Privacy

In short

The public site sets no cookies and runs no analytics or advertising scripts. An account stores what is needed to rent and bill machines, and nothing is sold or shared for marketing. The controller of your data is the operator of gpuvox.com.

What we store

• Account: your email address and a salted hash of your password. We cannot read the password.
• SSH public keys you add, and hashes of the API keys you create.
• Rentals: which machine, when, for how long, what it cost, and the SSH key that was installed.
• Credit: every amount added or charged.
• Store orders: name, email, country, quantity and your note.
• Offers and rental requests sent through the forms: the fields you filled in.
• Server logs: IP address, time, the address requested and the browser's user agent, for security and fault finding.

Why, and on what legal basis

• To provide the service you asked for and bill it (performance of a contract).
• To keep accounting records (a legal obligation).
• To protect the service from abuse (our legitimate interest).

Cookies

The console sets one cookie that keeps you signed in. It is strictly necessary, so there is no cookie banner. The public site sets none.

Who else receives data

• The company that hosts our server, and Cloudflare, which carries the traffic to it.
• The operator of the machine you rent receives the SSH public key and the image you chose. It does not receive your email address.
• The carrier that delivers a store order receives the delivery details you give us for it.
• Authorities, when the law obliges us.

How long

Account data is kept until you ask us to delete the account. Billing records are kept for as long as accounting law requires. Server logs are kept for up to 90 days.

Your rights

You can ask for a copy of your data, have it corrected or deleted, object to its use, and take it elsewhere. Write to [email protected]. You can also complain to the data protection authority of your country.