privacy policy

the short version

we collect the bare minimum — email signup, no selling your data, we need your email to run your account and that's about it, we also use posthog for product analytics and sentry for error monitoring as described below

1. information we collect

we collect only what's necessary to provide the service

• email address (for account creation and communication)
• hashed password (we never store plaintext passwords)
• api key hashes (we never store raw api keys after creation)
• server provisioning data (vm status, ip addresses, order history)
• payment transaction ids from our payment processor

we do not collect real names, phone numbers, physical addresses, government ids, or any other personally identifying information beyond your email

2. how we use your information

your information is used exclusively to operate and maintain your account, provision and manage your servers, process payments, send critical service notifications (downtime, security issues), and provide support when you contact us

3. information sharing

we do not sell, trade, or rent your personal information, period, we may share information only with our payment processor (nowpayments) to complete transactions, with posthog and sentry as described below in their respective capacities as data processors, if required by law (we will resist and notify you if legally permitted), or to protect the security of our infrastructure

4. data security

passwords are hashed with bcrypt, api keys are stored as sha256 hashes, the raw key is shown once at creation and never stored, all api communication uses https, server access is protected by ssh keys and root passwords known only to you

5. cookies and analytics

we use minimal cookies for authentication (jwt session tokens), we do not use advertising cookies or sell tracking data to third parties

we use posthog for product analytics, posthog may collect page views, feature interactions, and session recordings (including mouse movements and clicks) to help us understand how the product is used, posthog operates as a data processor under our instruction, you can opt out of session recordings by contacting us at the address in section 11

we use sentry for error monitoring and crash reporting, sentry automatically collects error stack traces and may include contextual data (such as browser type and page url) at the time of an error, sentry operates as a data processor under our instruction

we do not use google analytics, facebook pixel, or third-party advertising networks

6. server data

we do not access, monitor, or inspect the contents of your servers, your server is your space, when you destroy a server, all data on it is permanently deleted from our infrastructure, we do not maintain backups of your server data

7. third-party services

we use the following third-party services, each acting as a data processor under our instruction

• nowpayments — cryptocurrency payment processing, their privacy policy governs how they handle payment data
• posthog — product analytics and session recording, see posthog.com/privacy
• sentry — error monitoring and crash reporting, see sentry.io/privacy

8. data retention

account data is retained for the duration of your account, server data is deleted upon server destruction, payment records are retained as required for accounting purposes, if you delete your account, we will remove your personal data within 30 days

9. your rights

you can access your account data at any time via the dashboard or api, delete your account and all associated data, export your server and account information, and request details about what data we hold on you, to exercise any of these rights — or to opt out of session recordings — contact us at the address in section 11

10. changes

we may update this policy as our service evolves, material changes will be communicated via the website, continued use after changes constitutes acceptance

11. contact and data controller

the data controller for information collected through this service is blackopscloud

for privacy questions, data requests, or to exercise your rights under applicable law, email us at: privacy@blackopscloud.com

this address is available to anyone regardless of whether they hold an account, you do not need to be logged in to contact us about your data