Privacy Policy
Last updated: 2026-06
This policy explains how AixNox ("the Platform") collects, uses, and protects your information when you use our services.
1. Information We Collect
- Account information: registration email address, encrypted password hash;
- Resource metadata: specifications, region, status, and lifecycle records of instances you create;
- Billing information: balance, order history, and payment channel transaction IDs (full payment card numbers are never stored);
- Monitoring metrics: CPU, memory, disk, and network usage reported by your instances (used for billing and risk control);
- Technical information: session tokens for authentication and necessary access logs.
2. How We Use Your Information
To deliver and operate your cloud servers, process billing and reconciliation, trigger monitoring and risk-control alerts, maintain account security and regulatory compliance, and — where you have consented — send service-related notifications.
3. Information Sharing
To deliver the service, certain information is shared with necessary service providers: our email provider (for verification codes and notifications), payment channels (for top-up processing), and hosting and infrastructure providers required to run your instances. We do not sell your personal information.
4. Data Security
Sensitive fields (such as infrastructure API credentials and managed private keys) are encrypted at rest with AES-GCM; all traffic uses HTTPS; monitoring agent reports are authenticated with per-instance tokens. We take reasonable measures to protect your data, but no system can guarantee absolute security.
5. Data Retention
Account and billing records are retained for the period required by law or operational reconciliation. Monitoring metrics are rolled over according to the configured retention period (a few days by default). After an instance is destroyed, its credential mappings are released.
6. Cookies
We use only the cookies strictly necessary to maintain your login session (session token). We do not use cookies for third-party advertising or tracking.
7. Your Rights
You may contact the Platform via your account's registered email to request access to, correction of, or deletion of your personal information (subject to legal retention obligations). Password changes and password recovery can be completed self-service on the login page.