Privacy Policy

Overview

This Privacy Policy explains what personal information Nxeon ("we", "us") collects, why we collect it, how we use and share it, and the choices you have. It applies to our website, dashboard, APIs, and related services (the "Services").

Information we collect

We collect information you provide directly, information generated as you use the Services, and information from third parties such as payment processors.

Account data: your name, email address, and hashed password.
Billing data: wallet balance, transaction history, and limited payment metadata (full card details are handled by our payment processor, not stored by us).
Service data: the servers you deploy, their configuration, resource usage metrics, and support tickets.
Technical data: IP addresses, device and browser information, and log data used for security and diagnostics.

Activity and payment records

When you are signed in, we keep a first-party record of how you use the Services so we can support you, fix problems and improve the product. It is collected by Nxeon itself and is not shared with advertising networks. It includes:

Pages you visit in the dashboard, the page you came from, roughly how long you stayed, and your device type, operating system and browser.
Your progress through the deploy wizard: the steps you reach and the options you choose (such as product, game, plan, region, operating system, add-ons and any coupon code), and the step where you stopped.
Payment events: when a checkout is opened, cancelled or expires, and whether a payment succeeded or failed, with the amount, currency, payment method type, the country of the card or billing address, and the reason a payment was declined or needed extra verification, as reported by our payment processor. Refunds, disputes, renewals, wallet top-ups and reminders about unpaid renewals are recorded the same way.
Account actions such as starting, stopping or restarting a server, opening the console, using the file manager (which operation, not file names or contents), installing mods, changing server settings, opening support tickets or chats (not their text), and billing changes.
Error messages shown to you, and sign-in events (sign-up, sign-in, failed sign-in to your account, sign-out, email verification and password resets).

We never record passwords, the contents of your files or servers, what you type into a terminal or console, the text of your messages in this record, or full card numbers (card details are handled by our payment processor). IP addresses in this record are shortened before they are stored, so they identify a network rather than a single device.

How we use information

To provide, operate, secure, and improve the Services.
To provision servers, meter usage, and process billing.
To communicate with you about your account, security, and service changes.
To detect, prevent, and respond to fraud, abuse, and security incidents.
To comply with legal obligations and enforce our agreements.

Legal bases for processing

Where applicable law (such as the GDPR) requires it, we process personal data on the bases of performing our contract with you, our legitimate interests in operating and securing the Services, your consent where requested, and compliance with legal obligations.

We do not sell your personal information. We share it only as needed to run the Services:

Service providers such as payment processors, infrastructure and email providers, acting under contract on our behalf.
Legal and safety recipients where required by law, legal process, or to protect rights, property, and safety.
Successors in the event of a merger, acquisition, or asset sale, subject to this Policy.

Data retention

We retain personal information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Server data is deleted following account or server termination, subject to backup retention windows.

Activity and payment records are kept for 180 days and then deleted automatically. Invoices and the transaction ledger are kept longer where tax and accounting law requires it. Deleting your account deletes your activity record.

Security

We use technical and organizational measures to protect your information, including encryption in transit, hashed credentials, access controls, and network isolation between customer environments. No system is perfectly secure, and you are responsible for securing the software and data you run on your servers.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing or withdraw consent.

You can exercise many of these directly in your dashboard, or contact us to make a request. We will respond consistent with applicable law.

International transfers

Your information may be processed in countries other than where you live. Where required, we rely on appropriate safeguards for such transfers.

Cookies

We use strictly necessary cookies to keep you signed in and to secure the Services. Unless you choose "Opt out" in our cookie banner, we also set a first-party analytics cookie that recognises your browser between visits, and we use advertising measurement identifiers (for example, an ad click identifier in the link you arrived from) to understand which campaigns lead to sign-ups. You can change your choice at any time and control cookies through your browser settings, though some features may not work without them.

Children

The Services are not directed to children under 18, and we do not knowingly collect personal information from them.

Changes and contact

We may update this Policy from time to time; material changes will be communicated through the dashboard or by email. For privacy questions or requests, reach us through the contact page.

Questions about this document? Contact us.