Privacy Policy

1. Information We Collect

VajraClouds operates on strict data minimization principles. We only collect details essential to provision your server and comply with Indian regulatory standards:

• Account Identification: Your name, email address, and optional Discord User ID.
• Authentication Data: Passwords stored exclusively as one-way salted hashes using bcrypt. Plaintext passwords are never stored or logged.
• Billing Metadata: Order numbers, invoice timestamps, gateway reference IDs (e.g. Razorpay Payment ID, Cashfree reference, bank UTR). We do NOT collect, process, or store credit or debit card numbers on our servers—all card transactions are tokenized through RBI-authorized payment aggregators.
• Telemetry: IP address, user-agent, and error diagnostics for session security and DDoS mitigation.

2. How Your Data Is Used

• To automatically provision and configure eligible server containers via Pterodactyl APIs.
• To deliver automated transactional emails containing login credentials, renewal reminders, and invoices.
• To prevent fraudulent payments, replay attacks, and abusive network activity.
• We never sell, rent, or monetize your personal data to advertisers or third-party brokers.

3. Storage & Security Architecture

All database records are stored in MariaDB 10.11 with parameterized PDO queries, preventing SQL injection vulnerabilities. Administrative actions are logged to an append-only immutable audit trail. Webhook callbacks from payment gateways are strictly validated via cryptographic HMAC-SHA256 signatures.

4. Your Rights & Data Requests

You may request export of your billing invoices or account deletion upon service expiration by contacting [email protected] or submitting a ticket under the Billing department in your Client Area.