1. Information We Collect
in short Account details, orders, support messages, what you host, and connection logs.
We collect information you provide to us, information generated when you use our services, and information received from payment and service providers. We only use it for the purposes described below.
1.1 Information You Provide
We collect information you provide when you create an account, purchase or use a service, contact support, or otherwise communicate with us. This may include:
- Contact details such as your email address, username, and the Discord handle or phone number you choose to provide
- Account and service credentials, including usernames, one-way account password hashes, and service credentials needed to create or secure a service
- Order, billing, plan, server, and location details
- Support requests, Discord messages, feedback, and other communications you send to us
- Information you choose to place on a Zenix-hosted service, including server configuration and content
Stripe collects payment card details directly during checkout. Zenix receives payment status, billing email, transaction identifiers, and related order information; we do not receive or store full card numbers.
1.2 Information We Collect Automatically
When you use our website or services, we and our infrastructure providers may collect:
- Device and connection information such as IP address, browser type, operating system, and request timestamps
- Security, availability, and performance logs
- Service identifiers, resource usage, and diagnostic information
- Essential cookies and browser storage used for sessions, currency, consent, and preferences
- A clearly marked advertising area on one authenticated dashboard page, which can be switched off
2. How We Use Your Information
in short To run, secure and support the service, take payments, settle disputes and meet legal duties.
We use personal information only as needed to:
- Create accounts, provision servers, deliver services, and process payments
- Operate, maintain, secure, troubleshoot, and improve the website and services
- Respond to support requests and communicate about orders, incidents, changes, and service status
- Detect fraud, abuse, security threats, and attempts to evade service restrictions
- Enforce our Terms of Service, protect our rights, and resolve disputes or chargebacks
- Operate the single dashboard advertising area and, where offered, calculate related Chip rewards
- Meet accounting, tax, legal, and regulatory obligations
Where applicable law requires a stated legal basis, processing may be based on performing a contract, complying with a legal obligation, our legitimate interests, or your consent, depending on the purpose.
4. Data Security
in short Appropriate safeguards, but no system is 100% secure, so absolute security is not guaranteed.
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.
5. Your Rights and Choices
in short Email [email protected] for access or correction; other rights where your law gives them.
Depending on your location and the applicable law, you may request access to or correction of personal information we hold about you. Individuals in the EEA, United Kingdom, or other jurisdictions with additional rights may also request deletion, restriction, objection, portability, or withdrawal of consent where those rights apply.
- Accessing your personal information and, where required, information about how it was used or disclosed
- Correcting inaccurate or incomplete personal information
- Requesting erasure or restriction where the applicable law requires or permits it
- Objecting to processing or withdrawing consent where processing is based on consent
- Requesting a portable copy where a portability right applies
To exercise a right, email [email protected] with the account email, the request, and enough information for us to verify your identity. We will respond within the period required by applicable law, including any extension that law allows. We may ask for clarification or identity verification before acting.
7. Children's Privacy
in short Under 18 only with a parent’s or guardian’s explicit consent and supervision, and any stricter local rule.
Our services are intended for people who can legally agree to our Terms of Service. Users under 18 may use the services only with the explicit consent and supervision of a parent or legal guardian, subject to any stricter age or consent rule that applies where they live. If you believe we have collected information in breach of an applicable child-privacy rule, contact us.
8. Data Retention and Deletion
in short Kept as long as the service, security, disputes or tax rules need; deletion follows the law that applies to you, not cancellation.
We retain personal information for as long as needed to provide the service, maintain security, prevent fraud and abuse, enforce bans, resolve disputes and chargebacks, keep accounting and tax records, or comply with legal obligations. Operational logs are kept only for the period needed for security and reliability work, billing records for the period required by accounting or tax rules, and account or abuse records for as long as needed to provide services, resolve disputes, or enforce a ban. We do not promise routine deletion solely because an account is cancelled or because a user asks, unless an applicable law gives that user a deletion right or requires us to remove the information.
For Singapore users, deletion is handled under the PDPA and other applicable law rather than as an automatic cancellation feature. For EEA, UK, and other jurisdictions with a legally applicable erasure right, the process and response period in that law will apply.
If a legally valid deletion request applies, we will verify the request and process it within the full response period permitted by the applicable law, including any lawful extension. Some data may remain in backups or security records until the normal retention or backup-rotation cycle, but only where the applicable law permits it. Where the law requires deletion, we will delete or irreversibly anonymize eligible information within that legal period.
Cancellation currently stops or suspends the relevant service; it does not guarantee immediate deletion of server data, account records, or backups. Request an export before cancellation if you need to keep service content.
A deletion request does not restore access, remove a valid debt or chargeback, or circumvent a suspension, termination, or ban. We may keep a limited suppression or abuse-prevention record, such as an account identifier or a one-way contact hash, for as long as needed and as permitted by applicable law to enforce that decision. Where a third-party provider holds information, its own retention policy may also apply.
9. Data Breach Notification
in short A notifiable breach goes to the PDPC within three calendar days of that finding, and to affected people as soon as practicable where required.
We assess suspected security incidents to determine whether notification is required. If a breach is notifiable under Singapore law, we will notify the PDPC as soon as practicable and no later than three calendar days after determining that the breach is notifiable, and notify affected individuals as soon as practicable where required. For people in other jurisdictions, we will follow the notification deadlines and thresholds that apply to them.
Notices will normally be sent by email or another direct, authenticated channel. We may publish a general service notice, including on Discord, but will not use a public announcement to disclose individual personal information. Where appropriate, a notification may describe:
- The nature of the breach and data affected
- The likely consequences of the breach
- Measures taken to address the breach and prevent future incidents
- Recommended actions you should take to protect yourself
10. Changes to This Privacy Policy
in short Changes are posted on this page with a new Last Updated date; material ones are highlighted where appropriate.
We may update this Privacy Policy when our services, data practices, or legal obligations change. We will post the updated version on this page and change the "Last Updated" date. Material changes will be highlighted where appropriate.
11. Contact Us
in short Privacy questions and requests go to [email protected]; Singapore users still concerned can go to the PDPC.
For privacy questions, access or correction requests, deletion requests where applicable, or DPO enquiries, please contact our privacy contact at:
Privacy / DPO contact: [email protected]
Business: Zenix.sg (UEN: 53514524A)
General support: Discord Join our Discord server
Singapore users who remain concerned after contacting us may also raise a data-protection concern with the Personal Data Protection Commission (PDPC).
Please do not send passwords, identity documents, payment card details, or other sensitive information through a public Discord channel.