Privacy Policy

REBER CLOUD ("we", "us", or "our") is dedicated to protecting your privacy and personal data. This Privacy Policy explains our practices regarding the collection, use, and protection of information when you access our website, applications, and online services.

Our core architectural philosophy is based on data minimization and zero-knowledge privacy: we collect only the bare minimum information strictly necessary to provide and maintain your account, and we never monitor or log what you do online.

We enforce a strict, zero-compromise No-Logs Policy. When you connect to REBER CLOUD network nodes, we DO NOT collect, store, log, or monitor:

• Your browsing history, visited URLs, destination websites, or online services accessed.

• Your payload data content, transmitted messages, or encrypted communications.

• Your originating IP address or geographic location while connected.

• The connection timestamps or duration of individual user sessions.

• DNS query requests (all DNS resolution is performed securely through encrypted, non-logging internal resolvers).

Because this information is never generated or stored on our servers, it cannot be leaked, seized, or shared with any third parties or government authorities.

To provide and maintain our services, we only collect minimal, essential operational data:

• Account Information: A valid email address and a cryptographically hashed password (using industry-standard Argon2/Bcrypt) for user authentication.

• Subscription & Usage Metrics: Total bandwidth quota consumed within the active billing cycle (aggregated byte counters without destination breakdown) to prevent service abuse and manage subscription plans.

• Payment Information: Transaction identifiers, payment timestamps, and payment statuses generated by accredited third-party payment gateways. We do not process, store, or have access to your credit card numbers or financial credentials.

We use the minimal collected information solely for the following legitimate business purposes:

• To authenticate account logins and generate encrypted subscription configuration tokens.

• To process subscription payments, orders, and refund requests.

• To monitor aggregate network performance, balance server loads, and prevent malicious attacks against our infrastructure.

• To provide customer support, troubleshoot account issues, and send important service announcements.

Our website uses only essential, functional cookies and local storage tokens:

• Preference Storage: Saving your selected display language (e.g. English or 简体中文).

• Session Authentication: Maintaining secure user login state across pages.

We DO NOT use any third-party tracking cookies, behavioral ad-targeting cookies, or cross-site tracking scripts.

When you purchase a subscription, checkout transactions are processed directly by certified, PCI-DSS Level 1 compliant payment service providers, primarily Stripe, Inc. (and its regional subsidiaries).

Payment processors handle your payment credentials (such as credit/debit cards, Apple Pay, Google Pay) using end-to-end tokenization and 3D Secure (3DS) authentication in accordance with GDPR, CCPA, and international financial security standards.

We never receive, process, or store sensitive credit card numbers, CVVs, or bank login credentials on our servers. All financial transactions are strictly segregated and handled under bank-grade encryption standards.

We employ state-of-the-art cryptographic and infrastructure security standards to safeguard your data:

• Encryption in Transit: All control and network connections utilize TLS 1.3, AES-256-GCM, and ChaCha20-Poly1305 ciphers.

• Server Hardening: Our server nodes run on hardened, RAM-only systems where system states and ephemeral caches are wiped upon reboot.

• Access Control: Strict role-based access control (RBAC) and multi-factor authentication are enforced across our engineering and operational teams.

We retain your account information only for as long as your account remains active or as needed to provide you with services.

You have the absolute right to delete your account at any time. Upon receiving an account deletion request, your email, password hash, and all associated subscription records will be permanently expunged from our database within 24 hours. Deleting an account immediately terminates active subscription services and forfeits remaining unused bandwidth without refund or compensation.

Regardless of your geographical location, REBER CLOUD guarantees the following data privacy rights:

• Right to Access: You can request confirmation of whether we hold any personal data about you.

• Right to Rectification: You can update or correct inaccurate account information.

• Right to Erasure: You can request complete deletion of your personal account data.

• Right to Data Portability: You can request an export of your account details in a standard machine-readable format.

• Right to Non-Discrimination: We will never deny services or degrade performance for exercising your privacy rights.

We may periodically update this Privacy Policy to reflect advancements in our technology, security practices, or legal requirements. Material changes will be highlighted with a prominent notice on our website or via email.

If you have questions, feedback, or data privacy requests regarding this policy, please contact our dedicated Data Privacy Team at help@rebercloud.com.