PRIVACY · DATA PROTECTION

JexMac Privacy Policy · Cloud Mac Rental Data Protection

This document explains how JexMac handles information when you visit jexmac.com, register an account, rent a dedicated Mac mini M4, and use services remotely via console, VNC, or SSH—how we collect, process, store, and protect personal information about you, and informs you of choices and rights you may exercise under applicable law.

Effective date: August 3, 2026 Related document: Terms of Service
  • TLS encryption in transit
  • Strong password hashing
  • Least-privilege internal access
  • Secure erase after rental ends

Scope & relationship to other policies

JexMac ("we") treats user privacy and data security as foundational to platform operations. This Privacy Policy ("Policy") applies to all related services you access, register for, or use via jexmac.com and its subdomains (collectively, "Services") and explains how we handle personal information about you.

Accessing or using the Services means you have read, understood, and agree to this Policy. If you disagree with any part, stop using the Services. This Policy and the Terms of Service together form the complete agreement between you and JexMac; for personal data matters, this Policy prevails in case of conflict.

Important distinction: business content you store, run, or transmit on rented devices (source code, build artifacts, databases, AI model files, etc.) is primarily managed by you as data controller; this Policy focuses on account, transaction, access log, and operational information collected on the platform side.

Categories of information we process

To provide Mac mini M4 dedicated physical cloud rental and related services, we may process the following categories—some you provide, some recorded automatically during normal use.

Category Source Typical content
Account profile You submit Registration email, login password (stored as encrypted hash—we cannot read plaintext), and other information you voluntarily provide
Orders & configuration You submit Selected data center node, rental period, SSD expansion or Thunderbolt 5 clustering add-ons, and order notes
Payment & billing You submit / system records Transaction amount, payment status, order number, and redacted billing summary; full card numbers or on-chain wallet private keys are handled by Stripe, USDT payment channels, etc.—we do not store them
Support communications You submit Issue descriptions, attachments, and correspondence submitted via ticket or email for troubleshooting and follow-up
Access logs Automatic collection IP address, request time, access path, browser type, operating system, and referrer
Client identifiers Automatic collection Device identifier generated for security verification and anomaly detection (jexmac_ssaid, stored in browser local storage)
Usage behavior Automatic collection Sign-in times, console actions, feature usage frequency, and bandwidth/resource consumption statistics
UI preferences Automatic collection Language and similar settings (stored locally via preferred_language, etc.)

Use & sharing of information

We use your personal information only as necessary for the purposes below and do not process beyond what this Policy describes:

  • Service deliveryAccount creation, Mac mini M4 instance allocation, payment renewal, SSH / VNC remote access, and OpenClaw sandbox provisioning
  • Security & risk controlAbnormal login detection, abuse prevention, and API authentication
  • Customer supportTicket response, troubleshooting, and billing notifications
  • Product improvementAggregated anonymized stability analysis and feature optimization
  • Legal complianceCooperate with regulatory or judicial requirements as required by law

Unless you opt out, we may send product updates or offers we believe are relevant; unsubscribe anytime via email links—billing and security notices cannot be opted out.

Retention & deletion

We retain your information only as long as necessary for the purposes in this Policy. Where law requires longer retention, we comply; after retention expires, we delete or anonymize relevant information.

Basic account information

Retained while active; up to 12 months after account deletion

Transactions & billing

Retained at least 7 years as required by regulation

Access & security logs

Typically retained 90 days

Ticket communications

Retained while active; 12 months after account deletion

Rented device data

Erased within 72 hours after service termination

Security protection & cookies

We apply industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

  • Website and API communications use TLS encryption in transit
  • Account passwords stored with strong hashing—original passwords cannot be recovered
  • Internal staff access operational data under least privilege with auditing
  • Data centers with 24×7 physical access control and redundant infrastructure
  • Data stored on dedicated physical hardware during rental; securely erased when rental ends
  • Regular security assessments and vulnerability reviews

No internet transmission or electronic storage method is absolutely secure. If a data security incident may affect your rights, we will notify you promptly under applicable law with an overview, potential impact, and measures taken.

Cookies & local storage

You can manage or clear cookies and local storage in browser settings, but login persistence and some features may be affected.

Your rights & preference management

Under applicable data protection law, you may have the following rights. Submit requests via ticket or email; we respond within a reasonable time (generally within 30 days for rights requests):

Access & copy

Request a copy of personal information we hold about you

Correction & supplementation

Request correction of inaccurate or incomplete information; some fields are editable in the console

Deletion

Request deletion after account closure; transaction records legally required to retain are excluded

Opt out of marketing

Stop promotional emails via unsubscribe links; billing and security notices cannot be opted out

Withdraw consent

If processing is based on your consent, withdraw anytime; withdrawal does not affect lawfulness of prior processing

Restrict processing

Request restriction of further processing in specific circumstances

While your account is active with outstanding orders, some deletion requests may not execute immediately so we can fulfill service contracts and legal obligations.

Additional notes

Protection of minors

This service is not directed at minors under 18. We do not knowingly collect minors' personal information. If you are a guardian and believe a minor provided information without consent, contact us via ticket or email—we will delete it promptly after verification.

Cross-border data transfer

JexMac operates data centers in Singapore, Japan (Tokyo), South Korea (Seoul), Hong Kong, and US East. Your personal information may be stored or processed on servers outside your country or region. We use data processing agreements, encrypted transmission, and access controls to protect cross-border transfers.

External websites & services

Our site may link to third-party websites or services (payment redirects, documentation links, etc.). We are not responsible for their content, privacy practices, or security. Read their privacy policies before providing personal information.

Policy updates & contact

Policy updates

We may revise this Policy from time to time. Updated versions will be posted here with a revised effective date. For material changes (e.g., substantial changes to use purposes), we will notify you via registered email or in-platform notice.

Continued use after changes constitutes acceptance of the revised Policy. If you disagree, stop using the service and turn off auto-renew; services already paid and not yet expired generally remain under the prior Policy unless law or we state otherwise.

Privacy contact

  • support@jexmac.com (please include "Privacy" in the subject)
  • Sign in to the console to submit a ticket (recommended)
  • General inquiries within 2 business days; data rights requests within 30 days