Privacy Policy

Service Data is the personal information we collect or generate in the implementation of our PyxCloud SaaS program, excluding any Customer Data and Partner Data. Service Data consists of:

• Account information: Usernames, names, contact details, job titles, current cloud provider, storage requirements, and related information provided when obtaining a license.
• Cloud payments and transactions: Reasonable business records of charges, payments, and billing details related to your cloud provider.
• Cloud settings and configurations: Your current and new cloud configuration and settings, including resource identifiers and attributes. These cannot be disseminated to third parties through PyxCloud.
• Technical and operational details: Usage data, operational status, software errors, crash reports, authentication details, quality metrics, device identifiers, cookie tokens, and IP addresses.
• Direct communications: Records of your communications and interactions with us and our partners, including feedback, questions, and technical support requests.

When you procure third-party services

We share Service Data outside of PyxCloud when you choose to procure a third-party service through PyxCloud, or use a third-party application that requests access to your Service Data.

With your consent

We'll share Service Data outside of PyxCloud where we have obtained your explicit consent.

With your administrators and authorized resellers

When you use PyxCloud, your administrator and authorized resellers may:

• View account and billing information, activity and statistics
• Change your account password
• Suspend or terminate your account access
• Access your account information to satisfy applicable law or legal process
• Restrict your ability to delete or edit your information or privacy settings

For external processing

We do not sell your Service Data to any third parties. We share Service Data with trusted third-party providers to process it on our behalf, in compliance with this Privacy Notice and appropriate confidentiality and security measures.

For legal reasons

We share Service Data outside of PyxCloud when we have a good-faith belief that access or disclosure is reasonably necessary to:

• Comply with applicable law, regulation, legal process, or enforceable governmental request
• Enforce applicable agreements, including investigation of potential violations
• Detect, prevent, or otherwise address fraud, security, or technical issues
• Protect against harm to the rights, property or safety of PyxCloud, our customers, users, and the public

We retain most types of Service Data for up to 180 days. However, some data may be kept for longer where there is a legitimate business need:

• Security, fraud and abuse prevention: To protect against fraudulent access attempts, including device identifiers, cookie tokens, IP addresses, and log data.
• Legal or regulatory requirements: When required by enforceable legal process, such as a lawful subpoena.
• Tax, accounting or financial requirements: Typically a minimum of five years for payment and billing records, as required for tax or accounting purposes.

• California Consumer Privacy Act (CCPA)
• Virginia Consumer Data Protection Act (VCDPA)
• Colorado Privacy Act (CPA)
• Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA)
• Utah Consumer Privacy Act (UCPA)
• Florida Digital Bill of Rights (FDBR)
• Texas Data Privacy and Security Act (TDPSA)
• Oregon Consumer Privacy Act (OCPA)
• Montana Consumer Data Privacy Act (MTCDPA)

We retain Service Data only for as long as necessary. Most types are retained for up to 180 days, with longer retention for security, fraud prevention, and legal compliance. Payment and billing information is retained for a minimum of five years. Our basic policy is not to collect personal information of Korean residents under the age of 14.

• General policy: This Privacy Notice outlines our general policy relating to Service Data.
• Internal policies: We establish internal policies about handling measures and persons in charge.
• Personnel measures: We conduct periodic training for employees on handling personal data.
• Physical measures: We take measures to prevent unauthorized access and prevent theft or loss of devices and electronic media.