1. Controller
Asuoo is operated by a French auto-entrepreneur: 6A Rue Laplace, 71420 Ciry-le-Noble, France. SIRET: pending.
Contact: contact@asuoo.com, support@asuoo.com, or open a ticket at https://help.asuoo.com.
2. Data We Collect
- Account data: email address, optional name, password hash, account creation date, login/session identifiers.
- Service data: selected plan, OS choice, order status, access token, VPS identifiers (VMID, node), hostname, IPv4, root password, and provisioning status.
- Billing data: Stripe customer, subscription, and checkout session IDs; invoices are stored by Stripe.
- Support data: ticket subject, category, messages, and attachments (file name, type, size, path).
- Security and technical data: IP address for hCaptcha verification and Stripe event payloads stored for audit and fraud prevention.
3. How We Use Your Data and Legal Bases
- Provide the service (contract): create accounts, provision VPS instances, authenticate users, and deliver support.
- Billing and legal obligations: manage subscriptions, handle payments via Stripe, and comply with accounting and tax rules.
- Security and fraud prevention (legitimate interest): protect accounts, prevent abuse, and enforce policies.
- Support communications (contract): respond to tickets and service requests.
- Consent where required: hCaptcha verification and any optional communications.
4. Sharing and Processors
We share data only with providers needed to deliver the service:
- Stripe: payment processing, subscriptions, and invoices.
- hCaptcha: bot protection during registration.
- Infrastructure and email providers: if configured, to host VPS infrastructure and send service emails.
We do not sell your personal data.
5. Cookies and Similar Technologies
We use essential session cookies to keep you signed in. Third-party providers (Stripe, hCaptcha) may set their own cookies. We do not use analytics or marketing cookies on asuoo.com.
6. Data Retention
- Account data is kept until you request deletion via a support ticket, unless we must keep certain records for legal reasons.
- Orders and billing records are kept for accounting and legal compliance (typically up to 10 years).
- Support tickets and attachments are kept while your account is active and as needed to resolve issues.
- Stripe event payloads and VPS events are retained for operational and security auditing.
7. International Transfers
Stripe and hCaptcha may process data outside the EU. They provide safeguards such as standard contractual clauses where required.
8. Security
We use reasonable technical and organizational measures to protect data. You are responsible for securing access to your VPS and for changing the root password after first login.
9. Your Rights
Under GDPR, you have the right to access, rectify, delete, restrict, object, and port your personal data. You can exercise your rights by contacting us. You may also lodge a complaint with the French data protection authority (CNIL).
10. Changes
We may update this Privacy Policy from time to time. The updated version will be posted on this page.