Privacy Policy

This Privacy Policy explains what personal information Nxeon ("we", "us") collects, why we collect it, how we use and share it, and the choices you have. It applies to our website, dashboard, APIs, and related services (the "Services").

We collect information you provide directly, information generated as you use the Services, and information from third parties such as payment processors.

• Account data: your name, email address, and hashed password.
• Billing data: wallet balance, transaction history, and limited payment metadata (full card details are handled by our payment processor, not stored by us).
• Service data: the servers you deploy, their configuration, resource usage metrics, and support tickets.
• Technical data: IP addresses, device and browser information, and log data used for security and diagnostics.

• To provide, operate, secure, and improve the Services.
• To provision servers, meter usage, and process billing.
• To communicate with you about your account, security, and service changes.
• To detect, prevent, and respond to fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our agreements.

Where applicable law (such as the GDPR) requires it, we process personal data on the bases of performing our contract with you, our legitimate interests in operating and securing the Services, your consent where requested, and compliance with legal obligations.

We do not sell your personal information. We share it only as needed to run the Services:

• Service providers such as payment processors, infrastructure and email providers, acting under contract on our behalf.
• Legal and safety recipients where required by law, legal process, or to protect rights, property, and safety.
• Successors in the event of a merger, acquisition, or asset sale, subject to this Policy.

We retain personal information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Server data is deleted following account or server termination, subject to backup retention windows.

We use technical and organizational measures to protect your information, including encryption in transit, hashed credentials, access controls, and network isolation between customer environments. No system is perfectly secure, and you are responsible for securing the software and data you run on your servers.

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing or withdraw consent.

You can exercise many of these directly in your dashboard, or contact us to make a request. We will respond consistent with applicable law.

Your information may be processed in countries other than where you live. Where required, we rely on appropriate safeguards for such transfers.

We use strictly necessary cookies to keep you signed in and to secure the Services. We do not use them to build advertising profiles. You can control cookies through your browser settings, though some features may not work without them.

The Services are not directed to children under 18, and we do not knowingly collect personal information from them.

We may update this Policy from time to time; material changes will be communicated through the dashboard or by email. For privacy questions or requests, reach us through the contact page.