Privacy Policy

Last updated: July 18, 2026 — Operated by CIMAX Technologies LLC

ZENYT_PRIVACY_REV_2026.07

At ZenytCloud (operated by CIMAX Technologies LLC), we prioritize the confidentiality and safety of your personal data. This Privacy Policy outlines how we collect, process, secure, store, and share your personal data when using our hosting, VPS, and game server solutions, or when navigating our billing portal (Paymenter).

1. Data Controller

OWNER_01

The Data Controller is CIMAX Technologies LLC, a registered company in the United States, owner of the ZenytCloud brand. For any inquiry, exercise of GDPR rights, or privacy requests, contact us at our dedicated address: [email protected].

2. Personal Data Collected

DATA_02

We only collect data strictly necessary for billing, service provision, and network integrity. Below are the data types processed by ZenytCloud:

User Provided Profile

First & last name, email address, telephone number, mailing address, company name, and encrypted passwords. Used to register your billing profile.

System Audit Logs

IP address logging at authentication endpoints (Paymenter), API & console sessions client IP logging (Proxmox VE access.log), panel audit trails (Pterodactyl), and SFTP/Websocket socket nodes telemetry (Wings).

Virtual Instance Data

We do not access, monitor, index, or parse any files, databases, or data stored inside your VPS or Game nodes, unless explicitly requested for technical support or under formal abuse procedures.

3. Legal Bases for Processing (GDPR)

LEGAL_03

If you reside in the European Union, we process your personal data based on the following legal grounds under GDPR Article 6:

- Contractual Execution: Essential to generate invoices, process transactions, provision instances, and provide customer support.
- Legitimate Interests: Securing our autonomous system network (AS200282) from DDoS/DoS threats, verifying invoices to prevent payment fraud, and mitigating network abuse.
- Legal Obligation: Compliance with local taxation, business regulations, and federal bookkeeping laws in both the United States and the European Union.

4. Data Sharing & Sub-Processors

SHARING_04

We never sell your personal data. We only share information with trusted sub-processors required to deliver our core cloud solutions:

Stripe & PayPal
Payment Processing

Secures card & bank transactions. Details are handled direct by PCI-DSS gateways. ZenytCloud doesn't store credit card details locally.

Cloudflare
CDN & DDoS Guard

Secures the billing portal against intrusions and web application attacks. Cloudflare processes IP addresses and web browser meta-headers.

Tube-Hosting
Network Upstream

Routes the internet traffic to and from client virtual servers. Network logs and raw packets transit through their network routers.

SMTP Providers
Transactional Email

Dispatches email confirmations, invoice alerts, and support responses. Shares registration names and email addresses only.

5. Global Data Transfers (Extra-EU)

TRANSF_05

Since ZenytCloud operates under the US entity CIMAX Technologies LLC, billing data and account details (excluding local European VPS virtual machine content) may be transferred and stored in the United States. We guarantee these transfers are governed under the Standard Contractual Clauses (SCC) approved by the European Commission, ensuring a level of protection equivalent to European standards.

6. Security Measures

SEC_06

Encryption: All remote connections to Paymenter, Proxmox VE, and Pterodactyl panels are routed exclusively via secure HTTPS/SSL protocol with TLS encryption.

2-Factor Authentication (2FA): Our client portal supports Time-based One-Time Passwords (TOTP). We highly recommend all clients enable 2FA on their accounts to protect panel administrative access.

7. Data Retention

RETENT_07

Data retention periods are split based on the legal requirement of the categories:

Account & Instance Content INSTANT PURGE

Upon client profile closure request, all database credentials, billing tickets, active game nodes, and virtual machines are deleted permanently and immediately from all node clusters.

Taxation & Financial Ledgers 7 TO 10 YEARS LOCK

Required under IRS tax laws (Wyoming, US) and EU tax compliance. All issued invoices, payments, and billing details are retained in a read-only secure database for tax auditing purposes only.

8. Your Rights Under GDPR

GDPR_08

If you reside in the EU, you have key rights regarding your personal information. You can exercise these rights by contacting us at [email protected]:

✔
Right of Access

Obtain copies of all personal data we hold about you.

✔
Rectification

Correct or update inaccurate or incomplete billing profile data.

✔
Erasure (Right to be Forgotten)

Request deletion of profile and ticket logs, except legal taxation invoices.

✔
Restrict & Oppose

Limit or oppose the scope and processing parameters of your log files.

✔
Portability

Download profile data in a structured, standard readable JSON format.

✔
Lodge Complaint

Report to supervisory bodies (like the Italian Garante della Privacy).

9. Cookie Policy

COOKIES_09

ZenytCloud uses strictly essential technical cookies required for service operation:

- Session Cookie (Paymenter): Maintains client authentication status and billing panel layout choices.
- Security Cookie (Cloudflare): Identifies benign network traffic and blocks malicious automated bot actions.

We do not deploy marketing, advertising, or third-party profiling cookies without your explicit prior consent.

10. Modifications to this Policy

REV_10

We reserve the right to modify this Privacy Policy. Clients will be notified of substantial revisions via email or the billing panel with at least 14 days of advance notice. Continuous use of ZenytCloud after changes take effect constitutes acceptance of the revised privacy statement.