Privacy Policy

1. Scope of application and basic principles

This privacy policy explains how IDCY Global collects, uses, saves and protects information related to you in its official website, customer center, cloud servers, server rentals, bare metal servers, server hosting, work order support and related infrastructure services.

We process information in accordance with the principles of necessity, legitimacy, transparency and minimization. We will not collect non-business-related information beyond the scope except to complete service delivery, accounting settlement, security protection, compliance requirements or to obtain your authorization.

If there is a separate description or agreement for a certain service, the separate description shall apply together with this policy; if there is any inconsistency, the rules that can better protect the rights and interests of users and match the specific services shall prevail.

2. Information we may collect

When you register, log in, purchase, renew, submit a work order or apply for pre-sales consultation, we may collect account information, contact information, company information, email, phone number, billing information, order records and payment status.

To deliver server and network services, we may process service configurations, IP addresses, bandwidth records, login times, operation logs, ticket content, communication records, abnormal traffic alerts, and security event records.

In necessary compliance or risk control scenarios, we may require you to supplement business purposes, authorization certificates or necessary identity verification materials. We will use verification materials for verification, compliance and risk control purposes and will not use them for promotion unrelated to the service.

3. Purpose of information use

We use information mainly to create and manage accounts, activate products, process orders, complete accounting notifications, provide technical support, troubleshoot faults, ensure network security, perform contracts, and meet legal and regulatory requirements.

We may also send you product changes, maintenance notices, security reminders, billing reminders and service expiration reminders based on service operation needs. Such notices are usually directly related to the service you are using.

If it is used for non-essential marketing or promotion that is not directly related to the current service, we will provide an unsubscribe or refusal method in accordance with the applicable rules.

4. Cookies, logs and website analysis

Our website and customer center may use cookies, session identifiers, local storage or similar technologies to maintain login status, identify language and preferences, ensure account security, count page visits and improve service experience.

You can manage or delete cookies through your browser settings. Please note that disabling necessary cookies may prevent login, order placement, ticket submission, or some console functions from working properly.

We will record necessary access logs and security logs to detect abnormal logins, malicious requests, attack traffic, service failures and system performance issues.

5. Information sharing, entrusted processing and cross-border services

In order to complete payment processing, message notification, data center delivery, network line access, security protection, customer support and compliance review, we may cooperate with payment institutions, communication service providers, IDC computer rooms, upstream network service providers and necessary technical service providers.

We will not sell your personal information. We will not disclose your account information to unrelated third parties except when necessary to obtain authorization, complete services, as required by laws and regulations, or as required by regulatory and judicial authorities.

Since IDCY Global provides overseas nodes and global network resources, some services may involve cross-border network transmission or overseas data center delivery. You should ensure that your business data processing, website content and user data use comply with applicable regulations in the target region.

6. Data storage, backup and deletion

We will only retain information for the period necessary to achieve the purposes stated in this policy, or retain necessary records in accordance with contract, accounting, auditing, dispute handling, security traces, and legal and regulatory requirements.

When the information is no longer needed and there is no legitimate reason to continue to save it, we will delete it, anonymize it, or isolate it for archiving. The information in the backup system may be gradually cleared after a certain period due to the disaster recovery mechanism.

In principle, you control and are responsible for the website programs, business files, databases and user data on your server. Please configure snapshots, off-site backup, permission control and regular recovery drills based on business importance.

7. Your privacy rights

To the extent permitted by applicable law, you can request to query, correct, supplement, delete or export the personal information related to your account, or you can ask us to explain the purpose of using the information, sharing objects and retention period.

If you think your account information is inaccurate, you can modify it yourself in the customer center, or contact us through work orders, emails, etc. To protect account security, we may need to verify the requester's identity and authorization first.

We may not be able to immediately delete information that is required to be retained by law, required to perform a contract, required to handle disputes, ensure network security, or prevent fraud and abuse, but we will limit the scope of its use.

8. Security measures and incident handling

We will take reasonable administrative, technical and physical security measures to protect information, including permission classification, access control, log auditing, backup strategies, network isolation, anomaly monitoring and necessary employee confidentiality requirements.

Internet services cannot be guaranteed to be absolutely secure. If an information security incident occurs that may affect your rights and interests, we will take measures such as investigation, blocking, remediation, notification and recording according to the nature of the incident, and will fulfill reporting obligations when required by applicable laws.

You should also keep your account, password, verification code, API key, and console permissions properly, and promptly remove authorizations from retired personnel or those that are no longer needed.

9. Cloud server and independent server trial policy

All customers who need to activate trial resources must first register as members in the customer center and create corresponding product orders, and then contact customer service staff to apply for trial activation.

The trial period for cloud servers is 3 days, and the trial period for independent servers is 24 hours.

If you need to evaluate the site group server, you can first apply for the corresponding independent server trial; after confirming that the network and resources meet the needs and paying the bill, the customer service staff will allocate the site group IP to the machine.

Domain names and SSL certificates are not available for trial and refunds are not available.

The same customer using the same IP address can only apply for trial resources once within 3 days.

10. Refund Policy

All cloud servers can apply for a refund based on actual usage days within 7 days after activation. The refund amount will be refunded to the account balance in the Customer Center, which cannot be withdrawn; customers need to submit a work order application in the Customer Center.

Dedicated servers support refunds within 3 days from launch. For individual products, the remaining balance will be refunded after deducting the machine listing fee.