Privacy Policy

1. Scope

This policy describes how GPUlayer LLC ("GPUlayer", "we", "us") handles personal information when you visit gpulayer.org, create an account, buy services or contact us. It does not cover the content you store or process on your servers. For that content you are the controller and we act only as your service provider.

2. What we collect

Information you give us

• Account details: name, email address, company name, postal address and phone number.
• Billing details: billing address and the last four digits and expiry of your card. Full card numbers are handled by our payment processor and never reach our systems.
• Support conversations: tickets, emails and call notes.

Information collected automatically

• Usage and log data: IP address, browser type, pages visited, login times and control panel actions.
• Service metadata: resource usage, bandwidth totals, flow samples and network telemetry needed to bill you and to detect attacks or abuse.
• Cookies, as described in section 5.

Information from others

Fraud screening providers may tell us whether an order looks risky. Abuse reports from third parties may contain information about your services.

3. How we use it

• To provision, operate and support the services you order.
• To bill you, prevent fraud and collect payments.
• To secure our network, investigate abuse and enforce our Acceptable Use Policy.
• To send service notices such as maintenance windows, incidents and invoices.
• To send product news, only where you agreed. You can unsubscribe from any marketing email in one click.
• To meet legal obligations, such as tax records and valid legal requests.

Where the GDPR or UK GDPR applies, our legal bases are performance of a contract, legitimate interests in running a secure service, compliance with legal obligations and, for optional cookies and marketing, your consent.

4. Who we share it with

We share personal information only with:

• Service providers that process data on our behalf, such as payment processors, fraud screening, email delivery and data center operators, under contracts that limit their use of it.
• Authorities when required by a valid subpoena, court order or similar legal process. Unless legally prohibited, we notify the affected customer before disclosing.
• A successor if GPUlayer is involved in a merger or sale of assets, subject to this policy.

We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act.

5. Cookies

You choose which cookies we set through the banner shown on your first visit. You can change your choice at any time with the Cookie settings link in the footer.

6. Retention

We keep account and billing records for as long as your account is open and then for up to 7 years to meet tax and accounting rules. Network and access logs are kept for up to 90 days unless needed for an ongoing abuse or security investigation. When you terminate a service, its disks are wiped and the data on them cannot be recovered.

7. Security

We use encryption in transit, access controls based on least privilege, two-factor authentication for staff and physically secured data centers. No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete, correct and opt out of sale or sharing, and we will not discriminate against you for using them.

To make a request, email support@gpulayer.org. We reply within 30 days and may need to verify your identity first. If you are in the EU or UK you may also complain to your local data protection authority. Data is processed in the United States, and transfers from the EU or UK rely on Standard Contractual Clauses. A Data Processing Agreement is available on request.

9. Children

Our services are not directed to anyone under 18 and we do not knowingly collect their information.

10. Changes

If we make material changes, we will email account holders and update the effective date at least 30 days before they take effect.