Privacy Policy

NodeX Hosting ("NodeX", "we", "us") runs nodexhosting.net and the services offered on it. This policy explains how we handle personal information.

Information you give us: - Account details: name, email address and profile picture. - Sign-in methods: a password (stored only as a one-way hash), passkeys, and authenticator app settings (stored encrypted). - Connected accounts: if you sign in with or connect Discord or Google, we receive your account ID, name, email and avatar from them. - Support tickets, job applications and any files you attach.

Information created when you use our services: - Billing records: invoices, wallet transactions, credits and subscription status. Payment card details are handled by Stripe. - Server details: names, plans, resource usage and status. - Security records: IP address and browser details for sign-ins and active sessions, and an audit log of important account and staff actions.

We use your information to: - Create and run your account and services. - Process payments, renewals and refunds. - Keep accounts secure, for example by detecting suspicious sign-ins, enforcing two-factor authentication and preventing abuse. - Answer support requests and review job applications. - Send service emails, such as receipts, security alerts and important account notices. - Meet our legal obligations.

We don't sell your personal information, and we don't use it for advertising.

We use a small number of service providers to run NodeX. They only receive what they need to provide their service to us: - Cloudflare: hosts the website, database and file storage, and protects the network. - Stripe: processes payments. - Resend: delivers our emails. - Discord and Google: only if you choose to sign in with or connect them. - Discord (staff notifications): our team receives internal alerts in private Discord channels. These can include your name, payment amounts, server names and ticket subjects.

We may also share information if the law requires it, to protect the rights and safety of our customers or our network, or as part of a merger or sale of the business.

We only use cookies needed for the site to work: - Sign-in cookies that keep you signed in and protect forms against forgery. - A short-lived cookie used while you connect a Discord or Google account. - Security cookies set by Cloudflare to filter malicious traffic.

We don't use advertising or analytics cookies.

We keep account information while your account is open. Sign-in sessions expire after 30 days.

Billing records and the security audit log are kept for as long as we need them for accounting, security and legal reasons, even after an account is closed. When a server is deleted, its files are removed from our systems.

You can update your name and profile picture, manage connected accounts, and sign out other devices from your Account page.

You can also ask us to: - Give you a copy of the personal information we hold about you. - Correct information that's wrong. - Delete your account and personal information, except for records we must keep by law.

Send these requests through a support ticket from your dashboard (nodexhosting.net/dashboard/tickets). Depending on where you live, you may have additional rights under local law.

We protect information with encryption in transit, hashed passwords, encrypted authenticator secrets, optional passkeys and two-factor authentication, two-factor that's required for all staff, and an audit log of sensitive actions. No system is perfectly secure, so please use a strong, unique password and turn on two-factor authentication.

Our services aren't intended for children under 13, and we don't knowingly collect their personal information. If you think a child under 13 has created an account, let us know through support and we'll delete it.

We'll update the date at the top of this page when this policy changes, and email you about significant changes.

Privacy questions or requests? Reach us through a support ticket from your dashboard (nodexhosting.net/dashboard/tickets).