Privacy Policy
What Data We Collect
We collect the minimum data necessary to provide our services. Here's exactly what we store:
Account Data
- Credential: A 32-character random string used for authentication
- Account balance: Your current credit balance
- Account creation date
Payment Data
- Stripe customer ID and payment method ID (if you use card payments) - This allows Stripe to process payments without us storing your card details
- Invoice records: Amount, payment method used (card/crypto), timestamp, description
- Crypto payment references: Order IDs for cryptocurrency payments
We do not store credit card numbers, CVV, or any raw payment details. All card processing is handled by Stripe.
Service Data
VPS Instances:
- Server configuration (hostname, IP, OS, specs)
- Billing info (expiration date, auto-renew settings)
Proxy Instances:
- Proxy credentials and configuration
- Whitelisted IPs (datacenter proxies)
- Bandwidth usage (residential proxies)
Support Tickets
- Ticket subject and messages
- Timestamps
Notifications
- System notifications (renewal warnings, etc.)
- Read/unread status
Data Retention
- Inactive accounts with zero balance, no active services, and no open tickets are automatically deleted after 24 hours
- Active accounts are retained as long as they have balance, services, or tickets
- Expired services are removed along with their associated data
- Read notifications older than 30 days are automatically cleaned up
Server Logs
We use Apache as our web server, with all access logs turned off (piped to /dev/null). This means none of the following records are kept:
- IP addresses of visitors
- Request timestamps
- User agent strings
Third-Party Services
We use the following third-party services:
Payment Processing
- Stripe: Payment processing for card payments
- Heleket: Cryptocurrency payment processing
Security
- Altcha: Self-hosted bot protection (no third-party data sharing, no tracking cookies)
Each service has its own privacy policy governing their data handling.
Your Rights
- Access: You can view all your data through your dashboard
- Deletion: You can delete your account at any time by visiting the settings page and using the account deletion flow.
Governing Law & PIPEDA Compliance
Servury is operated by Avalanche Systems Inc. (DBA Servury), a corporation registered in Canada. This privacy policy is governed by and construed in accordance with Canadian federal privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
Under PIPEDA, you have the right to:
- Know what personal information we hold about you and how it is used
- Access your personal information and request corrections
- Withdraw consent to the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)
- Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated
Because we collect the absolute minimum personal information, PIPEDA compliance is straightforward. There is very little to protect.