Sharing, Transfer & Disclosure
How we handle

1.1 This policy applies to personal data processing arising from your access to the Zilmac website, account registration/login, ordering, use of the console or instances, and communications with us.

11. Policy Updates

1.3 This policy is used together with theTerms of Service; for service delivery boundaries, suspension/termination, and liability limits, the Terms of Service prevail.

2.1 Information you actively provide: contact details, identity verification materials, and communications submitted during registration/login, ordering, invoicing, tickets, and customer service. You should ensure information is accurate; order failures or losses caused by false or incomplete information are your responsibility.

For inquiries or rights requests related to this Policy, submit via

2.3 Payment information: order amounts, payment gateway receipts, and reconciliation results are processed jointly by us and licensed payment institutions; complete card numbers and other sensitive payment elements are generally collected directly by payment institutions. For disputed amounts or chargebacks, we may retain transaction records and identity verification results needed for communication with payment institutions and card issuers within the necessary scope.

2.4 You must not submit unnecessary sensitive content – such as passwords, private keys, or unredacted personal information of others – through tickets, chats, or similar channels; we are not liable for leaks or compliance risks arising from this.

3.1 Subject to applicable law, we may use information for the following purposes (including as necessary for contract conclusion and performance, and legitimate interest scenarios, limited to what is necessary for the purpose):

• Account activation, order fulfillment, billing, reconciliation, invoicing, and after-sales service;
• Technical support, ticket processing, and communicating with you on service matters;
• Identity verification, account security, anti-fraud, abuse detection, debt collection, and Terms of Service enforcement;
• System operations, capacity and quality analysis, product improvement, and internal statistics (data may be de-identified or aggregated);
• Complying with applicable laws, cooperating with lawful regulatory and judicial requirements, and processing necessary for protecting significant legitimate interests such as personal safety and property;
• Sending service notices, security and compliance alerts with your consent or as permitted by law; marketing messages will include opt-out options where possible, without affecting necessary notices related to contract performance.

3.2 When we reasonably determine that continued processing under the original purpose conflicts with this policy or applicable law, we may adjust the scope of processing after stopping use, anonymizing, or providing separate notice (as appropriate). To assert rights, respond to disputes, or regulatory investigations, we may retain and use relevant information beyond normal daily purposes for the necessary period.

4.1 We may use cookies, local storage, or similar technologies to maintain sessions, save language/interface preferences, perform necessary risk control and session security verification, and for access statistics and experience improvement.

4.2 You may manage cookies in your browser; refusing or deleting essential technical cookies required to operate this service may result in inability to log in, complete orders, or use certain features – this does not constitute a breach by us, nor does it automatically create a refund obligation (subject to theTerms of Serviceand order terms).

5.1 Sharing: we may provide information necessary for contract performance, anti-fraud, and compliance to payment institutions, cloud computing and communications providers, and risk control service providers as entrusted processors, and require them to assume confidentiality and security obligations through contracts and other means. Where required by law, or where judicial or administrative authorities legally require our cooperation, we may disclose information to authorized entities within the legally required scope, and may do so without prior notice to you (unless disclosure is prohibited by law).

5.2 Transfer: if personal information is transferred due to merger, division, asset reorganization, or business sale, within the scope permitted by law, the new holder may inherit the information processing relationship to the extent necessary to continue providing similar services or fulfilling existing contracts; we will endeavor to require the transferee to adhere to protection standards no lower than this policy and will notify you of significant changes via announcements or in-platform notices as required by law.

5.3 Public disclosure: unless legally required or necessary to protect significant legitimate interests of the platform, other users, or the public, we will not publicly disclose your personal information. To stop obvious illegal use, we may provide necessary material summaries to the affected parties or competent authorities within the scope permitted by law.

6.1 Your information may be stored in infrastructure operated by us or partners in different jurisdictions. Given the nature of the cloud hosting business, placing an order and using the service implies your understanding and agreement that data may be transferred and stored overseas or across regions for contract performance purposes (where required by applicable law, we will obtain separate consent or take alternative measures).

6.2 Data center regions may affect the technical data landing location, subject to thePlan Detailsordering page, and order confirmation; we cannot commit to a permanently fixed jurisdiction unrelated to public internet routing for individual customers.

7.1 We retain information for as long as necessary to fulfill the purposes described in this policy; we may also retain necessary records for longer legally or industry-reasonable periods for accounting and tax, anti-money laundering and payment disputes, debt collection, administrative enforcement cooperation, and asserting our rights under service contracts or defending litigation. Account cancellation does not automatically shorten retention to below mandatory minimum periods (unless law requires deletion).

7.2 After the retention period, we will delete, anonymize, or archive information in a non-personally-identifiable form; if law or regulation requires continued retention, the legal requirement prevails.

8.1 To the extent permitted by applicable law and not conflicting with our legitimate business interests, third parties' legitimate rights, or statutory obligations, you may request access, copying, correction, supplementation, deletion, withdrawal of consent (if applicable), restriction of processing, and file complaints regarding your personal information.

8.2 You may submit requests viaContact Usor console tickets. We are entitled to verify identity, assess request legality and necessity, and respond within a reasonable period; we may legally deny malicious, obviously repetitive, or technically excessive requests, or charge reasonable cost fees as permitted by applicable law after prior notice. For information directly related to ongoing fraud investigations, litigation, debt handling, or administrative proceedings, we may defer response until the relevant proceedings conclude or disclosure is legally permitted.

This service is intended for users with full legal capacity. If you are a minor, you must read this policy and theTerms of Servicewith a guardian's accompaniment and use the service only with guardian consent. If we have reasonable grounds to believe an account should be managed by a guardian without proper authorization, or that there is a risk to a minor's interests, we may suspend or terminate the relevant account and service, and delete or anonymize related information as required by applicable law.

We take reasonable management and technical measures appropriate to our business scale to reduce the risk of information leaks, tampering, and loss. Please understand that no network system can guarantee absolute security; for losses caused by your own device compromise, weak passwords, sharing credentials with others, force majeure, third-party attacks, or other causes beyond our control, we are not liable absent intentional misconduct or gross negligence on our part, except as mandatorily required by law. In the event of a security incident that may affect your rights, we will notify and handle it in a reasonable manner as required by applicable law, and may cooperate with competent authorities within the scope not violating confidentiality obligations and investigation needs.

We may revise this policy from time to time. Updated versions take effect upon publication on the website (subject to any legally required public notice period or separate notification via popup/email). Without reducing your mandatory rights already obtained by law, continued use of the service after the effective date constitutes acceptance of the revision; if you disagree, you should stop using the service and cancel/settle, and we may handle the account and data as permitted by law per theTerms of Service. Disputes caused by your failure to timely read announcements do not affect the validity of revisions for users who continue to use the service.

For inquiries or rights requests related to this policy, please submit viaContact UsorClick an item to expand the answerofficial channels. We may prefer to respond in writing via email or console ticket; requests where identity cannot be verified or that conflict with ongoing enforcement/litigation proceedings may be deferred.