1. What we collect

Account details: your email address and a securely hashed password. If you choose to add them, your name, company, phone number and postal address.
Security data: two-factor authentication settings and, when you use them, recovery codes.
Sign-in and activity records: the IP address you registered and last signed in from, and a log of important account actions (such as sign-ins, orders, payments, password changes and server actions) with the IP address and browser type used.
Services and billing: your servers, domains and other services, invoices, payments and account balance history. For crypto payments we keep the payment reference from the gateway; we never receive your wallet's private keys or any card details.
Support: the content of support tickets and any files you attach to them.
Contacts: names and email addresses of any contacts you add to your account to receive copies of our emails.
Domain registrations: the registrant (owner) details you enter for a domain. The registrant is the domain's legal owner, so these are your own details; if you add ID Protection, they are kept out of the public WHOIS.
Live chat: the messages you send in the chat on our website, the page you sent them from, your IP address, and any name, email address or Telegram username you choose to leave.

We do not inspect the content of your servers or the traffic they send and receive as part of providing the service.

2. Why we use it

To create and run your account and to provide, renew and support the services you order.
To send invoices, renewal reminders, service notices and replies to your tickets.
To protect your account and our network: detecting unusual sign-ins, preventing fraud and abuse, and investigating complaints under our Terms of Service.
To keep the financial records we need for accounting.

We do not sell your data and we do not use it for advertising.

3. Who we share it with

We share personal data only with the service providers we need to run ClientVPS, and only what each one needs:

Payment gateways (Plisio and ArionPay): your email address and the order details when you pay through them.
Email delivery (Mailgun): your email address and the content of the emails we send you.
Domain registrar (Openprovider) and domain registries: the registrant details for domains you register or transfer.
Server and network providers: technical details needed to set up your server, such as its hostname, operating system and plan. They do not receive your email address.
Hosting and network infrastructure: our database host and Cloudflare, which carries traffic to our website and therefore processes visitors' IP addresses.
Our staff tools: our team receives alerts about new accounts, orders, payments and tickets, including the customer's email address, through a private Telegram channel.
Live chat (Telegram): your chat messages, the page you wrote from and any contact details you leave are delivered to our support team's private Telegram group, and our replies return the same way. If you leave an email address, a reply may also be emailed to you when you are no longer on the website.

We disclose personal data to authorities only when we are legally required to, as described in our Terms of Service.

4. Cookies and local storage

We use one essential cookie, which keeps you signed in. It cannot be read by scripts on the page and is sent only to our own website.
Your browser's local storage keeps your preferences, such as language, currency, cookie choice and notification sound, and a copy of your account profile so pages load signed in. If you use the live chat, it also keeps a random key that lets your browser continue the conversation.
Google Analytics runs only if you allow it in the cookie banner; until then, and if you decline, it stores nothing and sends nothing. With your permission it sets Google's analytics cookies and sends usage data, such as the pages you visit, your browser and your approximate location, to Google LLC under Google's privacy policy. Google Analytics 4 does not log or store IP addresses. To change your choice, clear this website's data in your browser and the banner will ask again. We use no advertising or other tracking scripts.

5. How long we keep it

We keep your account data while your account is open.
When you close your account, we mark it closed and you can no longer sign in, but we keep your service, invoice, payment and sign-in records to meet accounting obligations and to answer lawful requests. We do not currently delete these records automatically.
Support tickets are kept with your account so we can refer back to them.
Live chat conversations are kept so we can follow up on them, like support tickets.

6. How we protect it

Passwords are stored only as secure hashes, connections to our website are encrypted, sign-in sessions use a protected cookie, and you can turn on two-factor authentication. Access to customer data is limited to staff who need it. No system is perfectly secure, so please use a strong, unique password and two-factor authentication.

7. Your choices and rights

You can view and update your account details at any time in your client area.
You can close your account from your client area; section 5 explains what we keep afterwards.
You can ask us for a copy of the personal data we hold about you, or ask us to correct it, by opening a support ticket. Depending on where you live, you may have further rights under data protection law.

8. Children

Our services are for people aged 18 or over, as set out in our Terms of Service. We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy. The date at the top shows when it last changed, and we will tell you about important changes by email.

10. Contact

Questions about your data or this policy? Open a support ticket from your client area or email support@clientvps.com.

Privacy Policy