Privacy Policy

We collect information you provide to us, information generated when you use our services, and information received from payment and service providers. We only use it for the purposes described below.

1.1 Information You Provide

We collect information you provide when you create an account, purchase or use a service, contact support, or otherwise communicate with us. This may include:

• Contact details such as your email address, username, and the Discord handle or phone number you choose to provide
• Account and service credentials, including usernames, one-way account password hashes, and service credentials needed to create or secure a service
• Order, billing, plan, server, and location details
• Support requests, Discord messages, feedback, and other communications you send to us
• Information you choose to place on a Zenix-hosted service, including server configuration and content

Stripe collects payment card details directly during checkout. Zenix receives payment status, billing email, transaction identifiers, and related order information; we do not receive or store full card numbers.

1.2 Information We Collect Automatically

When you use our website or services, we and our infrastructure providers may collect:

• Device and connection information such as IP address, browser type, operating system, and request timestamps
• Security, availability, and performance logs
• Service identifiers, resource usage, and diagnostic information
• Essential cookies and browser storage used for sessions, currency, consent, and preferences
• A clearly marked advertising area on one authenticated dashboard page, which can be switched off

We use personal information only as needed to:

• Create accounts, provision servers, deliver services, and process payments
• Operate, maintain, secure, troubleshoot, and improve the website and services
• Respond to support requests and communicate about orders, incidents, changes, and service status
• Detect fraud, abuse, security threats, and attempts to evade service restrictions
• Enforce our Terms of Service, protect our rights, and resolve disputes or chargebacks
• Operate the single dashboard advertising area and, where offered, calculate related Chip rewards
• Meet accounting, tax, legal, and regulatory obligations

Where applicable law requires a stated legal basis, processing may be based on performing a contract, complying with a legal obligation, our legitimate interests, or your consent, depending on the purpose.

We may share the minimum information needed with:

• Stripe, which processes payments and billing information on our behalf
• Hosting, email, monitoring, and infrastructure providers that operate the website, panel, and servers
• Pterodactyl-powered hosting infrastructure to provision and manage your server account
• Discord, when you contact us there or when order and support notifications are routed through our private webhook
• Advertising providers, if used, only to deliver or measure an ad in the single clearly marked dashboard ad area while it is enabled
• Professional advisers, law enforcement, regulators, or other parties where required or permitted by law
• A buyer or successor if Zenix or a material part of its business is reorganised, sold, or transferred

We do not sell your personal information to third parties.

3.1 Payment Processors

We use Stripe for payment processing. Stripe collects payment card details directly and provides us with payment status, billing details, and transaction identifiers. For details, review Stripe's privacy policy. Other providers used to operate a service may process data in accordance with their own privacy notices. Account passwords are stored as one-way hashes; service credentials may be encrypted and transmitted to the hosting panel when needed to provision or operate a service.

• Stripe Privacy Policy
• Discord Privacy Policy

Some providers may process personal information outside Singapore. We take steps required by applicable data-protection law to use providers that offer a comparable level of protection and to put appropriate contractual or other safeguards in place.

For the current material subprocessor list, processing locations, or a description of our role when handling hosted customer content, contact our privacy address below. We will identify the relevant provider and purpose for the service involved.

3.2 ZenDash v4.6 AI Assistance

ZenDash v4.6 includes optional AI-assisted diagnosis and support. AI assistance is opted out by default. We do not send diagnostic requests to an AI provider unless you actively opt in. When enabled, you can choose an available model route: Google Gemini, GLM, DeepSeek, or Qwen Local (hosted by Zenix).

An enabled diagnosis may send the prompt and the diagnostic context needed for the selected feature, such as error messages, logs, server status, configuration, resource usage, or files and text that you choose to submit. Do not include passwords, API keys, payment details, or other secrets in an AI request. Cloud model routes are subject to the selected provider's current terms and privacy notice, and may involve processing outside Singapore. Zenix does not control those providers' retention or training practices.

The Qwen Local route is hosted by Zenix and configured as a zero-data-retention (ZDR) route: Zenix does not retain the AI prompt, diagnostic payload, or generated response for that route. Separate account, security, and service-availability logs may still be retained as described elsewhere in this Privacy Policy. You can withdraw AI consent at any time; withdrawal stops new AI requests but cannot recall information already sent to a cloud provider.

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

Depending on your location and the applicable law, you may request access to or correction of personal information we hold about you. Individuals in the EEA, United Kingdom, or other jurisdictions with additional rights may also request deletion, restriction, objection, portability, or withdrawal of consent where those rights apply.

• Accessing your personal information and, where required, information about how it was used or disclosed
• Correcting inaccurate or incomplete personal information
• Requesting erasure or restriction where the applicable law requires or permits it
• Objecting to processing or withdrawing consent where processing is based on consent
• Requesting a portable copy where a portability right applies

To exercise a right, email [email protected] with the account email, the request, and enough information for us to verify your identity. We will respond within the period required by applicable law, including any extension that law allows. We may ask for clarification or identity verification before acting.

We use essential browser storage to keep authenticated sessions working and to remember currency, consent, and interface preferences. Separately, one clearly marked advertising area may appear on one authenticated dashboard page. Ads are confined to that page and are not shown elsewhere on the website or dashboard. We do not use cross-site advertising profiles or general-site advertising tracking. Some of this storage is a cookie and some is local browser storage, so clearing browser site data may sign you out or reset preferences.

The dashboard ad area is opt-out by design. Its control lets you disable the ad area without affecting account or service access; once disabled, we will not request or display ads there. If a third-party provider supplies an enabled ad, that provider may process limited technical information needed to return or measure that ad under its own privacy notice. We do not use that area to follow you across other pages or sites. To change the ad setting, use the dashboard control or contact us at [email protected].

Our services are intended for people who can legally agree to our Terms of Service. Users under 18 may use the services only with the explicit consent and supervision of a parent or legal guardian, subject to any stricter age or consent rule that applies where they live. If you believe we have collected information in breach of an applicable child-privacy rule, contact us.

We retain personal information for as long as needed to provide the service, maintain security, prevent fraud and abuse, enforce bans, resolve disputes and chargebacks, keep accounting and tax records, or comply with legal obligations. Operational logs are kept only for the period needed for security and reliability work, billing records for the period required by accounting or tax rules, and account or abuse records for as long as needed to provide services, resolve disputes, or enforce a ban. We do not promise routine deletion solely because an account is cancelled or because a user asks, unless an applicable law gives that user a deletion right or requires us to remove the information.

For Singapore users, deletion is handled under the PDPA and other applicable law rather than as an automatic cancellation feature. For EEA, UK, and other jurisdictions with a legally applicable erasure right, the process and response period in that law will apply.

If a legally valid deletion request applies, we will verify the request and process it within the full response period permitted by the applicable law, including any lawful extension. Some data may remain in backups or security records until the normal retention or backup-rotation cycle, but only where the applicable law permits it. Where the law requires deletion, we will delete or irreversibly anonymize eligible information within that legal period.

Cancellation currently stops or suspends the relevant service; it does not guarantee immediate deletion of server data, account records, or backups. Request an export before cancellation if you need to keep service content.

A deletion request does not restore access, remove a valid debt or chargeback, or circumvent a suspension, termination, or ban. We may keep a limited suppression or abuse-prevention record, such as an account identifier or a one-way contact hash, for as long as needed and as permitted by applicable law to enforce that decision. Where a third-party provider holds information, its own retention policy may also apply.

We assess suspected security incidents to determine whether notification is required. If a breach is notifiable under Singapore law, we will notify the PDPC as soon as practicable and no later than three calendar days after determining that the breach is notifiable, and notify affected individuals as soon as practicable where required. For people in other jurisdictions, we will follow the notification deadlines and thresholds that apply to them.

Notices will normally be sent by email or another direct, authenticated channel. We may publish a general service notice, including on Discord, but will not use a public announcement to disclose individual personal information. Where appropriate, a notification may describe:

• The nature of the breach and data affected
• The likely consequences of the breach
• Measures taken to address the breach and prevent future incidents
• Recommended actions you should take to protect yourself

We may update this Privacy Policy when our services, data practices, or legal obligations change. We will post the updated version on this page and change the "Last Updated" date. Material changes will be highlighted where appropriate.

For privacy questions, access or correction requests, deletion requests where applicable, or DPO enquiries, please contact our privacy contact at:

Privacy / DPO contact: [email protected]
Business: Zenix.sg (UEN: 53514524A)
General support: Discord Join our Discord server

Singapore users who remain concerned after contacting us may also raise a data-protection concern with the Personal Data Protection Commission (PDPC).

Please do not send passwords, identity documents, payment card details, or other sensitive information through a public Discord channel.