Privacy policy.

Introduction

X ZONE IT SRL ("NODED.CLOUD", "we", "us") operates the NODED.CLOUD hosting platform and the website noded.cloud. This policy explains what personal information we collect, why we collect it, and the rights you have over it.

In short: we collect what we need to run hosting services, and we process it under the GDPR and Romanian law. To ask a question or exercise a right, email noc@noded.cloud, open a support ticket in your client area, or use our contact page; we respond within one month.

Data controller

The data controller for personal information collected through this site and our services is:

• X ZONE IT SRL
• VAT / CUI: RO48893724
• Reg. Com.: J52/908/2023 (EUID ROONRC.J52/908/2023)
• Registered office: Bdul. 1 Mai 57, Sat Mihai Vodă, jud. Giurgiu, 087016, Romania
• Contact: noc@noded.cloud, a support ticket in your client area, or our contact page

What we collect

Account and billing data

When you sign up we collect your name, email, billing address, VAT/tax ID where applicable, and the contents of any tickets or chats you send us. Card payments are handled by our payment processor; we never store full card numbers.

Service operating data

To run the platform we process server usage metadata (CPU, network, storage, uptime) and control-panel and API logs. We do not read the contents of your servers, your databases, or your customer-facing traffic.

Website

Our website sets one cookie, which remembers the currency you picked, and stores a chat session in your browser if you start a live chat. See the Cookie Policy.

How we use it

We use personal data only for these purposes:

• Service delivery — provisioning, billing, account management, support tickets (performance of our contract with you).
• Security and abuse handling — protecting our network, preventing fraud, handling abuse reports (legitimate interest).
• Legal compliance — responding to lawful orders, keeping tax and accounting records (legal obligation).

We do not sell personal data, run behavioral advertising on our site, or share your data with marketing networks.

Who we share with

We share personal data only with:

• Service providers we use to run the business: data-centre partners, payment processors, our email provider, and the hosting for our control panel.
• Authorities, when the law requires it.

The current list is published at NODED.CLOUD/subprocessors.

Data you store on your servers

For personal data you store or process on the servers you rent from us, you are the controller and we act as your processor. That processing is governed by our Data Processing Agreement, which is part of the Terms and applies automatically — no separate signature needed.

Where data is stored

Account and billing data is stored in the European Union (Germany and Finland). The data on your servers stays in the data-centre location you choose.

Where one of our providers processes data outside the EEA, the transfer is covered by the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework, as shown on the sub-processor list.

How long we keep it

Account data is kept while your account is open, and afterwards for as long as Romanian tax and accounting law requires us to keep invoices and records. Logs and usage metrics are kept only as long as we need them to operate and secure the service. The data on a server is destroyed when that service is terminated, as described in our Terms.

Your rights

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase data ("right to be forgotten"), subject to legal retention.
• Restrict processing in certain circumstances.
• Port your data to another provider in a structured, machine-readable format.
• Object to processing based on legitimate interest.
• Withdraw consent for any processing based on consent.
• Lodge a complaint with a supervisory authority — in Romania, the ANSPDCP, or the authority in your country of residence.

To exercise any of these, email noc@noded.cloud, open a support ticket in your client area, or use our contact page. We respond within one month, as the GDPR requires.

How we protect data

The technical and organisational measures we apply are listed in section 5 of our Data Processing Agreement.

Changes to this policy

We notify customers of material changes by email at least 30 days before they take effect. Non-material changes (typo fixes, clarifications) are published with an updated "Last updated" date.

Contact

Questions about this policy or our data practices: email noc@noded.cloud, open a support ticket in your client area, or use our contact page.

Postal: X ZONE IT SRL · Bdul. 1 Mai 57, Sat Mihai Vodă, jud. Giurgiu, 087016, Romania.