Privacy Policy

1. Who We Are

YunZheng LAB operates AS204921, a non-profit educational and research computer experimental network. This privacy policy applies to all services provided through yunzheng.space, including the Orbit console, virtual machine hosting, BGP services, and related infrastructure.

Data controller: Zhenyun Sun
Contact: edward.sun@as204921.net

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• Name
• Email address
• Password (stored as a cryptographic hash — we cannot read your password)

2.2 Billing Information

Payment processing is handled by Stripe. We do not store your credit card numbers or bank details on our servers. We retain:

• Stripe customer ID (a reference identifier)
• Transaction history (amounts, dates, payment status)
• Invoice records

2.3 Service Data

To provide and maintain our services, we collect:

• VM configuration and usage data (hostname, IP address, resource allocation)
• Traffic/bandwidth usage statistics
• BGP session information (ASN, peering configuration)

2.4 Technical Data

When you access our platform, we may automatically collect:

• IP address
• Browser type and version
• Access timestamps
• Pages visited

2.5 Support Data

When you contact us through the helpdesk, we collect the information you provide in your ticket (name, email, message content).

3. How We Use Your Data

4. Data Sharing

We do not sell or trade your personal information. We may share data only with:

• Stripe — for payment processing (Stripe Privacy Policy)
• Cloudflare — for content delivery and security (Cloudflare Privacy Policy)
• Law enforcement — only when required by applicable law or valid legal process

5. Data Storage and Security

• Your data is stored on Cloudflare's infrastructure (D1 database) and on our managed servers.
• Passwords are hashed using industry-standard cryptographic algorithms.
• Authentication tokens are stored in secure, HTTP-only cookies.
• Transport is TLS 1.2 or better with HSTS; administrative access requires a second factor; and access to stored data is limited to the operator named above.

6. Data Retention

• Account data: Retained for the lifetime of your account plus 30 days after deletion.
• Billing records: Retained for 7 years to comply with financial record-keeping requirements.
• Traffic logs: Retained for the current billing period plus one additional month.
• Support tickets: Retained for 2 years after resolution.

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Deletion — request deletion of your data (subject to retention obligations).
• Data portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.

To exercise any of these rights, contact us at edward.sun@as204921.net.

8. Cookies

We use only essential cookies required for the service to function:

• token — authentication session cookie (HTTP-only, secure). Expires when you log out or the session ends.

We do not use analytics cookies, advertising trackers, or third-party tracking cookies.

9. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

10. International Transfers

Your data may be processed in various countries where our infrastructure is located. By using our services, you acknowledge that your data may be transferred internationally. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Material changes will be communicated via email.

12. Contact

For any privacy-related questions or requests:

• Email: edward.sun@as204921.net
• Helpdesk: helpdesk.yunzheng.space