Effective Date: x x, xxxx
Last Updated: x x, xxxx
SCALIBIT PRIVACY
Why Customer Privacy Matters To SCALIBIT.COM
The customer’s right to privacy is of great importance to SCALIBIT. We recognize that when a customer chooses to provide SCALIBIT with personal information and data, the customer places confidence in our ability to handle that information responsibly and securely.
SCALIBIT Acting As Data Controller
SCALIBIT acts as a Data Controller solely for customer account information, billing and payment data, Client Portal authentication data (such as username, securely hashed password values, and MFA configuration data), and customer support or communication records collected during registration and service use. We are responsible for this limited category of personal data under applicable data protection laws.
- Client Portal login credentials: Created by the Customer, stored only in hashed form, and processed by SCALIBIT for account access.
- Server access credentials: Created and controlled exclusively by the Customer.
- API credentials: Generated and managed by the Customer where applicable.
SCALIBIT does not act as a Data Controller or a Data Processor for any data stored, processed, or transmitted within servers, virtual machines, or cloud environments leased, used, and managed by Customers, including but not limited to:
- Virtual Machines (VPS, VDS)
- Cloud Services (Cloud Servers, Dedicated Cloud Servers)
- Cloud Compute Services (Standard Performance, High Performance, High Frequency)
- Optimized Cloud Compute Services (General Purpose, CPU Optimized, Memory Optimized, Storage Optimized)
- Dedicated Servers (Dedicated or Bare Metal)
- GPU Servers (including GPU Cloud Instances, Dedicated GPU Servers, Multi-GPU AI Training Clusters, High-Compute HPC Nodes, and AI-oriented bare-metal deployments)
SCALIBIT merely provides the infrastructure layer and does not have routine access to, visibility into, or control over any customer-hosted or customer-managed data stored within such systems. For detailed information about how we collect and use personal data, please refer to our Privacy Notice.
SCALIBIT delivers its services through secure infrastructure hosted within Tier-III or higher global data center facilities operated by specialized third-party infrastructure providers. While SCALIBIT provides and provisions the infrastructure service layer, the physical facility security, power, cooling, and network transit are provided by independent upstream infrastructure providers. SCALIBIT does not own or operate the physical data center buildings. Accordingly, SCALIBIT shall not be held liable for any service disruptions, data loss, or security breaches resulting from physical facility failures, unauthorized physical access to the data center, or any acts or omissions of these third-party infrastructure providers.
SCALIBIT’s Limited Role as Data Processor
For services involving servers, virtual machines, cloud environments, GPU systems, and other infrastructure resources leased, used, and managed by Customers, SCALIBIT acts solely as an infrastructure provider and does not act as a Data Processor for any Customer-hosted content or personal data processed within such systems.
SCALIBIT does not access, review, monitor, or process Customer data stored within these environments in the ordinary course of providing infrastructure services.
However, in exceptional circumstances where a Customer explicitly requests technical support that requires temporary and limited system-level access (for example, troubleshooting network connectivity, storage configuration, or operating system issues), SCALIBIT may act as a Data Processor strictly for the duration and scope of such support activity.
In such cases, processing is performed solely on the documented instructions of the Customer and is governed by our Data Processing Agreement (DPA).
For clarity: “personal data stored on our infrastructure” refers exclusively to Customer-uploaded or Customer-generated content (such as application data, databases, logs, backups, or files) hosted within Customer-controlled systems, and does not include customer account, billing, or Client Portal authentication data processed by SCALIBIT as a Data Controller.
The Data Processing Agreement (DPA) reflects the requirements of the European General Data Protection Regulation (“GDPR”) and applies where legally required to SCALIBIT’s services offered to Customers in the European Union, the European Economic Area, the United Kingdom, Switzerland, and other applicable jurisdictions.
Where processing is carried out solely for purely personal or household activities by an individual Customer, applicable data protection laws (including GDPR) may not apply in accordance with statutory exemptions.
SCALIBIT’s Role for Specific Services
For the following services, SCALIBIT acts solely as a neutral infrastructure provider:
- Virtual Machines (VPS, VDS)
- Cloud Services (Cloud Servers, Dedicated Cloud Servers)
- Cloud Compute Services (Standard Performance, High Performance, High Frequency)
- Optimized Cloud Compute Services (General Purpose, CPU Optimized, Memory Optimized, Storage Optimized)
- Dedicated Servers / Bare Metal
- GPU Servers (including GPU Cloud Instances, Dedicated GPU Servers, Multi-GPU AI Training Clusters, High-Compute HPC Nodes, and AI-oriented bare-metal deployments)
For these services, SCALIBIT does not access, manage, or control any customer-stored data and does not assume the role of either a Data Controller or a Data Processor under the GDPR or similar data protection laws.
The Customer retains full administrative control over the systems and remains solely responsible for all hosted or processed data as the Data Controller.
SCALIBIT does not provide managed services and does not perform ongoing administration or management of Customer systems.
However, where a Customer explicitly requests technical assistance and voluntarily provides temporary server access credentials, SCALIBIT Technical Support Engineers may access the relevant system solely for the limited purpose of diagnosing and resolving the reported technical issue.
Such access is strictly temporary, limited in scope to infrastructure-level troubleshooting, and terminated immediately upon completion of the support task. Customers are instructed to revoke, rotate, or change any credentials provided once the support activity has concluded.
In these narrowly defined support scenarios only, SCALIBIT may act as a Data Processor for the limited duration and purpose of providing the requested technical assistance, in accordance with our Data Processing Agreement (DPA).
Note: If you are using SCALIBIT’s infrastructure for storing or processing personal data, you remain fully responsible for compliance with GDPR, UK GDPR, or any other applicable data protection regulations as the Data Controller.
Server Access Credentials
SCALIBIT does not generate, store, retain, or maintain ongoing access to server access credentials (such as SSH usernames, SSH keys, passwords, SSH port numbers, or RDP credentials) for servers, virtual machines, or cloud environments leased, used, and managed by Customers.
For dedicated server services, initial operating system access credentials may be generated during provisioning and securely transmitted to the Customer. Customers are explicitly instructed to change such credentials immediately upon first login.
After initial delivery, all server access credentials are controlled exclusively by the Customer. SCALIBIT does not retain copies of such credentials and does not have persistent or autonomous access to Customer systems.
Any subsequent technical access by SCALIBIT is performed solely:
- at the Customer’s explicit request,
- with the Customer’s knowledge and authorization,
- using temporary credentials voluntarily provided by the Customer, and
- strictly for narrowly scoped infrastructure-level support or troubleshooting purposes.
Such access is temporary, task-limited, and terminated immediately upon completion of the requested support activity.
We Encourage You To Keep Your Personal Details Updated
To ensure uninterrupted service, we strongly recommend keeping your contact details, such as your email address and phone number, up to date. You can easily update your personal details via your SCALIBIT Control Panel. SCALIBIT assumes no liability for communication issues caused by outdated or incorrect contact information.
Related Pages
-
Privacy Notice
https://scalibit.com/legal/privacy-notice -
Data Processing Agreement (DPA)
https://scalibit.com/legal/data-processing-agreement -
US States Privacy Notice
https://scalibit.com/legal/us-privacy-notice -
California Consumer Privacy Act (CCPA)
https://scalibit.com/legal/ccpa-privacy-notice -
General Data Protection Regulation (GDPR)
https://scalibit.com/legal/eea-gdpr-privacy-notice -
Cookies Policy
https://scalibit.com/legal/cookie-policy