Privacy Policy

Last updated: 2 June 2026 - Data Protection Officer: privacy@blazbyte.com

This policy explains how Blazbyte processes personal data for Windows RDP, Ubuntu RDP and private VPN services.

1. Controller

The controller is Lucie Blažková, Address to be filled before launch, Czech Republic. Contact: hello@blazbyte.com.

2. Data we process

Identity and contact data: name, email, company, billing address, VAT ID.
Payment metadata: payment provider, transaction identifiers and invoice data. We do not store full card numbers.
Authentication data: IP address, user agent, session records and magic-link hashes.
Service data: product, plan, region, endpoint IP, hostname/gateway name, configuration choices and service status.
Support data: tickets, replies, email correspondence and operational notes.
Marketing data: newsletter consent if you opt in.

3. Legal bases

Purpose	Legal basis
Provide services, portal and support	Contract performance
Invoices, VAT and accounting	Legal obligation
Security, fraud prevention and abuse handling	Legitimate interest
Optional marketing	Consent

4. Retention

Invoices and accounting records: 10 years where required by law.
Account and service metadata: account lifetime plus up to 12 months.
Authentication and security logs: normally up to 12 months.
Support tickets: up to 3 years after last activity.
Marketing consent: until withdrawn.

5. Processors and recipients

We share personal data only where needed to deliver the service, process payments, send email, provide infrastructure, handle accounting or comply with law. Current processor categories include payment processors, infrastructure providers, email delivery, accountants and support tooling.

6. VPN and traffic privacy

Private VPN services require operational metadata such as customer account, gateway, profile count and traffic allocation. We do not sell browsing history. We may preserve logs or metadata when required for security, abuse handling or valid legal process.

7. Your rights

Under GDPR, you may request access, rectification, erasure, restriction, objection, portability and withdrawal of consent. The customer portal includes a data export page. You may also contact privacy@blazbyte.com.

8. Security

We use reasonable technical and organisational measures for the current scale of the service, including HTTPS, role-based admin access, audit logging, protected internal files, least-privilege operational access and backup procedures. Security controls are reviewed as the platform grows.

9. Cookies

See the Cookie Policy.

10. Changes

Material changes are announced by email or in the customer portal.