1. Data controller and contact
Data controller: <TODO: legal entity name>, registration number <TODO: legal entity registration>, <TODO: legal entity address>, operating gpuex. Email: support@gpuex.example.
2. Information covered by this notice
gpuex processes the account and profile information a customer enters, such as name and email address; the billing details entered before a top-up (name, email, address and phone number); payment metadata supplied by the payment processor; communications with support; wallet, credit, machine and usage records; and automatically generated technical records such as browser, operating-system and device information, IP address, access and referrer data, and session cookies.
3. Operational purposes
The data is used to administer accounts, provision and operate machines, meter and bill usage, provide customer support, send transactional and service messages, prevent fraud and security incidents, enforce acceptable use, improve the service and meet legal duties. Marketing messages are sent only with consent. Customer personal data is not sold to third parties.
4. Service providers and legal disclosure
Information is shared with the providers gpuex uses for payments, email delivery, infrastructure and support, under appropriate contractual protection. When a machine is started, the IP address it is started from is passed to the infrastructure provider so that remote access to the machine is limited to that address. Information may also be disclosed where the law requires it or where needed to protect rights or safety, and may transfer as part of a corporate transaction.
Card payments are processed by VelvexPay, a PCI-DSS compliant payment processor, which also receives the billing details entered before a top-up. Card details are entered directly on the processor's hosted page: gpuex never receives or stores the full card number, expiry date or security code, and keeps the payment reference, the amount and status of the transaction, and the payment details the processor reports back.
6. Retention
Account and profile data are kept while the account is open and deleted within 30 days after it is closed, except the records below that must be kept longer. A machine's disk and its contents are kept until the customer deletes the machine or closes the account, or until the account is terminated under the Terms of Service; support confirms erasure of a deleted machine on request. Machine records (configuration, status history and usage) are kept with the account's billing records. Transaction, payment and wallet records are kept for as long as tax, accounting and anti-money-laundering law requires. Backups are kept for up to 30 days, and support communications for 2 years.
7. Rights and transfers
Applicable data-protection law may provide rights of access, correction, deletion, portability, objection and restriction, and the right to withdraw consent at any time. Requests can be sent to support@gpuex.example and are answered within 30 days. Marketing consent can be withdrawn through the unsubscribe link in any marketing message or by contacting support. Customers can also complain to their local data-protection authority. International transfers use appropriate safeguards, including a data-processing agreement with standard contractual clauses (SCCs), which business customers can request free of charge from support@gpuex.example.
8. Children, third parties and updates
The service is not intended for users under 18, and children's data is not knowingly collected. External infrastructure, streaming and payment services have their own privacy rules. gpuex may update this notice for operational or legal changes and publishes the updated version and date on the site.