Home / Privacy Policy
Privacy Policy
We collect the minimum data needed to provide service. No email, no phone, no analytics, no tracking. Apache access logs are piped to /dev/null.
What We Collect
We collect the minimum data necessary to provide our services. Here is exactly what we store.
Account data
- Credential. A 32-character random string used for authentication.
- Account balance. Your current credit balance.
- Account creation date.
Payment data
- Stripe customer ID and payment method ID if you use card payments. This allows Stripe to process payments without us storing your card details.
- Invoice records: amount, payment method, timestamp, description.
- Crypto payment references: order IDs for cryptocurrency payments.
We never store credit card numbers, CVV, or raw payment details. All card processing is handled by Stripe.
Service data
For VPS instances: server configuration (hostname, IP, OS, specs) and billing info (expiration, auto-renew settings).
For proxy instances: proxy credentials and configuration, whitelisted IPs (datacenter proxies), bandwidth usage (residential proxies).
Support and notifications
Ticket subjects, messages, and timestamps. System notifications (renewal warnings, etc.) and their read/unread status.
What We Do Not Collect
Things you will never be asked for, and never appear anywhere in our database:
- Email addresses
- Phone numbers
- Names, addresses, or any government ID
- IP addresses of visitors (Apache access logs piped to
/dev/null) - User agents, referrers, tracking cookies
- Analytics, fingerprinting, third-party trackers
- Credit card numbers (handled exclusively by Stripe)
Server Logs
We run Apache as our web server with all access logs disabled. The directive is literally CustomLog /dev/null combined, which means none of the following are kept:
- IP addresses of visitors
- Request timestamps or URLs
- User agent strings or referrers
Error logs are kept for debugging crashes but contain no user identifying information.
Data Retention
- Inactive accounts with zero balance, no active services, and no open tickets are automatically deleted after 24 hours.
- Active accounts are retained as long as they have balance, services, or open tickets.
- Expired services are removed along with their associated data.
- Read notifications older than 30 days are automatically cleaned up.
Third-Party Services
The third-party services we use, and what they touch:
- Stripe. Card payment processing. Receives your card details directly. We only store Stripe's customer and payment method IDs.
- Heleket. Cryptocurrency payment processing. Receives order amount and reference ID, nothing else.
Each service has its own privacy policy governing their data handling. We do not share any other data with them beyond what each transaction requires.
Your Rights
- Access. View all your data through your dashboard at any time.
- Deletion. Delete your account from the settings page. All associated data is removed.
- Export. Invoices and ticket history can be exported. Contact support if you need anything else.
Governing Law and PIPEDA
Servury is operated by Avalanche Systems Inc. (DBA Servury), a corporation registered in Canada. This privacy policy is governed by Canadian federal privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
Under PIPEDA, you have the right to:
- Know what personal information we hold about you and how it is used.
- Access your personal information and request corrections.
- Withdraw consent to the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions).
- Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.
Because we collect the absolute minimum personal information, PIPEDA compliance is straightforward. There is very little to protect.
Contact
For privacy-related questions, write to contact@servury.com.
