Last updated: 18 May 2026
1. Introduction
This Privacy Policy explains how Pulsar67 ("we," "us") collects, uses, shares, and protects information about you when you visit our website, create an account, or use our services. It applies to information about identifiable individuals, including current and prospective customers.
We try to write this in plain language. Where legal precision matters, it matters; everywhere else, we'd rather you actually read it.
2. Information We Collect
2.1 Information you provide
- Account information: name, email address, password (stored hashed), company name (optional), and contact preferences.
- Billing information: billing address, tax ID where applicable, payment method details. Card numbers are processed and stored by our payment processor, not by us.
- Identity verification: in rare cases (suspected fraud, large orders, regulatory requirement), we may ask for government-issued ID. We store these only as long as necessary and dispose of them securely afterward.
- Communications: support tickets, emails, and other messages you send us.
2.2 Information collected automatically
- Service usage data: resource allocation (CPU, RAM, storage, bandwidth) per VPS, operational metrics, and infrastructure logs needed to provide and bill the service.
- Authentication and session data: login timestamps, IP addresses, two-factor authentication events, API token usage.
- Web analytics: pages viewed, referring URLs, browser type, device type, approximate location (country/region from IP). We use a privacy-respecting analytics provider that does not set cross-site tracking cookies.
2.3 Information we do not collect
- We do not access or read the content of files stored on your VPS, except as strictly necessary to operate the service or as required by law.
- We do not inspect the traffic flowing through your VPS, beyond aggregated bandwidth counters and our edge DDoS mitigation systems (which operate on packet headers, not payloads).
- We do not sell, rent, or trade your personal information to data brokers or advertisers.
3. How We Use Information
We use the information we collect to:
- Provide, maintain, and improve the service.
- Process payments, send invoices, and provide receipts.
- Authenticate you, protect against fraud, and secure the service.
- Communicate with you about your account, service notices, security events, and (with your consent) product updates.
- Respond to support requests and abuse reports.
- Comply with legal obligations and enforce our Terms of Service.
4. How We Share Information
We share personal information only in these limited cases:
- Service providers: payment processors, email delivery, fraud screening, identity verification, and infrastructure providers acting on our instructions and bound by confidentiality and data-protection obligations.
- Legal requests: when we receive a valid subpoena, court order, or other legal process. We will, where lawfully possible, notify you before disclosure and challenge requests that appear overbroad or improper.
- Abuse investigations: in response to abuse reports involving your service (e.g., a copyright complaint, a phishing report), we may share necessary information with the reporting party or relevant authorities.
- Corporate transactions: if Pulsar67 is acquired or merges with another entity, customer information may be transferred as part of the transaction, subject to the protections of this Policy.
We do not sell your personal information.
5. Cookies & Tracking
We use a small number of first-party cookies and similar technologies for:
- Strictly necessary: session cookies that keep you logged in, CSRF tokens, and load-balancing identifiers.
- Functional: remembering preferences such as billing currency.
- Analytics: privacy-respecting page-view counters that do not track you across other websites.
We do not use third-party advertising or cross-site tracking cookies. You can disable cookies in your browser, but the client area requires session cookies to function.
6. Data Retention
- Account data: retained for the life of your account and for up to 7 years after closure, where required to comply with tax and accounting laws.
- Billing records: retained for the period required by applicable tax law (typically 5–7 years).
- VPS storage: retained for 7 days after service termination, then permanently deleted.
- Operational logs: retained for up to 90 days for security and troubleshooting purposes, then deleted or aggregated beyond identifiability.
- Support communications: retained for up to 3 years after the last interaction.
7. Security
We protect personal information using industry-standard administrative, technical, and physical safeguards: encryption in transit (TLS 1.2+), encryption at rest for sensitive fields, hashed passwords, network segmentation, principle of least privilege for staff access, mandatory two-factor authentication for employee accounts, and regular security review.
No system is perfectly secure. If we ever experience a breach affecting your data, we will notify you promptly and within any timelines required by law.
8. Your Rights
Depending on where you live, you may have some or all of these rights:
- Access: request a copy of the personal information we hold about you.
- Correction: ask us to fix inaccurate information.
- Deletion: ask us to delete your personal information, subject to legal retention requirements.
- Portability: receive your information in a portable, machine-readable format.
- Restriction or objection: ask us to limit how we process your information.
- Withdraw consent: where processing is based on consent, withdraw it at any time.
- Lodge a complaint: with your local data protection authority if you believe we have violated your rights.
To exercise any of these rights, email [email protected] or open a ticket from the client area. We may need to verify your identity before acting on a request. We will respond within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act ("CCPA"). If you are in the EU, EEA, UK, or Switzerland, you have additional rights under the GDPR and UK GDPR.
9. International Transfers
Pulsar67 operates infrastructure in the United States and Europe. Depending on your location and the location of your VPS, your personal information may be transferred to and processed in countries other than your country of residence, including countries that may not have the same data protection laws as your jurisdiction.
Where required by law, we rely on appropriate transfer mechanisms, such as the European Commission's Standard Contractual Clauses, to safeguard your information during cross-border transfers.
10. Children's Privacy
Our service is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete it.
11. Third-Party Services
Our service interacts with several third-party providers acting as our processors. Each has its own privacy policy:
- Stripe — credit card processing
- PayPal — alternative payment processing
- Postmark — transactional email delivery
- Cloudflare — CDN and DDoS protection for our marketing website
Links from our site to third-party websites are governed by those sites' privacy policies, not this one.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be announced at least 30 days in advance through the client area and by email to the account contact on file. The "Last updated" date at the top reflects the most recent revision.