Enterprise Data Protection

Privacy Policy

Our commitment to data sovereignty, GDPR/CCPA compliance, and robust cryptographic privacy for all cloud infrastructure users.

Last Updated: September 01, 2026 • Effective Immediately

Section 1

Identity, Scope & Controller Information

This Privacy Policy governs the manner in which VortexCloud ("we", "us", "our", or the "Company") collects, utilizes, stores, and protects personal information acquired from registered clients, guest visitors, and automated service consumers across the website and cloud provisioning portal.

By registering an account, ordering high-performance NVMe virtual instances, or browsing our platform, you acknowledge and agree to the data practices outlined herein. For data privacy legislation purposes (including the General Data Protection Regulation / GDPR and California Consumer Privacy Act / CCPA), VortexCloud operates as the primary Data Controller for account authentication records and metadata.

Section 2

Information We Collect

To deliver enterprise-grade virtual private server provisioning and manage client account authentication, we collect information within the following categories:

  • Account Credentials: Full name, verified email address, telephone contact (optional), and securely hashed passwords (utilizing Bcrypt multi-round hashing).
  • Technical Connection Metadata: IP addresses, browser fingerprint, operating system user agent, referral headers, and HTTP request timestamps captured in server web logs for DDoS mitigation and unauthorized intrusion detection.
  • Server Configuration Attributes: Selected virtual server resource tiers (vCPU, RAM, NVMe capacity), root password preferences (transmitted strictly over TLS 1.3 encrypted conduits for automated initial configuration), custom hostnames, and datacenter region routing choices.
  • Financial Transaction Logs: Invoice identifiers, transaction hashes (TxID) for cryptocurrency payments, payment timestamps, and masked processor reference IDs. We never store raw credit or debit card numbers on our physical infrastructure.
Section 3

Lawful Basis & Purpose of Data Processing

We process your personal information strictly under legitimate legal frameworks, including:

Contractual Necessity

Executing VPS deployment commands, routing IPv4/IPv6 blocks, generating billing receipts, and delivering automated lifecycle notices.

Network Security & Protection

Screening network traffic for outbound DDoS attacks, spam flooding, brute-force intrusions, and compromised host environments.

Statutory Compliance

Maintaining auditable financial ledgers and invoicing records as required by global taxation and commercial regulations.

Explicit Consent

When you choose to activate optional tracking or analytics cookies via our interactive consent management system.

Section 4

Datacenter Infrastructure & Data Sovereignty

VortexCloud deploys compute workloads across certified Tier-3 and Tier-4 global datacenter facilities located in North America, the European Union, the United Kingdom, and the Asia-Pacific region.

Zero Data Monetization: We do not sell, rent, monetize, or trade customer information, usage habits, or virtual machine disk contents to any third-party marketing brokers or advertisement networks. Server guest storage volumes remain private and encrypted at rest on high-frequency NVMe arrays.

Section 5

Payment Gateways & Financial Security

Payment transactions are routed through audited, PCI-DSS Level 1 compliant payment gateways (such as Stripe) and decentralized public blockchain verification networks (USDT TRC20, USDC Polygon). VortexCloud servers never ingest or store unencrypted payment card PANs or CVVs.

Section 6

Data Retention & Scheduled Erasure

Account profile records are retained for the active lifecycle of your client membership. Upon service cancellation or termination:

  • Virtual disk storage arrays and private instance images are scrubbed and permanently overwritten within 24 to 72 hours of server termination.
  • Financial invoicing records and transaction logs are maintained in read-only form for standard accounting compliance periods.
  • Access logs and transient server metrics are purged on a rolling 90-day retention schedule.
Section 7

Your Rights Under GDPR & CCPA

Regardless of your geographical residency, VortexCloud affords you full data sovereignty rights:

Right to Access: Request a complete export of your stored personal data records.
Right to Rectification: Update inaccurate or outdated profile details directly via your Customer Portal.
Right to Erasure ("Be Forgotten"): Request complete account decommissioning and personal record purging.
Right to Restriction: Limit automated processing of specific operational metadata.
Section 8

Data Protection Officer & Legal Inquiries

For legal service requests, GDPR Data Protection inquiries, or to exercise your privacy rights, please reach out to our legal department:

Official Legal Desk

Send Legal Inquiry