Privacy Policy

This Privacy Policy applies to Hytron Network Services Limited, HytronVPS, hytron.io, idc.hytron.io, and related customer portal services. Hytron provides network and hosting services including IP transit, colocation, DDoS mitigation, cloud, VPS, and bare metal infrastructure across APAC regions.

If a customer uses Hytron services to host their own applications or customer data, the customer is responsible for their own end-user privacy obligations. Hytron processes that hosted content only as needed to operate, secure, support, or comply with legal requirements for the service.

We collect account data such as name, username, email address, authentication events, account settings, support tickets, abuse reports, and administrator communications.

We collect billing and transaction data such as orders, invoices, payments, refunds, account balance records, payment status, and payment provider references. Payment credentials are handled by payment processors where applicable and are not intentionally stored by us beyond operational references.

We collect service telemetry such as IP addresses, VM identifiers, hostnames, assigned resources, bandwidth usage, runtime state, API activity, login IPs, security logs, and other operational records needed to provide hosting and network services.

We use data to create and manage accounts, provision services, meter usage, process billing, provide support, investigate abuse, maintain network reliability, prevent fraud, secure the platform, and comply with applicable legal or regulatory obligations.

We may use aggregated or de-identified operational data to measure capacity, improve routing, plan infrastructure, and monitor service quality. We do not sell customer account data.

Customer-controlled VMs, servers, and network services may contain customer content. Hytron does not actively inspect hosted content as a normal business practice.

We may access metadata, logs, or hosted systems when required for troubleshooting, abuse handling, security response, service integrity, legal compliance, or when requested by the account holder.

The customer portal uses cookies, local storage, and similar browser storage for authentication, session continuity, language preferences, theme preferences, security controls, and core application behavior.

Some infrastructure providers, security providers, analytics tools, or payment processors may set their own cookies or collect request metadata when their services are used.

We share data only where operationally necessary. This may include payment processors, infrastructure vendors, anti-abuse partners, email delivery providers, support tooling, professional advisers, and law enforcement or regulators when legally required.

We may disclose limited customer or traffic metadata to upstream providers, data centers, or network partners when needed to mitigate attacks, process abuse reports, maintain routing integrity, or protect other networks.

We retain account, billing, security, traffic, and operational records for as long as needed to provide services, resolve disputes, comply with accounting obligations, investigate abuse, enforce terms, and protect network integrity.

Hosted content is retained according to the lifecycle of the purchased service and any backup or deletion behavior configured in the platform. Customers should maintain their own backups unless a separate backup product is explicitly purchased.

We use administrative, technical, and operational safeguards designed to protect account data and infrastructure. These safeguards include access controls, credential protection, audit logs, rate limits, network monitoring, and abuse handling workflows.

No system is perfectly secure. Customers must protect their own credentials, SSH keys, API keys, VM operating systems, applications, and data.

Hytron operates network and hosting services across APAC and may process data in jurisdictions where we, our upstreams, data centers, payment processors, or service providers operate.

By using the service, the customer understands that operational data may be transferred internationally where necessary to provide, secure, bill, and support the service.

Customers may update account profile information in the portal. Requests for account closure, data access, or correction can be made through the support ticket system, subject to identity verification and applicable retention obligations.

Certain records cannot be deleted immediately where they are needed for billing, security, fraud prevention, abuse handling, legal compliance, or dispute resolution.

We may update this Privacy Policy as services, infrastructure, or legal requirements change. Material changes will be published on the policy page or communicated through the customer portal where appropriate.