Legal
Privacy Policy
We collect as little personal data as we can, use it to run your service, and never sell it. This policy explains what we collect, why, who processes it with us, how long we keep it and your rights.
Who we are
RyzenRDP is operated by Rackvolt Cloud Solutions Pvt Ltd, a private limited company incorporated in India ("we", "us"). We decide how and why your personal data is used, so we are the data fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the controller under the EU and UK General Data Protection Regulation (GDPR) where it applies to you. Contact us at [email protected].
This policy covers ryzenrdp.com, the RyzenRDP console and the services we provide. It does not cover the content of your server, which you control.
Data we collect
- Account and billing data: your name, email address, postal address, country, a phone number if you give one, and the details on your invoices.
- Verification data: where we must verify a customer, the details you give us for it, such as the purpose of a service.
- Service data: the servers you order, their IP addresses, locations and settings, your invoices, payment records and account credit.
- Support data: your tickets and emails, and anything you include in them.
- Assistant conversations: if you use the RyzenRDP assistant, what you type into it and its answers (see The RyzenRDP assistant).
- Technical data: IP addresses, browser details and request records in the server logs of ryzenrdp.com and the console, and the IP address and time of each console sign-in.
- What we do not collect: your full card number (our card payment processor handles card payments and we never see or store it), wallet keys, or the contents of your server. We look inside a server only when you ask us to, or when the law or an abuse or security investigation requires it.
How we use it
| Purpose | Data used | Legal basis |
|---|---|---|
| Set up, run and bill your services | Account, billing and service data | The contract with you |
| Answer support requests | Support and service data | The contract with you |
| Verify customers and keep the records the law requires | Account, verification and technical data | Legal obligation |
| Prevent fraud and abuse and keep our systems secure | Account, technical and service data | Legitimate interests; legal obligation |
| Send service email: invoices, setup, security notices and policy changes | Email address | The contract with you; legal obligation |
Under the DPDP Act we process your data for the purpose you gave it to us for, to meet legal obligations, or with your consent. We do not sell personal data; we use it for advertising measurement only if you allow the Analytics & advertising option in the cookie notice (the Meta pixel, see Cookies and analytics); and we do not send marketing email without your consent. Some decisions in the console are automated: a service whose renewal invoice is unpaid is suspended as the Terms of Service describe, and security checks can refuse a sign-up made through a VPN or Tor network or with a disposable email address, ask you to confirm your email address or complete your profile, and, if your email address is still not confirmed after the deadline we give you, suspend your services.
Cookies and analytics
We keep third-party code to a strict minimum. Apart from the two measurement tools below, the public pages load nothing from a third party: no session recording and no advertising scripts other than the consent-gated Meta pixel.
Cloudflare Web Analytics. We use Cloudflare Web Analytics to measure page views and page speed for ryzenrdp.com. It is privacy-first: it sets no cookies, stores nothing in your browser and builds no profile and no cross-site history, and it reports only aggregate figures. It is used for no advertising purpose. Because it needs no cookies and collects no personal profile, it is always on and is not one of the choices in the cookie notice.
Meta (Facebook) pixel — off until you allow it. Only if you turn on Analytics & advertising
in the cookie notice do we load Meta's pixel. It lets us see which of our ads bring people to the site
and measure page views, product views, add-to-cart and checkout starts. Nothing is requested from
Meta, and no Meta cookie (_fbp) is set, until you allow it. You can withdraw consent at any time
with Cookie settings at the bottom of every page, which stops the pixel; you can then clear the
_fbp cookie in your browser.
Apart from the Meta pixel above, the site itself sets no cookies unless you open the RyzenRDP assistant (the Ask RyzenRDP button) or open the enterprise quote form — each sets one strictly necessary cookie it needs (the assistant to run, and the quote form for its anti-spam captcha). Your theme choice (light, dark or auto) and your answer to the cookie notice are kept only in your own browser's local storage, not in a cookie, and are never sent to us. You can change that answer at any time with Cookie settings at the bottom of every page.
The console sets cookies that keep you signed in and protect its forms against misuse, and the
RyzenRDP assistant sets one when you open it; none of them is used for tracking. Cloudflare, which
protects our websites, may set a strictly necessary security cookie. Everything ryzenrdp.com, the
console and Cloudflare keep in your browser is listed here. All of it is strictly necessary for
something you use, and so is not part of the choices in the cookie notice — except the Meta _fbp
cookie, which is set only if you allow Analytics & advertising.
| Name and type | Set by | What it does | How long |
|---|---|---|---|
rz-theme (local storage) |
ryzenrdp.com; the console reads it too | Your theme choice: light, dark or auto | Until you change it or clear your browser data |
rz-consent (local storage) |
ryzenrdp.com | Your answer to the cookie notice | Until you change it or clear your browser data; we ask again if the notice changes |
__Host-rzchat_vid (cookie) |
The RyzenRDP assistant, once you open it | Keeps your conversation together, protects it against requests from other sites and applies the assistant's limits | 1 day after you last use the assistant |
rzchat-open (session storage) |
The RyzenRDP assistant | Keeps the assistant open when you go to another page | Until you close the tab |
rzchat-off-site, rzchat-off-console (local storage) |
The RyzenRDP assistant | When the assistant is switched off, keeps its button hidden | Used for 1 hour |
rzg_dev (cookie) |
The console, when you sign in | Recognizes a browser that signed in to your account before, so sign-in limits meant for strangers do not lock you out | 400 days |
rzg_csrf (cookie) |
The console's email confirmation page | Protects the confirmation form against requests from other sites | 30 minutes |
| Console sign-in cookies | The console | Keep you signed in and protect its forms | Your session, or longer if you tick "Keep me signed in on this device" when you sign in |
| Cloudflare security cookie | Cloudflare | May be set to tell visitors apart from automated traffic | As Cloudflare sets it |
_fbp (cookie) |
Meta, only after you allow Analytics & advertising | Advertising measurement: which ads bring visitors to the site | 90 days, or until you clear it; never set unless you allow it |
We use Google Search Console to see aggregate data about how our pages appear in Google Search, such as queries, impressions and clicks. It adds nothing to our pages and gives us no data about individual visitors.
The RyzenRDP assistant
The RyzenRDP assistant is a chat box that answers questions about our plans, prices, locations and policies, helps you choose a plan, and can open a support ticket for you. Its answers are written by an AI from the pages of ryzenrdp.com, in the language you write in, and can be incomplete; a person on our team answers every ticket.
- What reaches OpenAI: only when you send the assistant a question, that question and the earlier messages and answers of the same conversation, with recognizable passwords, keys, card numbers and email addresses removed first, plus a random identifier for your browser that means nothing outside RyzenRDP. OpenAI writes the answer. We never turn on OpenAI's option to store requests; OpenAI may still keep them for a while under its own terms, for example to detect abuse. Nothing from your account is sent, apart from whether you are signed in. Please never type passwords or payment details into the assistant.
- What we keep: the live conversation is stored on our server so the assistant can follow it, and is deleted within 25 hours of your last message. We also keep a transcript of what you type and the assistant's answers, as written, for up to 90 days to review and improve the assistant, after which it is deleted. These transcripts stay on our own server and are never used to advertise to you; you can ask us to delete yours (see Your rights).
- Tickets: a ticket you open from the assistant is a support ticket like any other and includes the conversation while "Attach this conversation" is ticked. If you are not signed in, it needs your name and email address so we can reply, and it may ask you to complete Cloudflare's Turnstile security check, which loads from Cloudflare only at that moment (see Cloudflare under Processors).
Payments
You can pay by cryptocurrency or by a credit or debit card. Cryptocurrency payments are made through Cryptomus, which runs the crypto payment page. Cryptomus receives the invoice amount and reference and the details you enter on its page, processes them under its own privacy policy, and may ask you to verify your identity under the laws that apply to it. We receive the payment status, amount, currency, network and transaction reference. Blockchain transactions are public by design: a payment and the addresses involved stay visible on the blockchain, and we cannot erase them.
Card payments are handled by a third-party card payment processor, which runs the card payment page and processes your card details under its own privacy policy; we do not see or store your full card number. We receive the payment status, amount, currency and a transaction reference. If you set up automatic card payments, the processor stores your card so it can charge future renewal invoices.
Processors we use
We share personal data only with service providers that need it to run the service, under terms that require them to protect it, and with authorities when the law requires it.
- Cloudflare: content delivery, DNS and protection for ryzenrdp.com and the console, including the Turnstile security check where a form shows one, and Cloudflare Web Analytics (cookieless, aggregate page-view and performance measurement, no cross-site profile and no advertising use). It processes visitor IP addresses and request data.
- Meta Platforms: advertising measurement through the Meta (Facebook) pixel, and only if you allow the Analytics & advertising option in the cookie notice. It then receives the pages you view and checkout events on ryzenrdp.com so we can measure our ads; see Cookies and analytics.
- Cryptomus: cryptocurrency payment processing, as described under Payments.
- Our card payment processor: credit and debit card payment processing, as described under Payments.
- Our email hosting provider: the infrastructure provider that hosts the mail server for ryzenrdp.com, through which we send and receive account and support email. It processes email addresses and message content.
- Data centres and server infrastructure: the data centres in each server location, and the infrastructure provider that hosts our website and console. They host the systems that store account and service data. Our server management platform keeps technical records for each server, such as its IP addresses, resources and a customer reference.
- Google (Search Console): aggregate search data only, as described above.
- OpenAI: writes the answers of the RyzenRDP assistant. It receives only what is described under The RyzenRDP assistant, and only when you use the assistant.
- OpenStreetMap Foundation (United Kingdom): its Nominatim service may be used to check that the city, postal code and country of a customer's profile address belong together. Only those three values are sent, from our server: never a name, street address, email address or your IP address.
Some of these providers process data outside India and outside your own country, including in the United States and the European Union. Where the law requires it, these transfers rely on appropriate safeguards.
Retention
We keep personal data only as long as we need it for the purposes above, or as long as the law requires:
| Data | How long we keep it |
|---|---|
| Account, verification and service records | While your account is open, and for 5 years after your last service ends (records Indian law requires server providers to keep) |
| Invoices and payment records | 8 years from the end of the financial year they belong to (Indian accounting and tax law) |
| Support tickets and emails | While your account is open, and for 3 years after your last service ends |
| Conversations with the RyzenRDP assistant | The live conversation is deleted within 25 hours; a transcript of your messages and the assistant's answers is kept up to 90 days to review and improve the assistant, then deleted (a ticket opened from one is kept like any other ticket) |
| Server logs of the website and console | 180 days |
| The contents of a server | Deleted when the server is terminated; they cannot be recovered |
When a period ends, we delete the data or make it anonymous.
Your rights
Wherever you live, you can ask us to:
- access the personal data we hold about you and learn how we use it;
- correct, complete or update it;
- erase it, unless the law requires us to keep it (see Retention);
- withdraw consent you gave, without affecting processing that took place before;
- nominate someone to exercise your rights if you die or become unable to (DPDP Act);
- object to or restrict some processing, and receive your data in a portable format (EU and UK GDPR).
Write to [email protected] from the email address on your account, or open a ticket in the console. We may need to confirm your identity first, and we reply within 30 days. If you are not satisfied with our answer, contact our Grievance Officer (below). You may also complain to the Data Protection Board of India or, in the EU or UK, to your local data protection authority.
Security
We protect personal data with access controls, encrypted (HTTPS) connections to the website and console, two-factor authentication for console accounts, and by limiting who on our team can reach customer data. No system is perfectly secure: if a breach affects your personal data, we will tell you and the authorities as the law requires.
Children
Our services are not for anyone under 18, and we do not knowingly collect personal data from children.
Changes to this policy
We may update this policy. The "Last updated" date at the top shows the current version, and we tell customers by email or in the console about any change that materially affects them.
Grievance Officer
Questions, requests and complaints about personal data can be sent to our Grievance Officer at [email protected] with "Privacy" or "Grievance" in the subject. We acknowledge every complaint and answer it within the time limits set by Indian law. The Grievance Officer's name, designation and our address are in the Terms of Service.
Contact
Privacy questions and requests: [email protected], or a ticket in the console.