01 Scope & Data Controller
This policy applies to personal information generated when you visit the XcodeOps website, create an account, rent a dedicated physical Mac mini, manage orders in the console or submit a support ticket. It also explains how we handle your assigned machine when your rental ends.
The entity operating the XcodeOps platform determines the purposes and means of processing the account and service data described in this policy. You decide how to use data processed by applications, models or projects you deploy on your machine. Renting a machine does not make those workloads our business data.
If you use the service on behalf of a team, make sure team members understand how shared credentials, support ticket content and project data are managed. You can submit requests about this policy through the channels listed in Section 8.
02 Information We Collect
When you create and use an account, we process your account email and essential login verification records. When you place an order, we keep details such as the selected model, region, billing period, order status and billing records to provide your dedicated physical machine, verify charges and process renewals.
Payments generate records such as the payment method, amount and transaction reference used for reconciliation. If you submit a support ticket, we process its contents, any screenshots you provide and related order details. Do not include private keys, full passwords or model weights unless necessary.
To protect account and service security, we also process essential access logs, such as request times, paths, network addresses and login results. These logs help us troubleshoot issues and detect unusual access; they do not mean we read files on tenant machines.
03 Payment Data
We charge in US dollars and accept USDT-TRC20, plus Visa, Mastercard and Amex cards processed by Stripe. The payment options available at checkout are those shown in the console.
Stripe processes card payments, and we do not store full card numbers. To confirm orders and resolve billing issues, we may retain the amount, payment status and transaction reference, but not complete card details.
For USDT-TRC20 payments, we record the transaction hash, amount and associated order to verify receipt. Never send wallet private keys by email or support ticket; an order number and transaction hash are usually enough to verify a payment.
04 We Do Not Access Tenant Machine Contents
Each Mac mini we provide is a dedicated physical machine assigned to a single tenant, not a virtual machine sharing resources with other tenants. We do not read project files, model weights, source code, signing materials or build artifacts stored on your machine.
When using the machine over SSH or remote desktop, you are responsible for managing account permissions, application settings, keys and backups. Log excerpts or screenshots attached to a technical support ticket are content you choose to provide. Check them first and remove any sensitive information that does not need to be shared.
Erasing the entire disk when a rental ends and retaining account or order records are separate processes: machine data is handled as described in Section 6, while records needed for service transactions are managed for their respective required periods.
05 Purposes & Legal Bases
We use account, order and essential connection information to verify your identity, assign a region, provide your machine and console access, and respond to support tickets. This processing is necessary to deliver the service you request.
We use payment references and billing records to reconcile payments and, where applicable, meet financial and other legal obligations. Access logs help us detect unusual logins, troubleshoot service issues and protect the platform. We limit processing to the information needed for these purposes.
Where applicable law requires consent for a particular activity, we will explain the purpose and provide an appropriate choice in the relevant feature. This policy and related rights requests are governed by the laws of the jurisdiction where the platform operator is based.
06 Retention & Deletion
When a dedicated physical machine is released, we erase its entire disk before preparing it for another customer. Before release, export any project files, model weights, build caches or other content you want to keep. Data on a released machine is not retained as your backup.
We retain account information while your account is active and for as long as needed to resolve outstanding matters. Order, payment reference and billing records are kept for the retention periods required by applicable law. Support tickets and access logs are retained as needed to resolve requests and investigate security issues, then deleted or de-identified.
Deleting your account may not result in the immediate deletion of all transaction records. Records subject to legal retention requirements must be kept until the applicable period ends. Contact us to ask about the status of specific records.
07 International Transfers
Our service regions are Singapore, Tokyo, Seoul and Hong Kong. The region you select determines where your rented machine is located. When you transfer code, model weights or other files from your local device to that region, the data travels over your connection to the selected machine.
To provide service, support and payment reconciliation, account, order, payment reference and support ticket information may be processed by staff or systems involved in service operations across the regions listed above. We limit access according to processing purposes and use appropriate access controls and safeguards for data in transit.
When choosing a region, also consider your team’s data residency requirements. The machine’s location does not change your responsibility for managing application data, keys and backups on it.
08 Your Rights & Contact
Where permitted by applicable law, you may request access to, correction, deletion or export of your personal information, or ask about the purpose and retention of specific processing activities. To avoid disclosing account information to someone else, we may first verify your connection to the account.
Email us at support@xcodeops.com with your account email, the type of request and the information you want us to address. If you’re signed in, you can also submit a support ticket through the console. Do not include passwords, private keys or complete payment card details in your initial request.
If you have an unresolved concern about how your personal information is handled, the laws of the jurisdiction where the platform operator is based apply, and any proceedings will be handled by a court with jurisdiction in that jurisdiction.
09 Cookies, Analytics & Policy Updates
The website may use cookies or similar technologies needed to keep you signed in, verify security and remember interface preferences. We also use on-site analytics scripts to understand page visits and feature usage, improve navigation and investigate issues. Analytics are not used to read work stored on tenant machines.
You can manage cookies through your browser settings. Restricting essential session technologies may affect sign-in and console features, but will not change files already stored on your dedicated physical machine.
We will update this policy if our service processes or applicable requirements change, and show the applicable version on this page. If a change materially affects how we handle personal information, we will notify you through an appropriate on-site channel. You can return to this page to review the latest version.