Privacy Policy

The data controller for personal information collected in this relationship is MACROMIND, a network infrastructure services provider, with a US address at 9300 Conroy Windermere Rd #1404, Orlando, FL.

MACROMIND acts as a data controller solely for the registration and operational data that Subscribers directly provide at the time of service signup. MACROMIND does not act as a controller, processor, or sub-processor of any data that the Subscriber processes, stores, or transmits within the contracted infrastructure.

MACROMIND collects only the data necessary for contracting, operating, billing, and supporting the Services:

Explicitly and irrevocably, MACROMIND declares that it never accesses:

• The contents of Subscriber servers, virtual machines (VMs), or containers;
• Databases, files, emails, messages, or any information stored within contracted services;
• Personal data of the Subscriber's customers, end users, or employees;
• Source code, internal configurations, or business secrets of the Subscriber;
• Subscriber network traffic via deep packet inspection (DPI) for content monitoring purposes;
• Credentials, passwords, API keys, or certificates stored on Subscriber servers;
• Application logs, end-user access records, or analytical data from Subscriber systems;
• Internal communications, chats, video calls, or any private transmissions.

Registration and operational data is used exclusively to:

• Create and manage the Subscriber's account on the control panel;
• Provision, operate, and monitor contracted infrastructure resources;
• Issue invoices and process payments;
• Send essential service communications (maintenance, incidents, renewals);
• Provide technical support when requested by the Subscriber;
• Comply with applicable legal, tax, and regulatory obligations;
• Prevent fraud and maintain the security of the network and other Subscribers.

MACROMIND does not sell or share personal data with third parties for commercial purposes. Sharing, when it occurs, is strictly limited to:

• Payment processors: billing data shared with PCI-DSS certified payment gateways solely to process transactions;
• Infrastructure partners: IP transit providers, data centers, and connectivity suppliers receive only the minimum technical data necessary (e.g., network prefixes) for service operation;
• Legal obligation: when required by law, court order, subpoena, or competent authority under applicable US or international law;
• Rights protection: in situations involving fraud prevention or violations threatening network security and other Subscribers.

In all sharing scenarios, contractual clauses are in place that require third parties to maintain the same level of data protection applied by MACROMIND.

• Active account data: retained throughout the term of the service agreement;
• After account closure: data is retained for up to 7 years to meet US federal and state tax and accounting obligations, then permanently and securely deleted;
• Authentication and control panel access logs: retained for up to 12 months for security and compliance purposes;
• Aggregate traffic records: retained for up to 6 months for capacity analysis and billing;
• Support tickets: retained for up to 3 years for historical reference and dispute resolution.

MACROMIND implements appropriate technical and organizational measures to protect registration data against unauthorized access, accidental loss, destruction, or improper disclosure:

• Encryption in transit (TLS 1.2+) for all communications with the control panel and APIs;
• Encryption at rest for databases containing registration information;
• Role-based access control (RBAC) with multi-factor authentication (MFA) for internal access;
• Separation of production and development environments;
• Continuous security monitoring and vulnerability management;
• Least-privilege access policy — no employee has access to customer data without a justified operational need;
• Incident response plan with mandatory notification to affected Subscribers in case of a data breach, consistent with applicable US state breach notification laws.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

The macromind.net website and control panel use a minimal number of strictly necessary cookies:

• Session cookies: used to keep the Subscriber authenticated in the control panel during use. Deleted when the browser is closed;
• Security cookies (CSRF): protect against cross-site request forgery attacks;
• Interface preferences: store language and theme settings selected by the user.

MACROMIND reserves the right to update this Privacy Policy at any time. Material changes will be communicated by email to the registered address and published on this page with the updated date. Continued use of the Services after notification constitutes acceptance of the changes. We recommend reviewing this document periodically.

MACROMIND has designated a Privacy Officer responsible for receiving requests, complaints, and communications from data subjects and regulatory authorities.