Privacy Policy

This policy applies when you visit the vpszap website, register or log in to an account, configure and purchase a rental plan, use the console (including device information and operations), submit support tickets, contact customer support, or use our API or integrations.

Even if you only browse public pages without logging in, we may still collectlimited technical information(such as device type, browser identifier, access time, and approximate location) for security and statistical analysis.

Depending on the features you use, we may process the following categories of information:

• Account & Identity:Email address, account identifier, and passwords protected by irreversible hashing; records generated when sending verification codes during registration or login (e.g., timestamps and result status).
• Orders & Rental Configuration:Selected machine type and billing cycle (daily/weekly/monthly/quarterly, etc.), optional add-ons such as SSD expansion and Thunderbolt interconnect, data center region (e.g., Singapore, Japan, Korea, Hong Kong, US West), and metadata related to order status and provisioning progress.
• Payment Information:Order amount, payment status, transaction reference number, etc.;Sensitive payment credentials such as full card numbers are handled by third-party payment services; we only receive the minimum information required for payment confirmation and reconciliation.
• Connection & Technical Support:Connection information presented or recorded in the system to enable SSH/VNC and other remote access (used by you under secure conditions); content and attachments submitted viathe ticketing systemor email.
• Service & Log Data:Access IP addresses, request logs, error and performance diagnostic data, and fraud prevention and security alert data.
• Communication Preferences:Service notifications you opt in to (such as renewal reminders and maintenance announcements) and unsubscribe records.

We use your information on a lawful basis for the following purposes:

• Creating and maintaining accounts, and completing identity verification (including email verification codes and password login);
• Processing orders, confirming payments, activating and delivering rental resources, and in scenarios such asordering without being logged inlinking to your account and providing follow-up service;
• Displaying device and order information in the console, and when you initiate power-on, shutdown, or restart requests,routing through support tickets or internal workflowsto complete the operation;
• Providing customer support, dispute resolution, and billing communication (and do not constitutecommitments regarding refunds, credits, or discounted compensation are governed by the Terms of Service);
• Maintaining system and network security, detecting abuse, and meeting audit and compliance requirements;
• Sending product updates and non-marketing service communications where consent has been obtained or as permitted by law.

We do not sell your personal information to third parties. We may share or allow authorized processors to handle your data only in the following circumstances, limited to what is strictly necessary:

• Payment & Reconciliation:andthird-party payment channels(such as the payment gateway you select at checkout) to share information required to complete the transaction;
• Infrastructure & Communications:Vendors providing data center, hosting, email delivery, monitoring, and logging services process data under contractual obligations;
• Legal & Rights Protection:As required by regulators or judicial authorities, or as necessary to establish, exercise, or defend legal claims;
• Restructuring:In the event of a merger, acquisition, or asset transfer, we will require the successor to remain bound by this policy or obtain fresh consent as required by law.

Your rental instance and associated metadata may be hosted in the data center of your selected region. For website operations, payment processing, customer support, and backups, information may also be transferred between our systems and those of our processors located inoverseas jurisdictions. We will apply contractual and appropriate technical safeguards (such as encrypted transmission and access controls) to manage these transfers, and will implement additional mechanisms where required by applicable law.

We implement reasonable technical and organizational measures, including transport-layer encryption (e.g., TLS), strict access controls, one-way protection for passwords and credentials, and continuous infrastructure monitoring. Rental devices arededicated physical machines, and the disk space associated with your workloads is not shared with other tenants under normal circumstances.

Please understand that no network environment can guarantee absolute security. In the event of an incident that may affect your rights, we will notify you in a timely manner and report to the relevant authorities as required by applicable law.

We use cookies and similar technologies to maintain login sessions, remember language or UI preferences, measure traffic and conversions, and prevent automated abuse. You can manage cookies through your browser settings; disabling certain cookies may cause issues with login, checkout, or console functionality.

To the extent permitted by applicable law, you may request:

• A copy of the personal information we hold about you;
• Correction of inaccurate or incomplete information (also available through account settings or a support ticket);
• Deletion or restriction of processing (except where required by law);
• Withdrawal of consent previously given for processing (without affecting the lawfulness of processing carried out before withdrawal);
• An explanation of certain automated decisions (where we offer such functionality and the law grants you this right).

To exercise your rights, please send an email to[email protected], stating the type of request and your account identifier. We will respond within a reasonable timeframe; complex requests may be extended as permitted by law.

We retain information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. In general: account data is retained during the account's lifetime and for a reasonable period after deletion for dispute resolution and compliance; order, invoice, and tax records may be retained until the statutory period expires (which may be up to several years depending on applicable law).

The Service is primarily intended for adults. If you are under 18, please use the Service with the consent and guidance of a guardian. If we discover that we have collected personal information from a minor without appropriate consent, we will promptly delete it or take steps to anonymize it.

We may revise this policy from time to time. If changes may materially affect your rights, we will notify you in advance through a prominent notice on our website, email, or other reasonable means.Your continued use of the Service after the effective date constitutes your acceptance of the updated policy; if you disagree, please stop using the Service and delete your account (if applicable).

If you have any questions, complaints, or rights requests regarding this policy, please contact us through the following:

• Privacy email:[email protected]
• Technical support and order inquiries: log in to the console and submit viathe ticketing system, or see the Contact Us page for details.