Privacy notice

1. Who is responsible for your data

The controller of your personal data is Martin Oksa, Trencin, Slovakia. For anything about your data, write to support@fxcomputers.net.

This notice explains what personal data CloudStream processes, why, on what legal basis under the General Data Protection Regulation (EU) 2016/679 ("GDPR"), for how long, and what your rights are.

2. What we process and why

• Your account: email address, display name, your password (stored only as a salted hash, never in readable form), when you created the account and which version of the Terms of Use you accepted and when. Why: to give you an account and provide the service. Basis: performance of the contract (Art. 6(1)(b)).
• Credits and payments: your balance, the history of top-ups, usage charges, refunds and adjustments, and the payment provider's reference for each payment. Card and payment-account details are entered on the payment provider's own page and never reach us; we receive the amount, the currency, the reference and the email used. Why: to bill for the service and keep proper records. Basis: the contract (Art. 6(1)(b)) and our legal obligations under tax and accounting law (Art. 6(1)(c)).
• Your machines: their names, sizes, images, state, network addresses and forwarded ports, snapshots, and per-minute usage records. Why: to run, bill and support them. Basis: the contract (Art. 6(1)(b)).
• Technical logs: IP addresses, browser type, the pages and actions requested, times, and errors, on our web server and the portal. Why: to keep the service secure, find and fix faults, and investigate misuse. Basis: our legitimate interest in a secure, working service (Art. 6(1)(f)).
• Sign-ins: when each browser you use signed in and was last active, its IP address and browser type, and the last page it opened. Why: to show administrators who is signed in, let them sign a lost or misused browser out, and keep the service secure. Basis: our legitimate interest in a secure, working service (Art. 6(1)(f)).
• Messages you send us (e.g. to support). Why: to answer them. Basis: the contract, or our legitimate interest in answering you (Art. 6(1)(b), (f)).

You must give an email address and a password to have an account; without them we can't provide the service. Everything else is created as you use it.

3. What's on your machines

Files and data you keep on your machines (including anything you upload through the file manager) are yours. We don't look at them, except where it's needed to keep the service running (for example restoring a machine you asked us to fix), to deal with a security incident or a serious breach of the Terms of Use, or where the law requires it. If you store other people's personal data on your machines, you are responsible for it.

4. Cookies

CloudStream uses only cookies that are strictly necessary for it to work: one that keeps you signed in (and, if you tick "Keep me signed in", one that remembers you), and one that protects forms against forgery. The streaming and file pages set their own sign-in cookie for the same purpose. There are no analytics, advertising or tracking cookies, so we don't ask for consent to cookies.

5. Who else sees your data

Our servers are our own and are located in Slovakia. We share personal data only with:

• Paddle, CloudFlare
• public authorities, where the law obliges us to (for example tax authorities, or a court or police order).

Some of these providers may process data outside the European Economic Area. Where they do, they rely on safeguards the GDPR allows, such as the European Commission's adequacy decision for the EU–US Data Privacy Framework or standard contractual clauses. We don't sell your data and we don't use it for advertising.

6. How long we keep it

• Account and machine data: while your account exists. When you ask us to close it, we delete your machines and account data within 30 days, except what we must keep by law.
• Billing records: as long as tax and accounting law requires, up to 10 years after the year they relate to.
• Technical logs: log files have a fixed maximum size and older entries are overwritten by newer ones, normally within a few weeks.
• Sign-ins: 90 days after the browser was last active.
• Backups of the portal's database are kept for about 14 days, so deleted data disappears from them after that.

7. Automated decisions

We don't profile you. The only automatic decision is part of the contract itself: when your credits run out, your machines are stopped until you top up (see the Terms of Use).

8. Your rights

You have the right to:

• get a copy of your personal data and information about how we use it (access);
• have incorrect data corrected (rectification);
• have your data deleted, where we no longer need it or have no legal basis to keep it (erasure);
• have its use restricted while a disagreement is resolved (restriction);
• receive the data you gave us in a machine-readable format (portability);
• object to processing based on our legitimate interest (objection).

Write to support@fxcomputers.net. We answer within one month, free of charge, and may ask you to confirm it's really you. You can also complain to the Slovak supervisory authority, the Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, or to the authority where you live or work.

9. Children

CloudStream is not meant for children. In Slovakia a child under 16 needs a parent's or guardian's consent to use online services; if you are under 16, don't create an account without it.

10. Changes

We'll update this notice when how we handle data changes, and show the date of the latest version at the top. Important changes will be announced in the portal or by email.