Information We Collect
When you interact with the RedX Cloud platform, we collect only information essential to providing reliable, secure compute services:
- Account Credentials: Email address, username, securely hashed and salted passwords (using Argon2/Bcrypt via our PostgreSQL identity layer), and optional referral tokens.
- Payment & Billing Records: Transaction IDs, invoice timestamps, gateway confirmation tokens from authorized processors (Cashfree, Razorpay, Stripe). We never store raw credit card numbers or banking PINs on our servers.
- Infrastructure Telemetry: IP addresses accessing client panels, API session identifiers, and firewall security logs collected strictly for DDoS mitigation, audit logging, and intrusion prevention.
- Support & Community Communications: Ticket transcripts, live chat messages, and attachments uploaded for diagnostic assistance.
How We Use Your Data
Your data is utilized strictly for service delivery and operational safety:
Automating Pterodactyl user creation, assigning game container permissions, and orchestrating daemon instances.
Generating automated renewal invoices, applying store wallet credits, and validating genuine transactions.
Filtering volumetric attack vectors, detecting brute-force attempts on SFTP/panel logins, and enforcing AUP compliance.
Dispatching password reset instructions, node maintenance alerts, and security announcements via email.
Data Storage, Isolation & Security Standards
We implement industry-standard security architecture across our multi-datacenter footprint:
- Encryption in Transit: All HTTP and WebSocket traffic is protected via TLS 1.3 with modern cryptographic cipher suites and HSTS enabled.
- Container & Database Isolation: Customer game servers run inside isolated Linux kernel namespaces (cgroups & Docker) without cross-container visibility. Database records are partitioned with row-level security.
- Zero Selling Policy: We do not sell, rent, monetize, or trade your personal data, customer lists, or usage telemetry to advertisers or data brokers under any circumstances.
Your Privacy Rights & Data Deletion
You maintain full authority over your personal information:
- Access & Export: You may request a complete export of your account profile and server configuration history at any time.
- Account Erasure ("Right to be Forgotten"): Upon request, we will permanently purge your profile, logs, and associated container instances from our active systems within 30 days, subject only to statutory tax or fraud compliance requirements.
Privacy Officer Contact
If you have any questions or data deletion requests, contact our Data Privacy desk directly: