Privacy Policy | ZUKCLOUD

PRIVACY STATEMENT ZUKCLOUD (hereinafter "the Company," "we," or "ZUKCLOUD") hereby declares: as a foundational computing infrastructure provider, our commitment to privacy is built at the physical hardware isolation layer, not merely at the software protocol layer. This Privacy Policy fully describes what data we collect, how we use it, and which data we have impenetrable physical access restrictions on. By accessing this website or subscribing to any service, you fully accept all terms of this policy.

PRIV_01

Introduction and Scope

This Privacy Policy applies to your access and use of the ZUKCLOUD website, console panel (Console), and all Apple Silicon Bare Metal node rental services we provide. By accessing our website or subscribing to our services, you agree to the data processing operations described in this policy.

ZUKCLOUD reserves the right to modify this Privacy Policy at any time, unilaterally. Modifications take effect immediately upon publication on the website, we have no obligation to notify you of changes separately. You are responsible for reviewing this page regularly.

PRIV_02

Types of Information Collected

To provide you with a lawful, stable, and secure cloud infrastructure, we collect only the following necessary information:

Account Information: Including your email address, console username, and necessary identifiers synced from third-party identity providers (e.g., GitHub, Google).
Billing and Payment Information: Including billing address and payment gateway credentials. We do not directly store your full credit card number; relevant data is encrypted and held by compliant third-party payment processors (e.g., Stripe).
Technical Configuration Information: Such as SSH public keys, API Tokens, and other network access credentials you inject into the console.
System Logs and Telemetry Data: When you access the console or schedule resources via API, we collect source IP address, request timestamps, and operation types (e.g., Power On / Shutdown).

We expressly declare: we do not collect, analyze, or have the ability to read any business data, code, or files stored on your node SSD.

PRIV_03

Hardware Isolation and Zero Trust (Core Principle)

Since ZUKCLOUD provides purely physical Bare Metal services, our guarantee of data privacy is built on an impenetrable physical layer boundary.

HARDWARE GUARANTEE

We cannot and will never access, review, or monitor any code, files, processes, or business data stored on the SSDs of the Mac mini units you rent. This is an absolute physical-layer restriction, not merely a contractual promise.

Upon node delivery, you receive full administrator (Root) privileges. Through Apple hardware's native Secure Enclave technology, your data is protected by hardware-level encryption — even data center operations staff cannot bypass authentication to read your disk contents.

PRIV_04

Data Processing and Use

We use the limited personal and telemetry data we collect exclusively for the following purposes, with no use beyond these:

Automatically provisioning, orchestrating, and configuring your physical nodes and network routing.
Processing your subscription payments and generating billing records.
Performing traffic analysis and security defense when encountering DDoS attacks or network congestion.
Responding to your technical support requests through the support ticket system.

PRIV_05

Data Retention and Physical-Level Erasure

The lifecycle of your business data stored on the physical machine is tightly bound to your subscription period. You and only you bear full responsibility for backing up data on your node.

CRITICAL NOTICE

Once your subscription expires without renewal, is reclaimed due to overdue payment, or you actively execute the "Release Node" operation in the console, the MDM orchestration system will immediately issue a secure erasure command based on the US Department of Defense DoD 5220.22-M standard. Encryption keys will be destroyed, and the NVMe SSD will be irreversibly overwritten. This process cannot be undone, and ZUKCLOUD bears no liability for any data loss resulting from the erasure.

PRIV_06

Third-Party Services and Sharing

We do not sell your personal information. We share only the minimum necessary data with trusted third-party infrastructure and service providers when required:

Payment Gateways: Such as Stripe, Coinbase Commerce, etc., for processing payment verification and billing transactions.
Data Center Operators: IP-layer information necessary for physical network penetration and BGP route announcement (no disk-layer data is involved).
Compliance Requirements: Only upon receipt of a valid and lawful court subpoena or search warrant may we legally disclose registration information associated with console accounts.

PRIV_07

Your Rights and Choices

Under applicable data protection laws (such as GDPR or CCPA), you have the following rights with respect to the personal data we hold at the console level:

Request access to a copy of your console account data we hold.
Request correction of any inaccurate account information.
Request deletion of your console account at any time.

CRITICAL NOTICE

Account deletion requests automatically trigger the DoD-level secure destruction protocol for all physical nodes under your account, and this action is irreversible. ZUKCLOUD bears no responsibility for any data loss resulting from account cancellation. These rights apply only to console account-level metadata and not to business data on your node disks (which we are physically unable to access in the first place).

PRIV_08

Contact Us

If you have any questions about this Privacy Policy or ZUKCLOUD's hardware privacy boundaries, please contact our security compliance team via the methods below. All formal privacy requests must be submitted through the console ticket system for account ownership verification.

Email：[email protected]
GPG Key：Available upon request through a Console Ticket.
Response Time: Response within 5 business days. ZUKCLOUD reserves the right to decline any request where account ownership cannot be verified.

PrivacyPolicy.