Privacy Policy

Account data: your name, email address, password (stored only as a salted hash), and identifiers for your hosting account.

We use personal data to: provide, operate and secure the service; provision and manage your servers; process payments and subscriptions; send transactional emails (login codes, deployment notices, invoices, security alerts); detect and prevent fraud, abuse and attacks; provide customer support; comply with legal obligations; and improve the service.

We do not sell your personal data, and we do not use it for third-party advertising.

Where the GDPR or similar laws apply, we rely on: performance of a contract (providing the service you ordered); legitimate interests (security, fraud prevention, service improvement); legal obligation (tax and accounting); and, where applicable, your consent (which you may withdraw at any time).

We use a strictly necessary session cookie to keep you signed in, and may use similar mechanisms required for security (for example, rate-limiting and CSRF protection). We do not use advertising or third-party tracking cookies.

We share personal data only with service providers who help us run the service, under appropriate safeguards:

We may also disclose data where required by law or to protect our rights, users or the public.

We keep account and service data while your account is active and for a reasonable period afterwards to meet legal, tax and accounting obligations. Invoices and billing records are retained as required by law. Server files are deleted after termination following a short grace period. Your account activity (audit) trail is retained for security and is visible only to you (and, where necessary for support, to our administrators).

We use technical and organisational measures to protect personal data, including password hashing, encrypted transport (HTTPS/TLS), access controls, per-account isolation, and audit logging. No method of transmission or storage is 100% secure, but we work to protect your data and to limit access on a need-to-know basis.

Depending on your location, you may have the right to access, correct, delete, restrict or object to certain processing of your personal data, to data portability, and to withdraw consent. You can manage much of your data from your client area, or contact us to exercise these rights.

You also have the right to lodge a complaint with your local data-protection authority.

Our servers and providers may be located in different countries (including Singapore, Europe and North America). Where personal data is transferred internationally, we take steps to ensure it receives an appropriate level of protection consistent with applicable law.

The service is not directed to children below the minimum digital-consent age in their jurisdiction. If you believe a child has provided us personal data without appropriate consent, contact us and we will take appropriate steps.

We may update this Privacy Policy from time to time. Material changes will be posted here with a new “last updated” date and, where appropriate, notified by email.

For privacy questions or requests, email contact@ggnodes.com or use the support area in your client area.