Privacy Policy

1. Overview & Scope

This Privacy Policy applies to all services, cloud compute nodes, bare-metal server infrastructure, zero-egress object storage solutions, APIs, CLI tooling, and web consoles offered by SlikWeb ("we", "us", or "our"). It governs how we collect, process, and protect information when you interact with our platform.

2. Information We Collect

We strictly limit data collection to what is required to deliver high-performance cloud infrastructure:

• Account Identification: Your full name, work email address, company name, and authentication credentials (including SSO tokens or SSH public keys).
• Billing & Transactional Information: Billing address, tax identification numbers, and payment processing tokens handled directly via PCI-DSS Level 1 certified payment gateways. We do not store raw credit card numbers on our servers.
• Infrastructure Telemetry & Metrics: System-level operational indicators such as bandwidth utilization, CPU/RAM load metrics, packet loss indicators, and API request logs required for automated billing and SLA uptime validation.
• Customer Support Communications: Tickets, email exchanges, and technical consultation logs submitted when requesting customer support or engineering assistance.

3. How We Use Your Data

Collected information is processed solely for legitimate operational and contractual purposes:

• Automated provisioning and configuration of your cloud servers, GPU clusters, and storage volumes.
• Processing recurring subscription invoices and pay-as-you-go bandwidth charges.
• Detecting and mitigating infrastructure-level abuse, DDoS attacks, unauthorized network scans, and security incidents.
• Communicating critical service updates, planned regional maintenance schedules, and SLA incident reports.

4. Storage, Encryption & Security Standards

Security is engineered into every layer of our physical facilities and network architecture:

• Data Encryption: All administrative console traffic and API endpoints enforce TLS 1.3 with strict Forward Secrecy. Storage volumes support automated AES-256 hardware-accelerated encryption at rest.
• Access Controls: SlikWeb staff operate under strict Role-Based Access Controls (RBAC) and Zero-Trust identity verification. No engineer has direct access to tenant disks or runtime instance memory without explicit written customer authorization during support diagnostics.
• Facility Security: Our partner data centers (New York, Frankfurt, Singapore, Mumbai) maintain ISO 27001, SOC 2 Type II, and PCI-DSS certifications with 24/7 biometric physical security.

5. Zero Data Monetization & Third-Party Sharing

We do not sell, rent, or trade personal data or workload metrics to advertisers, data brokers, or third parties under any circumstances.

We only share minimal necessary information with vetted sub-processors (such as Tier-1 payment gateways and transactional email delivery providers) strictly bound by confidentiality and Data Processing Agreements (DPAs).

6. GDPR, CCPA & Data Subject Rights

Under applicable international data protection regulations (including EU GDPR and California CCPA/CPRA), you have the right to:

• Access, download, and export all personal data associated with your SlikWeb account.
• Request immediate correction of inaccurate account records.
• Exercise the right to erasure ("Right to be Forgotten") upon terminating your infrastructure services.
• Specify data residency regions to ensure workloads never leave designated jurisdictions (e.g., EU-Central Frankfurt for GDPR compliance).

7. Data Retention & Account Termination

When you destroy an instance, block storage volume, or object bucket, data is cryptographically unlinked and overwritten according to NIST SP 800-88 guidelines. Account records and tax invoices are retained only for the statutory period required by financial and legal regulations.

8. Contact Our Privacy Office

If you have questions regarding this Privacy Policy, wish to execute an enterprise Data Processing Agreement (DPA), or need to submit a data subject request, please reach out to our privacy team: