Privacy Policy

1.1 This policy applies to personal information processing activities arising from your accessing the Kvmkit website, registering/logging in, placing an order, using the console or instances, and communicating with us.

1.2 Where a separate pop-up, order confirmation, or feature description conflicts with this policy on the same matter, the text specific to that transaction or feature governs. For interpretation and enforcement of this policy, we reserve the right to make reasonable interpretations for compliance and contractual purposes without violating mandatory law.

1.3 This policy is used in conjunction with theTerms of Service; for the scope of service provision, suspension/termination, and liability limitation, the Terms of Service govern.

2.1 Information you provide voluntarily: contact details, identity verification materials, and communications submitted during registration/login, ordering, invoicing, tickets, and customer service. You must ensure the accuracy of information provided; losses caused by false or incomplete information are your responsibility.

2.2 Information automatically generated when using the service: access and service logs, device and browser info, approximate location based on IP, operation records, technical metadata related to resources (e.g. instance ID, usage, status), and summary network/connection info required for contract performance, anti-fraud, and security auditing.

2.3 Payment information: order amounts, payment channel receipts, and reconciliation results are processed collaboratively by us and licensed payment institutions. Complete card numbers and other sensitive payment data are generally collected directly by the payment institution. For disputed payments or chargebacks, we may retain transaction records and identity verification results within the scope necessary for communication with payment institutions and card issuers.

2.4 You must not submit passwords, private keys, or other third parties' non-anonymized personal information via tickets, chat, or similar channels. We are not responsible for any resulting leaks or compliance risks.

3.1 Subject to applicable law, we may use information for the following purposes (including as necessary to form and perform contracts, and for legitimate interests, limited to what is needed to achieve the purpose):

• Account activation, order fulfillment, billing, reconciliation, invoicing, and after-sales service;
• Technical support, ticket processing, and communicating with you on service matters;
• Identity verification, account security, anti-fraud, abuse detection, debt collection, and Terms of Service enforcement;
• System operations, capacity and quality analysis, product improvement, and internal statistics (data may be de-identified or aggregated);
• Complying with laws and regulations, cooperating with lawful requests from regulatory and judicial authorities, and processing necessary to protect significant legitimate interests such as personal safety and property;
• Sending service notices, security and compliance alerts with your consent or as legally permitted. Marketing communications will, where possible, include an unsubscribe option, but this does not affect necessary contract-related notices.

3.2 When we reasonably determine that continuing to process information as originally intended conflicts with this policy or applicable law, we may adjust the scope of processing after stopping use, anonymizing, or providing separate notice (as circumstances require). To assert rights, address disputes, or respond to regulatory investigations, we may retain and use relevant information beyond the normal processing period for as long as necessary.

4.1 We may use cookies, local storage, or similar technologies to maintain sessions, save language/UI preferences, perform necessary risk control and session security checks, and conduct access statistics and experience improvement.

4.2 You may manage cookies in your browser. Refusing or deleting technologies necessary to run the service may result in inability to log in, complete an order, or access certain features. This does not constitute a breach by us and does not automatically create a refund obligation (per theTerms of Serviceand order terms).

5.1 Sharing: We may provide processors such as payment institutions, cloud computing and communications providers, and risk control and security service providers with information necessary for contract performance, anti-fraud, and compliance, and require them to maintain confidentiality and security through contracts. Where required by law, court orders, or administrative authorities, we may disclose information to authorized authorities within the legally required scope, without prior notice to you (unless disclosure is prohibited by law).

5.2 Transfer: If personal information is transferred due to merger, division, asset restructuring, or business sale, to the extent permitted by law, the new holder may continue the information processing relationship to the extent necessary to provide the same or equivalent service or fulfill existing contracts. We will endeavor to require the recipient to be bound by no less protection than this policy, and will inform of material changes via announcements or in-site notices as required by law.

5.3 Public disclosure: Except where legally mandated or necessary to protect the significant legitimate rights of the platform, other users, or the public, we will not publicly disclose your personal information. To stop clearly illegal or non-compliant use, we may provide necessary material summaries to affected rights holders or authorities within the scope permitted by law.

6.1 Your information may be stored in infrastructure located in different jurisdictions by us or our partners. Given the nature of the cloud server business, by ordering and using the service you understand and agree that data may be transferred and stored cross-border or across regions to fulfill contractual purposes (where required by applicable law, we will obtain separate consent or adopt alternative measures).

6.2 Data center region may affect the technical data storage location, per theplan details, order page, and order confirmation. We cannot guarantee a permanently fixed judicial jurisdiction unrelated to public internet routing for any single customer.

7.1 We retain information for the period necessary to fulfill the purposes described in this policy. We may also retain necessary records for longer statutory or industry-standard periods for accounting and tax, anti-money laundering and payment disputes, debt collection, administrative enforcement cooperation, and asserting rights or defending litigation under the service contract. Account cancellation does not automatically shorten retention to below the statutory minimum (unless mandated by law for deletion).

7.2 After the retention period expires, we will delete, anonymize, or archive information in a non-personally identifiable form. If law or regulation requires continued retention, the statutory requirement governs.

8.1 Subject to applicable law and without conflict with our legitimate business interests, third parties' legal rights, or statutory obligations, you may request to access, copy, correct, supplement, delete, withdraw consent (where applicable), restrict processing, and file complaints regarding your personal information.

8.2 You may submit requests viaContact Usor via a console ticket. We may verify your identity, assess the legality and necessity of the request, and respond within a reasonable time. We may lawfully refuse, or charge a reasonable fee as permitted by applicable law (stated in advance), for malicious, clearly repetitive, or technically excessive requests. For information directly related to ongoing fraud investigations, litigation, debt collection, or administrative proceedings, we may delay response until the relevant proceedings conclude or disclosure is permitted by law.

This service is for users with full legal capacity. If you are a minor, you must read this policy and theTerms of Servicewith your guardian and use the service only with their consent. If we have reasonable grounds to believe an account should be managed by a guardian without proper authorization, or there is a risk to a minor's interests, we may suspend or terminate the relevant account and service and process information in accordance with applicable law.

We take reasonable management and technical measures proportionate to our business scale to reduce risks of information leakage, tampering, and loss. Please understand that no network system can guarantee absolute security. For losses caused by device infection, weak passwords, handing credentials to others, or force majeure and third-party attacks outside our control, we are not liable in the absence of intentional misconduct or gross negligence, unless otherwise required by law. In the event of a security incident that may affect your rights, we will notify and handle it as required by applicable law and cooperate with authorities within the limits of confidentiality obligations and investigative needs.

We may revise this policy from time to time. The updated version takes effect upon publication on the website (unless a statutory notice period or separate pop-up/email notice applies). Without reducing your mandatory rights under applicable law, continued use of the service after the effective date constitutes acceptance of the revision; if you disagree, you should stop using the service, cancel your account, and settle fees. We may handle accounts and data in accordance with theTerms of Service. Disputes arising from failure to timely read announcements do not affect the effectiveness of revisions for users who continue to use the service.

For inquiries or rights requests relating to this policy, please submit viaContact Usor the methods listed on theHelp Centerthe official channels listed on the page. We may prefer written responses by email or console ticket. We may defer processing requests where identity cannot be verified or that conflict with ongoing enforcement/litigation proceedings.