This Privacy Policy describes how SRV-CORE LLC ("SRV-CORE," "we," "us," or "our") collects, uses, and protects personal information when you visit our websites (including https://srv-core.com, https://hosting.srv-core.com, and https://enterprise.srv-core.com), use https://accounts.srv-core.com, use our website chat assistant, or purchase our services.
1. Who we are
| Controller / business | SRV-CORE LLC |
| Jurisdiction | Missouri, United States |
| Registered address | 117 South Lexington Street, Suite 100, Harrisonville, MO 64701, United States |
| Website | https://srv-core.com |
| Client portal | https://accounts.srv-core.com |
| Privacy contact | [email protected] |
We are a small U.S. technology company. We do not maintain a dedicated Data Protection Officer (DPO). Privacy requests go to [email protected].
2. Information we collect
2.1 Account and billing
Name, company name (if provided), email address, billing address, phone (if provided), order history, invoices, support tickets, and service configuration.
2.2 Payment data
Payments are processed by Stripe. We receive transaction status and limited billing metadata. We do not store full payment card numbers on our servers.
2.3 Technical and security data
IP address, browser type, device information, approximate location derived from IP, server and application logs, Cloudflare security signals, and cookies/similar technologies required for site and client portal operation.
2.4 Chat assistant
If you use the SRV-CORE Assistant on our marketing sites, we process the text you send, technical metadata (IP, locale, rate-limit signals), and Cloudflare Turnstile verification tokens when enabled. Messages may be processed by our AI provider to generate a reply. Do not send passwords, payment card numbers, or other highly sensitive secrets in chat. Conversations are not retained as a long-term customer record on our servers for marketing chat (operational rate-limit and abuse logs may exist for a short period).
2.5 Hosting and professional-services content
Files, databases, email, and other content you place on systems we host or administer while providing the service. For managed IT / professional engagements, we may process credentials and system data you authorize us to access, only within the scope of the engagement.
2.6 Affiliate applicants
If you apply to the Affiliate Program, we collect contact details, channel URLs, payout information, and tax forms (e.g., W-9 / W-8BEN) as described in the Affiliate Program Terms.
3. How we use information
We use personal information to:
- Provide, maintain, and secure hosting and related services
- Process orders, invoices, renewals, refunds, and chargebacks
- Respond to support and abuse reports
- Operate the website chat assistant and improve product answers
- Send service-related notices (billing, security, maintenance, legal notices)
- Prevent fraud, abuse, and security incidents
- Comply with legal obligations (tax, accounting, DMCA, law-enforcement requests where required)
- Improve our websites and services (aggregated or de-identified where practical)
We do not sell your personal information and we do not share it for cross-context behavioral advertising as those terms are commonly used under California law (CCPA/CPRA).
We do not use customer phone numbers for marketing SMS unless you separately and explicitly opt in. Phone numbers, when provided, are used for account/billing contact and security.
4. Legal bases (where applicable)
For users in jurisdictions that require a legal basis (including the EEA/UK where those laws apply), we process data based on:
- Contract — to provide services you purchase or request
- Legitimate interests — security, fraud prevention, service improvement, and defending legal claims
- Legal obligation — tax, accounting, and regulatory requirements
- Consent — where required (for example, optional marketing email if we offer it; cookie preferences where required by local law)
5. Categories of personal information (CCPA/CPRA style)
| Category | Examples | Typical purpose |
|---|---|---|
| Identifiers | Name, email, IP address, account ID | Account, billing, security |
| Commercial information | Orders, invoices, plan type | Billing and support |
| Internet / network activity | Logs, pages visited on our sites, chat metadata | Security, operations, analytics (if enabled) |
| Geolocation (coarse) | Approximate location from IP | Security, localization |
| Professional information | Company name, job role (if provided) | B2B services |
| Inferences | Limited plan recommendations from chat context | Product assistance |
| Sensitive personal information | Not intentionally collected; do not submit government IDs or health data via chat | N/A |
We retain categories only as long as needed for the purposes above and legal retention (see Section 7).
6. Service providers (subprocessors)
We use trusted providers who process data on our behalf. The main ones for customer-facing services are:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing |
| WHMCS (self-hosted on our systems) | Client billing and support portal |
| Twilio SendGrid | Transactional and service email delivery |
| Cloudflare | DNS, security, CDN/tunnel delivery, and Turnstile bot protection for our sites |
| Hetzner | Infrastructure hosting (servers/VMs) |
| OpenAI | Processing of chat assistant prompts/responses when the assistant is used |
| Plausible and/or Google Analytics | Website analytics only if enabled in our marketing site configuration |
Staff-only tools (for example identity/SSO for employees, internal finance, or contractor e-signature) are not used as customer marketing channels. If a professional engagement requires additional tools, we will describe them in the engagement scope when relevant.
These providers process data under their terms and our operational instructions. International transfers are described in Section 11.
7. Data retention
| Data | Typical retention |
|---|---|
| Account and billing records | While you are a customer, then as required for tax/accounting/legal (often several years) |
| Support tickets | While useful for the account relationship, then archived/deleted on a reasonable schedule |
| Backups | Per plan settings (e.g., weekly or daily retention windows) |
| Server/security logs | Rolling windows appropriate for security and troubleshooting |
| Chat assistant content | Not kept as a permanent CRM record; short-lived operational/abuse logs only |
| Hosting content after termination | Deleted after a reasonable period following termination (see Terms); export your data before cancellation when possible |
You may request deletion subject to legal retention requirements and our need to complete transactions, prevent fraud, or comply with law.
8. Security
We use administrative, technical, and organizational measures appropriate to our size and service, including access controls, encryption in transit (SSL/TLS), firewalling, and infrastructure monitoring. No method of transmission or storage is 100% secure.
9. Your rights
Depending on your location, you may have rights to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete information (subject to legal exceptions)
- Export a copy of certain account data
- Object to or restrict certain processing
- Opt out of “sale” or “sharing” of personal information (we do not sell or share as defined above)
- Appeal a denial of a privacy request (California and similar laws)
How to submit a request: email [email protected] with subject line "Privacy Request" and describe what you need. We may verify your identity (for example, by confirming control of the account email) before responding. We aim to respond within 45 days (or sooner where required), and may extend once where the law allows if the request is complex.
Authorized agents may submit California requests with proof of authorization.
10. Cookies and similar technologies
Essential cookies / storage: required for site operation, security, language preference, cookie-notice acknowledgment, and client-area login/checkout sessions.
Analytics (optional configuration): our marketing sites may load Plausible and/or Google Analytics when those products are configured in our deployment environment. Analytics helps us understand aggregate traffic. You can block analytics via browser settings, extensions, or industry opt-out tools. Our cookie notice informs visitors about cookies; disabling essential cookies may break login or checkout.
Client area (accounts.srv-core.com): session and security cookies required for login and checkout.
Chat assistant: may use Cloudflare Turnstile and local browser storage related to the widget.
11. International transfers
We operate primarily from the United States. If you access our services from other countries (including the EEA, UK, or Latin America), your information may be processed in the U.S. and in countries where our providers operate. Where required, we rely on appropriate transfer mechanisms available to small businesses (such as provider standard contractual clauses or equivalent), contractual necessity, and/or your consent.
If you need a written Data Processing Agreement for a business engagement, see https://srv-core.com/legal/dpa/ or email [email protected].
12. Children
Our services are directed to adults and businesses. You must be at least 18 to create an account (see our Terms). We do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies). If you believe a child provided us data, contact [email protected] and we will delete it where required.
13. “Do Not Sell or Share”
We do not sell personal information and we do not share personal information for cross-context behavioral advertising. If that ever changes, we will update this Policy and provide a required opt-out method.
14. Changes
We may update this policy at https://srv-core.com/legal/privacy/. Material changes will be reflected in the "Last updated" date and, where appropriate, notified to active customers by email or client-area notice.
15. Contact
Email: [email protected]
Postal: SRV-CORE LLC, 117 South Lexington Street, Suite 100, Harrisonville, MO 64701, United States
Tickets: https://accounts.srv-core.com/submitticket.php
DMCA (copyright only): [email protected] — see Terms §20