Privacy Policy

What Data We Collect

We collect the minimum data necessary to provide our services. Here's exactly what we store:

Account Data

• Credential: A 32-character random string used for authentication
• Account balance: Your current credit balance
• Account creation date

Payment Data

• Stripe customer ID and payment method ID (if you use card payments) - This allows Stripe to process payments without us storing your card details
• Invoice records: Amount, payment method used (card/crypto), timestamp, description
• Crypto payment references: Order IDs for cryptocurrency payments

Service Data

VPS Instances:

• Server configuration (hostname, IP, OS, specs)
• Billing info (expiration date, auto-renew settings)

Proxy Instances:

• Proxy credentials and configuration
• Whitelisted IPs (datacenter proxies)
• Bandwidth usage (residential proxies)

Support Tickets

• Ticket subject and messages
• Timestamps

Notifications

• System notifications (renewal warnings, etc.)
• Read/unread status

Data Retention

• Inactive accounts with zero balance, no active services, and no open tickets are automatically deleted after 24 hours
• Active accounts are retained as long as they have balance, services, or tickets
• Expired services are removed along with their associated data
• Read notifications older than 30 days are automatically cleaned up

Server Logs

We use Apache as our web server, with all access logs turned off (piped to /dev/null). This means none of the following records are kept :

• IP addresses of visitors
• Request timestamps
• User agent strings

Third-Party Services

We use the following third-party services:

Payment Processing

• Stripe: Payment processing for card payments
• Heleket: Cryptocurrency payment processing

Security

• Altcha: Self-hosted bot protection (no third-party data sharing, no tracking cookies)

Each service has its own privacy policy governing their data handling.

Your Rights

• Access: You can view all your data through your dashboard
• Deletion: You can delete your account at any time by visiting the settings page and using the account deletion flow.

Governing Law & PIPEDA Compliance

Servury is operated by Avalanche Systems Inc. (DBA Servury), a corporation registered in Canada. This privacy policy is governed by and construed in accordance with Canadian federal privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

Under PIPEDA, you have the right to:

• Know what personal information we hold about you and how it is used
• Access your personal information and request corrections
• Withdraw consent to the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)
• Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

Contact

For privacy-related questions, contact us at contact@servury.com