This Privacy Policy explains how Pylox ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit pylox.net, use our client area, control panels, or purchase and use our hosting services (together, the "Services"). It applies to everyone who browses our website, registers an account, or uses our hosting infrastructure.
1. Controller & Contact
Pylox is the data controller responsible for the personal data we collect, unless stated otherwise below. If you have any questions about this policy or wish to exercise your rights, contact us at hello@pylox.net or through our support system.
2. Data We Collect
We collect only the data required to provide and secure our Services, divided into the following categories:
- Account information. When you register, we collect your name, email address, and a securely hashed password (bcrypt). If you log in with Discord, we collect your Discord identifier and username.
- Billing and transaction data. To process payments we collect your billing email, payment method details (handled by our payment providers — we never store full card numbers), order history, and invoices. We may generate invoices with your details for tax and bookkeeping purposes.
- Service usage data. Information about the services you order (plan, resources, locations), server names, panel credentials, IP addresses assigned to your servers, and resource usage.
- Technical data. When you use the client area we may log your IP address, browser type, device information, and the pages you access, for security and fraud prevention.
- Communications. Messages you send us through support tickets and any emails you exchange with our team.
- Cookies and local storage. We use an essential session cookie to keep you logged in and protect your account. On our marketing website we store only local preferences in your browser's local storage (theme, language, and cookie consent choice). We do not use advertising or third-party tracking cookies.
3. Data Stored on Your Servers
As a hosting provider, the content you store on your servers — websites, databases, application code, game files, emails, and any other data you host — belongs to you. You are the data controller of that content and its lawful processing is your responsibility. Pylox acts as a data processor for that content: we only access it to provide support with your consent, to resolve technical issues, to comply with legal obligations, or to enforce our Terms of Service. We never sell or commercially exploit your hosted content.
4. How We Use Your Data
- To create and manage your account and authenticate you when you log in.
- To provision, manage, bill, and support the services you order.
- To process payments, prevent fraud and chargebacks, and issue invoices.
- To communicate with you about your account, orders, maintenance, or important updates.
- To secure our infrastructure, detect and block abuse or attacks, and comply with legal obligations.
5. Legal Bases (GDPR)
We process personal data on the following grounds:
- Contract performance — to provide the services you have ordered and to bill you.
- Legitimate interest — to secure and improve our Services, prevent fraud and abuse, and keep you informed of important changes.
- Legal obligation — for tax, invoicing, accounting, and regulatory compliance.
- Consent — where we rely on it (for example, optional communications or cookies that are not strictly necessary), you may withdraw consent at any time.
6. How We Share Data
We do not sell or rent your personal data. We only share data with the following categories of recipients, limited to what is necessary:
- Payment providers — Stripe and PayPal process your payments securely. They receive only the data needed to complete the transaction and have their own privacy policies.
- Infrastructure providers — our data centers in Madrid (Spain) and Frankfurt (Germany), and our virtualization panel (Hydrodactyl), host your services and may process technical data required for operation.
- Email delivery — our mail server (mail.pylox.net) delivers account and notification emails to you.
- Authorities — where required by law, court order, or to protect the rights and safety of Pylox or others.
7. Data Retention
We retain your data only for as long as necessary:
- Account data is kept while your account is active and for a reasonable period after closure.
- Billing and invoice data is retained for the period required by tax and accounting law.
- Hosted content is retained for the duration of your service and removed when services are cancelled, expire without renewal, or when an account is deleted, in line with our Terms of Service.
- Logs and security data are kept for a limited period needed to investigate incidents.
8. Data Security
We protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS) in transit, hashed passwords (bcrypt), access control on our infrastructure, restricted administrative access, and monitoring of our systems. No method of transmission or storage is 100% secure, but we continuously work to safeguard your information.
9. Your Rights
If you are located in the EU/EEA, you have the right to:
- Access a copy of the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your personal data ("right to be forgotten"), subject to legal retention requirements.
- Restrict or object to certain processing.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with your local supervisory authority (e.g., AEPD in Spain).
To exercise any of these rights, contact hello@pylox.net. We will respond within the timeframe required by law.
10. International Transfers
Our data centers are located in the European Union. Where data is processed by sub-processors outside the EU/EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses) to ensure an equivalent level of protection.
11. Cookies
We use cookies and local storage strictly for the functioning of the site and your preferences:
- Essential session cookie — required to keep you logged in to the client area and protect your session. This cannot be disabled.
- Local storage — stores your chosen theme (dark/light), language, and cookie preference on your own device. This is not shared with anyone.
We do not use analytics, advertising, or third-party tracking cookies. For more details, see the cookie banner shown on our website.
12. Children
Our Services are intended for adults aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us so we can delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Significant changes will be announced via the email address associated with your account and noted on this page. The "Last updated" date at the top indicates when the policy was last revised.
14. Contact
Questions, requests, or complaints about this Privacy Policy can be sent to hello@pylox.net or through our support system.