Privacy Policy

1. Who we are

voxa.host is operated by X ZONE IT SRL · VAT RO48893724 · Reg. Com. J52/908/2023 · Bdul. 1 Mai 57, Sat Mihai Vodă, jud. Giurgiu, 087016, Romania. X ZONE IT SRL is the controller for the personal data described in this policy. To contact us about your data, open a support ticket in your client area or email noc@voxa.host.

2. Information we collect

We collect the information you provide when you register and order — name, email, billing address and VAT ID where applicable — and the contents of support tickets and chats. Payments are processed by our payment providers; we never store full card numbers.

To run and protect the service we also process technical data: IP addresses, control-panel and API logs, and server usage metrics such as CPU, network and storage.

3. How we use it

We use this information to provide and bill the services you order (performance of our contract with you), to keep accounting and tax records (legal obligation), and to secure our network and prevent fraud and abuse (legitimate interest). We do not sell personal data and do not use it for advertising.

4. Who we share it with

We share personal data only with the service providers we need to run the business — payment processors, our email provider and the hosting for our control panel — and with authorities when the law requires it. The current list is at voxa.host/subprocessors.

5. Data you store on your servers

For personal data you store or process on the servers you rent from us, you are the controller and we act as your processor. That processing is governed by our Data Processing Agreement, which is part of the Terms and applies automatically. We do not access or monitor the contents of customer servers except as that agreement allows.

6. Where data is stored

Account and billing data is stored in the European Union (Germany and Finland). Your server data is stored in the data-centre location you choose. Where a provider processes data outside the EEA, the transfer is covered by the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework, as shown on the sub-processor list.

7. How long we keep it

Account information is kept while your account is active and afterwards for as long as Romanian tax and accounting law requires us to keep invoices and records. Logs are kept for a limited period for security purposes. Server data is deleted after service termination as set out in our Terms of Service.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interest, and to withdraw consent where processing relies on it. To exercise these rights, open a support ticket in your client area or email noc@voxa.host. You can also lodge a complaint with the Romanian supervisory authority (ANSPDCP) or the authority in your country of residence.

9. Cookies

We use essential cookies for session management and site functionality. We do not use tracking or advertising cookies.

10. Changes

We may update this policy. Material changes are announced by email to account holders before they take effect.