Privacy Policy

We run rented Mac hardware, not an ad network. This page lists exactly what data KVMFLUX collects, why we keep it, who processes it and how you get it deleted.

Last updated: 2025-01-10

01Scope

This policy covers kvmflux.com and the KVMFLUX service: dedicated Mac mini M4 machines you rent and access over SSH or VNC. It applies to everyone who browses the site, opens an account, places an order or sends us a message.

It does not cover third-party sites we link to, or software you choose to install on a rented machine.

02Data we collect

We collect the minimum needed to provision a machine and bill for it. No tracking pixels, no ad SDKs, no data brokers.

Category What it includes Collected when
Account Email address, hashed password, chosen plan and region You sign up or place an order
Billing Order records, invoices, payment status. Card numbers go directly to Stripe and never touch our servers You pay for a rental period
Support Your email address and message body when you write to our support address or open a console ticket; transactional mail is delivered by Resend You email support or open a ticket
Operations Server logs with IP address, timestamp and requested URL; connection metadata for SSH and VNC sessions (time and source IP, not content) You use the site or connect to a machine

We do not ask for government IDs, phone numbers or physical addresses, and we do not build behavioral profiles.

03How we use it

  • Provisioning: your email and order details drive account creation, machine assignment and credential delivery.
  • Billing: order records let us charge the correct amount per rental cycle and issue invoices in USD.
  • Support: contact-form content is used to answer your question and for nothing else.
  • Abuse prevention: connection metadata and server logs help us detect fraud, credential stuffing and network abuse.
  • Service notices: we email you about expiring rentals, maintenance windows and security issues affecting your machine.

We do not sell or rent personal data to anyone, and we do not send marketing email unless you explicitly opt in.

04Retention

  • Account data: kept while your account is active, deleted within 30 days of a confirmed deletion request.
  • Billing records: retained for as long as tax and accounting rules in our operator's jurisdiction require, then purged.
  • Support messages: deleted within 12 months of the ticket being resolved.
  • Server and connection logs: rotated automatically and kept for a maximum of 90 days.
  • Rented machine storage: the SSD is securely wiped after your rental ends, before the hardware is reassigned.

05Third-party processors

Two external services touch your data, each for a single narrow purpose.

Stripe — payments

All card payments run through Stripe. Your card number, expiry and CVC are entered into Stripe-hosted fields and processed under Stripe's own privacy policy. KVMFLUX receives only a payment confirmation and the last four digits for invoice display.

Resend — transactional email

Contact-form submissions and service notices are delivered through Resend, an email API provider. Resend processes the recipient address and message content solely to deliver the email.

Both processors are contractually limited to processing data on our instructions. We add no analytics scripts, no social widgets and no third-party fonts to this site.

06Data on your rented Mac

Each machine is dedicated hardware under your control. We do not inspect, scan or copy files stored on your rented Mac, and we hold no keystroke or screen recordings of your sessions.

Staff access the machine only in two cases: you explicitly ask for hands-on support, or we receive a valid legal order from an authority with jurisdiction over our operator. In either case access is logged.

Back up your data before the rental ends. Once the SSD wipe runs, nothing is recoverable.

07Your rights

Regardless of where you live, we honor the following for every customer:

  • Access: request a copy of the personal data we hold about you.
  • Correction: fix an inaccurate email address or account detail.
  • Deletion: have your account and personal data erased, except billing records we must keep for statutory periods.
  • Export: receive your account data in a machine-readable format.
  • Objection: tell us to stop any processing you believe exceeds this policy.

Send requests to [email protected]. We verify the request against your account email and respond within 30 days.

08Security

  • All site and API traffic is encrypted with TLS.
  • Passwords are stored as salted hashes, never in plain text.
  • Machine credentials are generated per rental and invalidated at wipe time.
  • Internal access to customer records is restricted to staff who need it and is logged.

No system is breach-proof. If an incident affects your data, we will notify you at your account email without undue delay and describe what happened and what we did.

09Changes

When this policy changes, we update the date at the top of this page. For material changes that reduce your rights, we email active customers before the change takes effect. This policy is interpreted under the laws of the jurisdiction in which the platform operator is established.

10Contact

Questions about this policy, or a rights request? Reach us at [email protected] and mention "privacy" in your message so it gets routed straight to the right person. Our service terms live on the Terms of Service page.