Kvantis
Back

Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Kvantis processes personal data in accordance with the EU General Data Protection Regulation (GDPR / DSGVO). We collect the minimum necessary to run the Service and do not require identity documents or KYC to open an account.

1. Controller

The controller responsible for data processing is the operator of Kvantis, identified in our Impressum. Contact: support@kvantis.org.

2. Data we process

  • Account data: email address and a securely hashed password (never stored in plain text).
  • Service data: servers you create, their region/plan/OS, assigned IP addresses, balance and transactions.
  • Payment metadata: deposit amount, currency and status received from our payment processor (NOWPayments). We do not receive or store card numbers.
  • Technical data: IP addresses, timestamps and request logs.

3. Purposes & legal bases

  • Providing and billing the Service — Art. 6(1)(b) GDPR (performance of a contract).
  • Security, fraud and abuse prevention, network integrity — Art. 6(1)(f) GDPR (legitimate interests).
  • Compliance with legal obligations (e.g. accounting, lawful requests) — Art. 6(1)(c) GDPR.

4. Recipients / processors

To deliver the Service we share the minimum necessary data with processors acting on our behalf:

  • Vultr (The Constant Company, LLC) — to provision and operate your servers.
  • NOWPayments — to process cryptocurrency deposits.

5. International transfers

Some processors (e.g. Vultr) are located in the United States. Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework, as applicable.

6. Retention

We keep account and transaction records while your account is active and thereafter only as required for legal, accounting and abuse-handling purposes (e.g. statutory retention periods), after which data is deleted or anonymised.

7. Your rights (Art. 15–21 GDPR)

Subject to the conditions of the GDPR, you have the right to:

  • access your personal data (Art. 15);
  • rectification (Art. 16) and erasure (Art. 17);
  • restriction of processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interests (Art. 21);
  • withdraw consent at any time where processing is based on consent (Art. 7(3)).

To exercise these rights, email support@kvantis.org. Some records may be retained where required by law.

8. Right to complain

You have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU member state of your residence or place of the alleged infringement.

9. Cookies & local storage

We use browser local storage for essential functionality only — session tokens, selected language and theme preference. We do not use advertising or third-party tracking cookies, so no consent banner is required.

10. Security

Passwords are hashed with a strong algorithm (argon2), transport is encrypted (HTTPS), and provider API secrets are stored server-side only.

11. Children

The Service is not directed to anyone under 18, and we do not knowingly process their data.

12. Contact

Privacy questions or requests: support@kvantis.org.