Privacy Policy

1. Information we collect

We may collect information you provide directly, such as your email address, username, support messages, billing details, and account settings. When you log in with Discord, we may receive Discord account information such as your Discord user ID, username, avatar, and email address where Discord provides it.

For hosting services, we may process server names, server identifiers, hosted files, bot configuration, panel usernames, resource usage, logs, IP addresses, credit and reward activity, Minecraft plan information, payment status, and technical data needed to provide and secure the service.

When using Discord bot templates or whitelabel services, we may process bot-related configuration information such as Discord application IDs, client IDs, encrypted client secrets, encrypted bot tokens, startup configuration, uploaded files, deployment status, and server provisioning information strictly for operating and managing the requested hosting services.

2. Payment information

Payments may be processed by Stripe. We do not store full card numbers or card security codes on our own systems. Stripe may process payment details, billing information, fraud signals, and transaction data according to its own privacy and security terms.

3. How we use information

We use information to create and manage accounts, provide hosting, operate the panel, assign resources, process credits and rewards, deliver Minecraft hosting plans, process payments, provide support, send service notices, prevent fraud and abuse, enforce rules, improve reliability, secure infrastructure, and comply with legal obligations.

4. Cookies and local storage

We may use cookies, session tokens, and local storage to keep you logged in, remember theme preferences, protect accounts, prevent abuse, and operate the website. You can control cookies through your browser, but blocking some cookies may stop parts of the service from working correctly.

5. Legal bases for processing

Where GDPR, UK GDPR, or similar laws apply, we process personal information based on contract performance, legitimate interests, consent where required, legal obligations, and protection of vital interests. Our legitimate interests include platform security, fraud prevention, abuse prevention, service operation, support, and infrastructure reliability.

6. Sharing information

We may share information with service providers that help us operate the platform, such as payment processors, infrastructure providers, authentication providers, panel or hosting software providers, email or support tools, and security services. We may also disclose information if required by law, to respond to lawful requests, to protect users, or to investigate abuse and security threats.

We do not sell personal information. We do not share personal information with advertising partners for targeted advertising on X Systems Hosting.

7. Hosted content and safety review

Because hosting can be abused for malware, phishing, token theft, spam, scams, and other harmful activity, we may review hosted content, logs, file names, process activity, network activity, and account activity when needed to protect the platform, enforce our terms, or respond to reports. Reviews may be automated or manual.

8. Data retention

We keep information for as long as needed to provide services, maintain accounts, handle billing, resolve disputes, prevent abuse, enforce terms, comply with law, and keep reasonable business records. Deleted or terminated account data may remain in backups or security records for a limited time before deletion or anonymization.

9. Security

We use reasonable technical and organizational measures to protect information, including access controls, authentication, monitoring, and security review. No internet service can be guaranteed to be completely secure, so you should use strong passwords, keep tokens private, avoid sharing panel access, and back up important files.

Sensitive credentials such as Discord bot tokens and client secrets may be encrypted or access-restricted within our systems where technically practical. While we take reasonable steps to protect stored information, no hosting platform or internet service can guarantee absolute security.

10. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, request portability, withdraw consent, or complain to a data protection authority. You can request privacy help by contacting us. We may need to verify your identity before acting on a request.

11. Children

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13 without proper consent, we will take steps to delete it.

12. International transfers

Your information may be processed in countries other than where you live. Where required, we rely on appropriate safeguards or lawful transfer mechanisms to protect personal information.

13. Changes to this policy

We may update this Privacy Policy when our services, providers, laws, or practices change. The updated version will be posted with a new last updated date.

14. Contact

For privacy requests or questions, contact oriveth@corexbot.xyz or use our Discord server at discord.gg/xsystems.