Privacy

01What we do with your data

PassRoyal provides cloud servers hosted worldwide, in the region chosen when ordering. This page describes the personal data we collect, why we collect it, how long we keep it and what you can ask of us about it.

• We do not sell, rent or exchange any personal data, to anyone, under any circumstances.
• We collect only what the service needs to work: creating an account, delivering a server, collecting payment for an order, answering a ticket.
• No audience measurement or advertising tool loads without your consent: until you have clicked “Accept”, the site contacts neither Google nor Meta.
• The content of your servers belongs to you: we do not access it, we do not read it, and we copy it only if you turn on Cloud Backup.

The data controller is PassRoyal LLC (limited liability company of the State of New Mexico (United States), 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States), reachable at the contact details at the bottom of this page. Your servers, for their part, are located in the region you choose when ordering.

02Your account data

Creating an account requires your last name, your first name, a username, an email address and a password; the country is optional. This data is used to identify you, to attach your servers to your organization and to contact you about your orders.

Your password is never stored in plain text: only a fingerprint (hash) of it is recorded, and we cannot retrieve it. Your email address is verified with a six-digit code; we keep the fingerprint of this code, the time it was sent and the number of attempts, for the duration of the verification.

If you add a passkey, we record its public key, the name you give it, the type of device that created it, and the dates it was added and last used. Your face, your fingerprint and your PIN stay on your device: we never receive them.

We also record the date of the last password change and the number of recent failed sign-in attempts, to end the sessions open elsewhere and to slow down automated attempts.

When you sign up, we note where you came from: the campaign of the link you followed if it carried one (utm parameters, Google or Meta click identifier), the site that sent you to us, the first page you viewed, and your answer to the optional question “How did you hear about us?”. This information stays in our database, attached to your account, and is passed on to no one: it tells us which campaigns bring customers.

03Data about your servers and your orders

To deliver and run a server, we keep its configuration and its history:

• the machine's name, its size, its region, its image and its state;
• the IP addresses assigned to it, and the history of these assignments;
• the credentials passed to the machine when it is created, only for the time of the creation: the password is erased from our databases as soon as the server is delivered;
• the actions performed on the server — creation, restart, network change, deletion — with their date and who performed them.

For a ready-to-use application image (Odoo, Dolibarr, ERPNext), the platform generates an administrator password, passes it to the machine once, sends it to you by email once the application can be reached, then erases it. It is kept nowhere on our side: if you lose it, you must reset it from the application.

Each order keeps its number, its amount, its period and its status. A card payment goes through Stripe: we neither see nor keep your card number. Only the network (Visa, Mastercard) and the last four digits are passed to us, so that you can recognize the payment on your statement.

04Support, consoles and emails

A ticket keeps its subject, its messages, their author and their date, as well as the server concerned. Your tickets remain available in your client area for as long as your account exists.

Opening a console is recorded: who opened it, when, for how long, from which IP address, and the volume exchanged. What appears on the screen and what you type are never recorded.

The emails we send you — address verification, payment confirmation, server ready, renewal notice — are kept long enough to ensure their delivery, then deleted automatically after ninety days.

05The public site, the forms and cookies

The contact form asks for your name, your email address, your company if you give one, the service concerned and your message. This message is sent to us by email and stored in no database: it lives in our inbox, like any other mail.

The quote request on the ERP page asks for the ERP you are interested in, the size of your team and your needs; the one on the PassZTNA page asks for the plan, the billing, the number of users, whether you want a trial or a quote and, if you wish, what you want to secure. Both ask for your name, your company, your email address and, if you wish, your phone number and a message. The request is stored in the site's database, to answer you and follow up on it, with the page you send it from and, if your browser kept it, where your visit came from (a campaign link, or the site you came from). A summary is sent to you by email. If you ask for the help of a partner integrator, your request is passed on to them only with your consent.

To stop a robot from flooding the forms, your IP address is held in memory (RAM) for one hour, only to count submissions. It is written to no disk and disappears when the service restarts.

The site embeds no social network button. Its audience measurement and its advertising measurement load only after your consent: they are described in the next section.

In the client area, your browser keeps your session — a sign-in token and your name — as well as whether the side menu is open or collapsed. These items stay on your device, are used only to keep you signed in, and disappear when you sign out.

The servers that answer requests keep technical logs containing the calling IP addresses, for the sole purpose of diagnosing a failure and spotting abuse.

06Audience measurement and advertising

On your first visit, a window asks whether you accept that we measure the site's audience and how well our ads work. “Accept” and “Refuse” sit side by side, at the same size: refusing takes no more effort than accepting. No box is ticked in advance, and continuing to browse does not count as consent. Closing the window without choosing does not count as consent either: nothing is loaded, and the window will come back on your next visit.

• If you refuse, or do not answer: nothing is loaded from Google or Meta, and nothing is sent to them, neither from the site nor from the client area.
• If you accept: the site loads Google Analytics (visits to pages, where visits come from) and the Meta pixel (how well our ads on Facebook and Instagram work). They set their own cookies (_ga, _fbp) on passroyal.com.
• If you accept and then create an account, the client area also tells Google Analytics and Meta about four steps — sign-up, address verified, order created, order paid, with its amount — so that they know which ads bring customers. Meta receives your email address in an irreversible encrypted form (a SHA-256 fingerprint), never in plain text.

The site sets two cookies of its own: pr_consent, your choice about audience measurement, kept for six months, and pr_lang, the language chosen at the top of the page, kept for one year and only if you choose one. Both can be read by the client area. You can change your choice about audience measurement at any time with the “Manage cookies” link at the bottom of every page: a refusal deletes Google's and Meta's cookies.

Google Analytics keeps its data for fourteen months. Google and Meta are companies established in the United States; they process this data under their own privacy policies.

07Who else sees this data

Your data is shared only with the providers strictly necessary to the service, each for a single task:

Stripe

Collects card payments. Receives the amount, the order reference and your email address; your card number never reaches us.

Google (Google Analytics)

Audience and conversion measurement, only if you have accepted cookies. Receives the pages viewed and, after sign-up, the four steps described above, without your name or your email.

Meta (Facebook, Instagram)

Measures how well our ads work, only if you have accepted cookies. Receives the pages viewed and the four steps, with the encrypted fingerprint of your email.

Host

The physical machines your servers run on, in the region chosen when ordering. It hosts them; it does not make use of your data.

Email delivery service

Carries the service emails, the contact form's messages and the quote requests. Receives the recipient's address and the content of the message.

Members of our team access the platform to run it and to help you. These accesses are personal and named, and every action is recorded with the name of the person who took it.

We disclose your data to an authority only on a legal demand we are bound to answer.

08How long we keep it

Account and organization

As long as the account exists, then the time needed to process a deletion request.

Password passed to a server

Erased as soon as the server is delivered.

Email verification code

Fifteen minutes.

Service emails

Ninety days, then deleted automatically.

Console sessions

Kept as a record of access; their content is never recorded.

Orders, payments and invoices

Seven years, for our accounting and tax obligations.

Contact form message

No database: as long as the message stays in our inbox.

Quote request

Three years after our last exchange, then deleted automatically.

Content of your servers

Destroyed with the server. Without Cloud Backup, we keep no copy of it.

Cloud Backup copies

About 45 days at most, encrypted: the last 4, one a day for 14 days, one from the previous month. 30 days after the server is deleted, 14 days after the option is stopped. You can erase them all at any time.

Deleting a server is final. Without Cloud Backup, we keep no copy of its content. In every case, make your own copies, outside our servers.

09How it is protected

• Exchanges with the site and the client area go over encrypted connections.
• Passwords are stored as fingerprints, never in plain text; our providers' keys are encrypted in our database.
• The databases can be reached only from our internal network, never from the Internet.
• Each organization is walled off: a customer sees neither the servers, nor the orders, nor the tickets of another.
• Changing your password ends the sessions open on your other devices.

No system is infallible. If a data breach likely to concern you occurred, we would inform you at your verified email address, with what we know and what we recommend you do.

10Your rights

Under Law 09-08 on the protection of individuals with regard to the processing of personal data, you have a right of access, rectification and objection regarding your data, as well as a right to its deletion.

• Access: you can ask for a copy of the data we hold about you.
• Rectification: your name, your email address and your organization's information can be changed directly from your client area.
• Deletion: you can ask for your account and the data attached to it to be deleted, subject to the accounting records the law requires us to keep.
• Objection: you can object to any processing that is not necessary to provide the service.

Write to us to exercise any of these rights; we answer within thirty days. You can also refer the matter to the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) if you believe your rights are not respected.

11Changes to this page

This policy follows the service: it is updated when what we collect changes. The version in force is the one published here, with its date of update.

A change that would widen the use of your data would be announced to you by email before it applies. The terms that govern the service itself are set out in the Service contract.

12Contact us

A question about your data, or a request for access, rectification or deletion? Write to us at contact@passroyal.com, or use our contact page. If you are already a customer, a ticket from your client area keeps the conversation attached to your organization.