Privacy Policy
Version 2026-10-27 · Effective 27 October 2026
This policy explains how AnyCloud Singapore Limited ("we") handles your personal data when providing anycloud.host. We process personal data in line with applicable data protection law, including Singapore's Personal Data Protection Act 2012 and Hong Kong's Personal Data (Privacy) Ordinance.
1. What we collect
- Account: name, email address, password (stored only as a salted hash), language and email notification preferences.
- Sign-in: if you use GitHub or Google, the account id, username and email they provide; your passkeys' public keys; login sessions; and the browser details and IP address used for new-device alerts.
- Billing: balance, charges, top-ups and payment status. Card details are handled by Stripe directly; we never see or store full card numbers.
- Instances: hostnames, regions, plans, images, IP addresses, the SSH public keys you add, power and reinstall history, and traffic usage.
- Monitoring: resource usage read on the hosts: CPU usage, bandwidth and packet rates, and the number and destination addresses and ports of outbound connections. We do not read the files on your instances or the content of their traffic. Raw monitoring samples are kept for about 7 days.
- Consent records: which version of these documents you accepted, when, and from which IP address and browser.
- Communications: emails we send you and what you send us by email or support ticket.
2. How we use it
- To run the Service: create and manage instances, take payments, meter and bill.
- To keep accounts and the platform secure and to detect and deal with abuse (see the Acceptable Use Policy).
- To send service emails such as instance details, low balance warnings, receipts and security alerts. You can turn some of them off under Login & security; important notices such as suspension and deletion cannot be turned off.
- To meet legal obligations, such as keeping accounting records and answering lawful requests from authorities.
We do not sell your personal data or use it for advertising.
4. International transfers
Your instances run in the regions you choose. Our providers, such as Stripe, may process data in other countries. We only use providers that commit to protecting it properly.
5. How long we keep it
- Account data: while your account exists and up to 24 months after it is closed, to handle disputes and prevent abuse.
- Billing, payment and consent records: 7 years, for accounting and legal reasons.
- Raw monitoring samples: about 7 days. Alerts and enforcement records: up to 24 months.
- Data on an instance's disk: deleted with the instance; we keep no backups.
6. Security
We use reasonable technical and organisational measures to protect your data, including HTTPS throughout, password hashing, encrypted storage of sensitive settings and access controls. No system is perfectly secure, though.
7. Your rights
You can ask to access, correct or delete your personal data, or object to some uses of it. Most of it can be seen and changed in the console; for anything else email [To be completed: contact email] and we will reply within 30 days. Data we must keep by law, such as accounting records, cannot be deleted before its retention period ends.
9. Children
The Service is not meant for anyone under 18, and we do not knowingly collect their data.
10. Changes and contact
When we update this policy we change the version and date at the top, and tell you about material changes by email or in the console. Questions? Contact AnyCloud Singapore Limited, [To be completed: registered address], email [To be completed: contact email].