Overview
Altox ("Altox", "Company", "we", "our", "us") aims to handle personal information transparently and securely. This Privacy Policy describes the categories of information that may be collected through the Altox Cloud website, client portal, control panels, APIs and related services, why the information may be processed, and the choices available to users.
Different products may have additional privacy notices. Where a third-party provider processes information directly, that provider's own privacy terms also apply.
1. Scope
This policy covers website visitors, registered customers, users of Altox services and people who contact Altox support. It does not control third-party websites or services that Altox does not own or operate.
2. Information you provide
Depending on the service, we may receive information such as your name, email address, phone number, billing address, company details, account credentials, support messages and information needed for verification or fraud prevention. Payment providers may collect payment information directly; Altox should not be assumed to store full payment-card numbers unless the applicable payment workflow expressly says so.
3. Automatically collected information
Our systems may record IP addresses, timestamps, browser and device information, referring pages, pages visited, authentication events, server access logs and security events. Service operation may also involve CPU, RAM, storage, bandwidth, network, firewall and abuse-related telemetry.
4. Why information is used
Information may be used to create and manage accounts, provision services, process billing, provide support, prevent fraud and abuse, maintain security, investigate incidents, send essential service notices, comply with law and improve the operation of the platform.
5. Legal basis and lawful processing
Depending on the jurisdiction and processing activity, information may be processed because it is necessary to provide a requested service, comply with a legal obligation, protect security or legitimate operational interests, or because consent is required and has been obtained. Applicable law determines which basis and rights apply.
6. Payment and third-party providers
Altox may use third-party providers for payments, billing, control panels, infrastructure, analytics, communications or support. Examples may include WHMCS, Pterodactyl, Stripe or PayPal where those services are actually used for the relevant workflow. Review the provider's own privacy terms before submitting information directly to a third-party interface.
7. Data sharing
We may disclose information to service providers, infrastructure providers, professional advisers, payment processors or authorities where reasonably necessary for service delivery, security, fraud prevention or legal compliance. We do not sell personal information for advertising resale.
8. Retention
Retention depends on the purpose. Account and service records may be kept while the account is active and for a reasonable period afterward. Billing and tax records may be retained as required by law. Security, abuse and fraud records may be retained for as long as reasonably necessary to protect the platform and investigate repeat abuse. When information is no longer required, it may be deleted or securely de-identified where appropriate.
9. Security
Reasonable technical and organizational safeguards may include HTTPS/TLS, access controls, authentication protections, firewalls, logging, monitoring and restricted staff access. No internet-connected system can be guaranteed completely secure, so users should also protect their credentials and hosted applications.
10. Cookies
Cookies or similar technologies may be used for sessions, preferences, security and site functionality. Where analytics or optional technologies are used, the applicable notice or consent mechanism will provide further information where required.
11. International processing
Service providers or infrastructure may process information in countries other than your place of residence. Where applicable law requires safeguards for international transfers, Altox will use the mechanisms required for the relevant transfer.
12. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to or obtain certain personal data. You may also have rights relating to consent and grievance redressal. Requests should be made through the official support channel and may require reasonable identity verification.
13. India data protection
For users and processing activities subject to Indian law, Altox intends to operate with applicable requirements in mind, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as applicable to the relevant processing and as those requirements come into force. The notified Rules include staged commencement provisions, so the exact obligation can depend on the rule and effective date. Altox should review the current official MeitY text and applicable commencement dates when assessing its obligations.
14. Account deletion
You may request deletion of an account where available. Deletion may terminate active services and may not require Altox to erase information that must be retained for legal, tax, fraud-prevention, security or dispute-resolution purposes.
15. Children's privacy
Altox services should not be used by children below the minimum age permitted by applicable law or the applicable service terms. If we learn that information was collected contrary to applicable requirements, we will take reasonable steps to address it.
16. Business transfers
If Altox undergoes a merger, restructuring, financing, acquisition or asset transfer, relevant information may be transferred as part of that transaction, subject to applicable law and appropriate notices.
17. Changes
This policy may be updated when services, processing practices or legal requirements change. The latest version will be published on this page with a revised date.
Privacy contact: Use the official Altox Cloud client support channel for privacy requests and account-related questions.