Privacy Policy

Account data. When you sign up we collect your name, email address, and authentication identifiers. Authentication is handled by our identity provider, Clerk.

Billing data. Payments are processed by Stripe. We never store your full card number; we keep billing records (plan, invoices, billing address, transaction history) needed for accounting and support.

Service data. To operate your servers we store technical data about your instances (hostname, IP address, region, installed software, health and usage metrics) and server access credentials needed to deliver managed features.

Usage and analytics data. With your consent, we use analytics and advertising cookies (Google Analytics, Google Tag Manager, Meta Pixel) to understand how the site is used and measure campaigns. We also collect server logs and product analytics to keep the service reliable and secure.

Support data. Messages you send us (email, support requests) and related correspondence.

We use personal data to:

• provide, operate, and support your hosting services (contract performance);
• process payments, invoices, and taxes (contract and legal obligation);
• secure the platform, prevent abuse, and debug incidents (legitimate interest);
• send service emails such as welcome, billing, and usage notifications;
• measure and improve the website and our marketing, only with your consent.

Strictly necessary cookies (sign-in sessions, security) are always active. Analytics and advertising cookies are used only after you accept them in the consent banner. You can change your choice at any time by clearing cookies for this site; the banner will appear again on your next visit.

We share data only with processors needed to run the service: Clerk (authentication), Stripe (payments), our infrastructure providers (Contabo, Hetzner, DigitalOcean — where your servers run), email delivery providers, and — with consent — Google and Meta for analytics and advertising measurement. We do not sell personal data.

Data you store or process on your VPS belongs to you. We access your instances only to deliver the managed features you purchased (provisioning, updates, backups, monitoring) or when you ask us to help. After cancellation, instance data is retained for a short grace period (typically 7 days) and then permanently deleted.

We keep account and billing records for as long as your account exists and as required by tax and accounting law. Server data is deleted after the post-cancellation retention window. Analytics data is retained per the configured retention of the respective tool.

Depending on your location (including under the GDPR), you can request access to, correction of, or deletion of your personal data, object to or restrict processing, request portability, and withdraw consent at any time. To exercise these rights, email support@agentocean.net. You also have the right to lodge a complaint with your local supervisory authority.

We use encryption in transit, scoped access controls, signed webhooks, and audit logging. No system is perfectly secure; if a breach affects your personal data we will notify you as required by law.

We may update this policy as the service evolves. Material changes will be announced on this page with an updated "last updated" date.