This Privacy Policy explains how Bage Cloud LLC ("BAGEVM," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information when providing our website, client portal, virtual private servers (VPS), cloud servers, dedicated servers, server hosting, IP addresses, network connectivity, DDoS protection, and related internet infrastructure services (collectively, the "Services").
By visiting our website, creating an account, or ordering or using the Services, you acknowledge that you have read this Policy. If you use the Services for a business or other organization, you confirm that you are authorized to provide information on its behalf.
1. Scope and Our Role
This Policy applies to account, order, billing, website visit, support, and service-operational information that we collect directly and determine how to process. For content and personal data that you store, host, or transmit through a VPS, dedicated server, or other infrastructure ("Customer Data"), you are generally the controller or business, and we act as a service provider or processor only as needed to follow your instructions and provide the Services.
You are responsible for having a lawful basis to collect and process Customer Data, giving required privacy notices to the relevant individuals, and responding to their rights requests under applicable law. This Policy does not replace the privacy notice you may need to provide to your own users.
2. Information We Collect
2.1 Account and identity information
This may include your name, company name, email address, telephone number, billing address, country or region, account username, language, contact details, and information reasonably needed to verify an account, assess fraud risk, or meet compliance obligations.
2.2 Order, billing, and payment information
This may include products and configurations purchased, order and invoice numbers, amounts, currencies, payment status, renewals, refunds, and transaction identifiers. Card, PayPal, cryptocurrency, and other payments are generally processed by third-party payment providers. We may receive payment results, limited payment-account identifiers, wallet addresses, or transaction hashes, but do not receive or store complete card security codes.
2.3 Service configuration and resource information
This may include assigned IPv4 and IPv6 addresses, hostnames, data-center or node locations, operating-system templates, CPU, memory, disk, bandwidth and traffic usage, service status, power, reinstall and other control actions, IP replacement records, backup or snapshot status, and other technical metadata needed to provision and maintain the Services.
2.4 Website, login, and security logs
When you use our website, client portal, or interfaces, we may automatically record source IP addresses, browser and device types, operating systems, timestamps, pages visited, login results, session identifiers, API or control-panel actions, and error logs. We use cookies and similar technologies to maintain sessions, remember necessary preferences, prevent fraud, and understand website operations.
2.5 Network operations and abuse information
To protect our network and platform, we may process bandwidth and traffic statistics, port or connection metadata, security events, DDoS records, malware or scanning alerts, email bounces, IP reputation and blocklist information, and abuse reports received from data centers, upstream networks, rights holders, law enforcement, or other third parties. We do not routinely inspect Customer Data content, except when necessary to provide support you authorize, investigate a security or abuse event, comply with law, or protect the platform.
2.6 Support and communications
This includes support tickets, emails, chat records, attachments, diagnostic information, feedback, and other communications with us. Do not submit unnecessary passwords, private keys, complete payment credentials, or other highly sensitive information in a ticket. If temporary credentials are required for troubleshooting, change them immediately after the issue is resolved.
2.7 Information from third parties
We may receive information related to an order, transaction, account, or service from payment providers, fraud-prevention and identity-verification providers, data centers, upstream networks, domain or IP resource providers, public sanctions or reputation lists, abuse reporters, and integrations you authorize.
3. How We Use Information
- Create and manage accounts, authenticate logins, and maintain account security;
- Accept orders and provision, configure, migrate, renew, suspend, and terminate Services;
- Allocate and manage servers, IP addresses, bandwidth, traffic, networks, and data-center resources;
- Process invoices, payments, refunds, taxes, and financial reconciliation;
- Provide technical support, diagnose problems, and respond to tickets;
- Monitor availability, capacity, performance, network quality, and security events;
- Prevent fraud, account compromise, DDoS attacks, spam, malware, and other violations of our Acceptable Use Policy;
- Investigate abuse reports and protect customers, third parties, our network, and our legal rights;
- Comply with legal obligations, valid legal process, and applicable tax, accounting, and regulatory requirements; and
- Send service notices, invoice reminders, security alerts, policy updates, and marketing messages where permitted or with consent. You may unsubscribe from marketing at any time.
Where applicable law requires us to identify a legal basis, we process information as necessary to perform a contract, comply with a legal obligation, protect vital interests, pursue our legitimate interests (such as operating and securing infrastructure, preventing fraud, and improving the Services), or with your consent where required.
3.1 Aggregated and de-identified information
We may aggregate or de-identify information so that it cannot reasonably identify a particular person, and use it for capacity planning, network and product analytics, security research, service-quality measurement, statistics, and business operations. We take reasonable measures to prevent re-identification and do not attempt to re-identify the information except where applicable law permits testing the effectiveness of our de-identification methods.
4. Customer Data and Server Access
We do not acquire ownership of websites, databases, files, applications, or other Customer Data deployed on your server. For unmanaged Services, you are responsible for operating systems, applications, access permissions, patches, backups, and Customer Data security. We do not actively access Customer Data content except when you expressly request and authorize support; access is necessary to resolve an emergency affecting the platform or other customers; we investigate suspected violations of law or our Acceptable Use Policy; we respond to valid legal process; or we protect people, networks, and Services from a credible threat.
Where feasible, we use less intrusive diagnostic methods and restrict access to authorized personnel with a business need. You are responsible for maintaining required backups. Unless an order or service description expressly includes a backup service, we do not guarantee that Customer Data can be recovered.
6. How We Disclose Information
We disclose information only as reasonably necessary for the purposes described in this Policy.
6.1 Affiliates
We may share information with a parent, subsidiary, or other company under common control that helps provide, administer, or support the Services. Affiliates must process the information under this Policy and applicable confidentiality and security requirements.
6.2 Digital wallets and payment providers
When you use a card, PayPal, digital wallet, cryptocurrency, or another payment method, we may provide the relevant payment provider, digital-wallet company, acquiring institution, or blockchain-related service provider with information necessary to complete the transaction, prevent fraud, process refunds, and reconcile accounts. Those providers may also process information independently under their own privacy policies.
6.3 Infrastructure and other service providers
We may disclose necessary information to vendors, contractors, or agents performing services for us, including providers of data centers, servers, IP addresses, bandwidth, networks, DDoS protection, identity verification, fraud prevention, email, ticketing, monitoring, analytics, backups, and other business support. We require them to process information only for agreed purposes and to apply appropriate protections.
6.4 Business transactions
If we enter or consider a merger, financing, reorganization, bankruptcy, sale of assets or business, acquisition, or similar transaction, information may be disclosed under appropriate confidentiality obligations to advisers, prospective parties, and a successor entity.
6.5 Judicial, regulatory, and government requests
We may respond to a valid subpoena, warrant, court order, regulatory demand, or other legal process when required by law or when we believe in good faith that disclosure is necessary. Where permitted, we review the validity and scope of a request and seek to disclose only information legally required.
6.6 Protecting rights and safety and investigating abuse
We may disclose necessary information to affected parties, reporters, data centers, upstream providers, security organizations, law enforcement, or legal advisers to investigate or stop fraud, network attacks, intellectual-property infringement, spam, malware, violations of our agreements, or other illegal or abusive conduct.
6.7 No sale of personal information
We do not sell personal information for money or share personal information for cross-context behavioral advertising. If our practices change, we will update this Policy before the change and provide choices required by applicable law.
7. International Processing
We and the data centers, upstream networks, and service providers supporting the Services may operate in different countries. Information may therefore be processed outside your country, where data-protection laws may differ. Where required, we use contractual terms, provider reviews, or other appropriate safeguards for international transfers.
8. Retention and Deletion
8.1 Retention criteria
We retain personal information only for as long as necessary for the purpose collected, performance of a contract, dispute handling, security, enforcement of agreements, and legal, tax, accounting, or regulatory requirements. The period depends on the information type, service status, risk, backup cycle, and applicable law. We then delete, anonymize, or securely isolate the information unless continued retention is permitted or required.
8.2 Account and record deletion requests
You may request account closure or deletion of personal information, but closing an account does not mean every record can be deleted immediately or at the same time. We may retain account identifiers, invoices, transactions, access, security, and abuse records for as long as necessary to meet tax and accounting duties, handle payments and refunds, resolve disputes, prevent fraud, maintain network security, investigate abuse, respond to judicial or regulatory requests, and establish or defend legal claims. We do not use information retained under these limitations for marketing. When no basis for continued retention remains, we delete, anonymize, or securely isolate it.
8.3 Customer Data after service termination
After service termination, Customer Data on associated VPS, dedicated-server, or storage resources may be deleted or overwritten through deprovisioning and resource-reclamation processes and may not be recoverable. Residual copies in caches, backups, or logs are handled under their applicable rotation cycles. Records may be retained longer for billing disputes, abuse investigations, security incidents, or legal holds.
9. Data Security
We use reasonable administrative, technical, and physical safeguards appropriate to our size, processing activities, and data risks. These may include access controls, authentication, transmission protections, logging, system updates, personnel access management, and incident response. No system can guarantee absolute security. You should also use strong and unique passwords, enable available multi-factor authentication, restrict management ports, apply patches promptly, and protect keys and backups. Contact us immediately if you suspect unauthorized access to an account or Service.
10. Your Rights and Choices
Depending on applicable law where you live, you may have rights to know about or access personal information we hold, receive a copy, correct inaccurate information, request deletion, restrict or object to certain processing, obtain a portable copy, and withdraw consent. California residents may also have applicable rights to know, delete, correct, limit the use of sensitive personal information, and receive equal service when exercising privacy rights.
You can update some account details in the client portal or submit a request to support#bage.dev. To protect accounts and infrastructure, we may verify your identity and account ownership. A request may be limited by legal exceptions, including information required for billing records, fraud prevention, network security, abuse investigations, legal requests, or establishing and defending legal claims. Where applicable, you may also complain to the data-protection authority where you live.
11. Children
The Services are intended for adults and organizations capable of entering into a valid contract. They are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided personal information without appropriate authorization, contact us so that we can verify the report and take appropriate action.
12. Changes to This Policy
We may update this Policy as our Services, technology, or legal requirements change. The latest revision date appears at the top of this page. If a change materially affects your rights or how we use personal information, we will provide additional notice through the website, client portal, email, or another appropriate channel.
13. Contact Us
For questions about this Policy, our personal-information practices, or a rights request, contact:
Bage Cloud LLC
30 N Gould St Ste R, Sheridan, WY 82801, United States
Email: support#bage.dev (replace # with @ when sending)