PRIVACY
policy.

Overview

Vexa Hosting provides managed hosting for Discord bots and related workloads, plus a client panel and support channels. This policy describes what information we may collect, why we collect it, and how we handle it.

Where applicable, we aim to follow the principles behind the Australian Privacy Principles (APPs), including being transparent about collection, and limiting use and disclosure to legitimate purposes.

What we collect

We do not intentionally collect personal information unless it is needed to provide the service, operate the panel, prevent abuse, or respond to a support request. The exact data we hold depends on what you submit and what systems you use.

Common examples

These are typical categories of information that may be processed when you use a hosting service, open a ticket, or access a panel.

• Account and contact details you provide (for example: username, email, and support messages).
• Billing/transaction records needed to process purchases and prevent fraud (we do not store full payment card details if a payment provider is used).
• Service and security logs (for example: IP address, timestamps, actions taken in the panel, and error logs).
• Content you upload to run your bot/application (your code, config files, environment variables you choose to set, and related data).

How we use information

We use information only for purposes related to providing hosting and support, maintaining the security and reliability of the platform, and enforcing our Terms and Acceptable Use Policy. We do not sell client personal information.

If we receive information that we did not request, we will handle it carefully and, where reasonable, delete or de-identify it.

Sharing and disclosure

We do not share client information with third parties except where it is necessary to provide the service (for example, infrastructure providers used to run hosting), or where disclosure is required or authorised by law (including responding to lawful requests from authorities).

We may also disclose limited information to protect the security of our services, other clients, or the public (for example, investigating abuse or compromised accounts).

Data retention

We keep information only for as long as reasonably needed for hosting operations, support, security, dispute resolution, and legal compliance. When information is no longer required, we take reasonable steps to delete it or de-identify it.

Security

We take reasonable steps to protect information we hold from misuse, interference, loss, unauthorised access, modification, or disclosure. No system is perfectly secure, so you should still protect your credentials, rotate tokens if they are exposed, and avoid uploading secrets unnecessarily.

Client responsibility & your rights

Client responsibility

You are responsible for keeping your account secure and for how your bot/application collects, stores, or processes data. If you share access to your account or leak credentials, it may lead to unauthorised access, and we may investigate or suspend services to reduce harm.

Access and correction

You can request access to personal information we hold about you and request corrections if it is inaccurate, out of date, incomplete, irrelevant, or misleading. We may need to verify your identity before fulfilling a request, and in some cases we may decline a request where permitted by law.

Overseas disclosure

Our infrastructure providers or support tooling may store or process data in different regions depending on service configuration. Where we use third-party providers, we aim to choose reputable services and apply reasonable security measures.

Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify clients (for example, via the panel, Discord, or our website).