties (Stripe, USDT payment channels, etc.) — we do not store them
• Support communications:Issue descriptions, attachments, and correspondence submitted via tickets or email

Information collected automatically

• Access logs:IP address, request time, access path, browser type, operating system, and referrer page
• Client identifiers:Device identifiers generated for security verification and anomaly detection (zovcloud_ssaid, stored in browser local storage)
• Usage behavior:Login times, console activity records, feature usage frequency, and resource consumption stats such as bandwidth
• Preferences:Interface preferences such as language selection (stored locally via preferred_language and similar keys)

How we use information

We use your personal information only to the extent necessary for the following purposes:

• Delivery & operations:Create accounts, provision Mac mini M4 instances, process payments and renewals, and provide SSH / VNC access
• Identity verification & security:Verify login identity, detect abnormal access, and prevent fraud and abuse
• Customer support:Respond to tickets and email inquiries, troubleshoot connectivity or billing issues
• Transactional notices:Send required emails such as verification codes, billing reminders, expiry notices, maintenance announcements, and security alerts
• Product improvement:Analyze access and performance data in aggregated or anonymized form to improve platform stability and user experience
• Marketing:Send product updates or promotional offers we believe are relevant, unless you have opted out
• Legal compliance:Fulfill legal obligations, respond to lawful requests from competent authorities, and protect the legitimate rights of the platform and users

Information sharing & disclosure

We do not sell your personal information.We may share necessary information with third parties only in the limited circumstances below:

Service providers acting on our behalf

To operate the Services, we may engage the following types of partners to process the minimum information required:

• Payment processors (Stripe card payments, USDT on-chain collection services)
• Email delivery providers (verification codes and service notifications)
• Self-hosted web analytics (Matomo, data stored on infrastructure we control)
• Data center and network infrastructure providers

We require these partners to process information only for the delegated purposes and to implement appropriate security safeguards.

Legal requirements & business changes

We may disclose required information when laws, legal process, or government authorities lawfully demand it. In mergers, acquisitions, asset transfers, or similar transactions, user information may transfer as a business asset. We will notify you within a reasonable period via website notice or similar means; the recipient must remain bound by this Policy to the same extent.

With your explicit consent, we may share information with designated third parties for purposes you authorize.

Data retention

We retain your information only as long as necessary for the purposes described in this Policy. Typical retention periods by data type:

Information subject to longer legal retention will be kept as required by law. After the retention period, we delete or anonymize the data.

Security safeguards

We apply industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit:Website and API communications use TLS encryption
• Credential protection:Account passwords are stored with strong hashing; plaintext passwords cannot be recovered
• Access control:Internal staff access operational data on a least-privilege basis with activity auditing
• Physical security:Data centers provide 24×7 physical access controls and redundant infrastructure
• Device isolation:During rental, your data resides on dedicated physical hardware; secure erasure runs at end of term
• Ongoing review:Regular security assessments and vulnerability scans

Cookies & local storage

We use cookies and browser local storage to keep the Services running and improve your experience:

You can manage or clear cookies and local storage in your browser settings, but this may affect login persistence and some features.

Your rights & choices

Under applicable data protection laws, you may have the rights below. Submit requests via ticket or email; we will respond within a reasonable period (rights requests generally within 30 days):

If your account is active or has outstanding orders, some deletion requests may not be executed immediately so we can fulfill the service agreement and legal obligations.

Protection of minors

The Services are not directed at minors under 18. We do not knowingly collect personal information from minors. If you are a guardian and believe a minor provided us information without consent, contact us via ticket or email — we will delete it promptly after verification.

Cross-border data transfers

ZovCloud operates data centers in Singapore, Japan (Tokyo), South Korea (Seoul), Hong Kong SAR, and US East. Your personal information may be stored or processed on servers outside your country or region, where data protection standards may differ.

We use data processing agreements, encrypted transmission, access controls, and other measures to protect cross-border transfers and comply with applicable requirements.

Third-party links

Our website may link to third-party sites or services (payment redirects, external docs, etc.). We are not responsible for their content, privacy practices, or security. Review their privacy policies before sharing personal information.

Policy updates

We may update this Policy from time to time. Revised versions will be posted on this page with an updated effective date. Formaterial changes(such as substantial changes to how we use information), we will notify you via your registered email or in-platform notice.

Continued use after changes are published constitutes acceptance of the revised Policy.If you disagree, stop using the Services and turn off auto-renewal. For prepaid services not yet expired, the prior Policy generally still applies unless law or our notice states otherwise.

Contact us

For questions, complaints, or to exercise data rights regarding this Policy, contact us: