Privacy Policy

1. Introduction

GRAVION ("Company", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our computing infrastructure services (the "Services").

Please read this Privacy Policy carefully. By using our Services, you consent to the collection, use, and disclosure of your information as described in this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Identity Data: Name, company name, job title
• Contact Data: Email address, mailing address
• Account Data: Username, password (encrypted), account preferences
• Financial Data: Payment information, billing address (processed by secure third-party payment processors)

2.2 Technical Data

• IP address, browser type and version, operating system
• Device identifiers and network information
• Pages visited, time spent, referring URLs
• Cookies and similar tracking technologies

2.3 Usage Data

• Computing resource consumption metrics
• Service usage patterns and performance data
• Support requests and communications

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, operate, and maintain our computing infrastructure services
• Account Management: To create and manage your account, process transactions
• Communication: To send service updates, technical notices, and support responses
• Improvement: To analyze usage patterns and improve our Services
• Security: To detect, prevent, and address fraud, abuse, or security issues
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for processing your personal data includes:

• Contract: Processing necessary to fulfill our contractual obligations to you
• Consent: Processing based on your explicit consent (e.g., marketing communications)
• Legitimate Interest: Processing necessary for our legitimate business interests, provided they do not override your rights
• Legal Obligation: Processing required to comply with legal obligations

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist in operating our Services (e.g., payment processors, cloud providers), subject to confidentiality obligations
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice
• Protection of Rights: To protect the rights, property, or safety of GRAVION, our users, or the public

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal, accounting, or reporting requirements
• Resolve disputes and enforce our agreements

Upon account termination, we will delete or anonymize your personal information within 90 days, unless retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal information
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal information ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Request transfer of your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at privacy@gravion.com.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Understand how you interact with our website
• Improve our Services and user experience

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Services.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or other approved mechanisms, to protect your data during international transfers.

11. Children's Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or website notice at least 30 days before they take effect. The "Last Updated" date at the top of this page indicates when this policy was last revised.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

• Data Protection Officer: privacy@gravion.com
• General Inquiries: legal@gravion.com
• Address: GRAVION Global Compute Infrastructure