Privacy Policy

Last updated: March 8, 2026 — ZenVPS (zenvps.io)

1. Data Controller

ZenVPS ("we", "us", "our") is the data controller responsible for your personal data. For privacy inquiries, contact us at [email protected].

2. Personal Data We Collect

Data Category	Examples	Purpose
Identity Data	Name, email address	Account creation and management
Financial Data	Payment method details (processed by Stripe/PayPal)	Invoice processing
Technical Data	IP address, browser type, login timestamps	Security, fraud prevention, service delivery
Service Data	VPS configuration, hostname, server IP	Service provisioning and support
Communication Data	Support tickets, email correspondence	Customer support

3. Legal Basis for Processing (GDPR Art. 6)

Contract Performance (Art. 6(1)(b)): Processing necessary to provide the VPS services you purchased.
Legitimate Interest (Art. 6(1)(f)): Fraud prevention, network security, and service improvement.
Legal Obligation (Art. 6(1)(c)): Tax record-keeping and compliance with law enforcement requests.
Consent (Art. 6(1)(a)): Marketing communications (only with your explicit opt-in consent).

4. Data Sharing

We share personal data only with the following categories of recipients:

Payment Processors: Stripe and/or PayPal for secure payment processing.
Email Service Provider: Brevo (Sendinblue) for transactional email delivery.
Law Enforcement: When required by applicable law or valid legal process.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. Data Retention

Account Data: Retained for the duration of your account plus 30 days after deletion.
Invoice/Financial Data: Retained for 7 years as required by EU tax regulations.
Server Logs: Retained for 90 days for security and abuse prevention.
Support Tickets: Retained for the duration of your account.

6. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

Right of Access (Art. 15): Request a copy of all personal data we hold about you.
Right to Rectification (Art. 16): Request correction of inaccurate personal data.
Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
Right to Restriction (Art. 18): Request restriction of processing of your data.
Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
Right to Object (Art. 21): Object to processing based on legitimate interests.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email [email protected]. We will respond within 30 days as required by GDPR.

7. Cookies

ZenVPS uses strictly necessary cookies for session management and authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required for strictly necessary cookies under GDPR.

8. International Transfers

Your data is processed and stored within the European Union. We do not transfer personal data outside the EU/EEA unless required by a payment processor that maintains adequate safeguards (e.g., Standard Contractual Clauses).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), access controls, firewall protections, and regular security audits of our infrastructure.

10. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR Articles 33 and 34.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

12. Contact & Complaints

For any privacy concerns, contact [email protected]. You also have the right to lodge a complaint with your local data protection supervisory authority.

← Back to ZenVPS