Privacy Policy

Last updated: October 25, 2026

1. Overview

This Privacy Policy explains what information Ulo Cloud LLC ("Ulo," "we," "us") collects when you create an account, purchase a VPS, or otherwise use ulo.gg and the cloud.ulo.gg client panel (together, the "Service"), and how we use, share, and protect it. It is incorporated into, and should be read alongside, our Terms of Service.

2. Information we collect

Account information. When you sign up, we collect the email address you register with (which also serves as your username) and a securely hashed password. We never store your password in plain text.

Payment information. Payments are processed by Stripe. Ulo does not receive or store your full card number; Stripe handles and stores your payment details directly, under its own privacy policy. We store a Stripe customer reference ID and billing history (amounts, dates, invoice status) needed to administer your subscription.

Server & configuration data. We store what's needed to operate your VPS: server labels/hostnames, the operating system or ISO you select, assigned IP addresses, firewall rules, and an encrypted copy of the root password you set at provisioning (so it can be shown back to you from the panel; it is encrypted at rest and is not visible to us as plain text in normal operation). If you provide an SSH key, we store it to apply to your server.

Technical & security logs. We log IP addresses and timestamps associated with login attempts, API requests, and administrative actions, for security monitoring, rate-limiting, fraud prevention, and abuse investigation under our Acceptable Use Policy.

Discord integration (optional). If you choose to link your Ulo account to Discord through our support bot, we store your Discord user ID alongside your account so the bot can look up your servers and tickets on your behalf. This is optional and only applies if you use the `/link` command.

Support communications. If you contact us by email or Discord, we retain that correspondence to provide support and maintain a record of the interaction.

3. How we use it

We use the information above to: provision and operate your VPS; authenticate you and protect your account; process billing and send related notices (invoices, payment failures, order confirmations); respond to support requests; detect, investigate, and prevent fraud, abuse, and security incidents; and comply with legal obligations (for example, tax and accounting record-keeping).

We do not use your data for interest-based advertising, and we do not sell your personal information to third parties.

4. Sharing & third-party processors

We share information only as needed to operate the Service:

• Stripe — payment processing and billing;
• our email delivery provider — transactional emails (order confirmations, password resets, sign-in codes);
• Google Analytics — website usage analytics (see Section 5 below);
• law enforcement or regulators, where required by valid legal process, or to protect the rights, property, or safety of Ulo, our customers, or the public (for example, in response to a confirmed abuse complaint under our AUP).

We do not share your data with third parties for their own independent marketing purposes.

5. Cookies & session data

The client panel uses a small number of essential cookies to keep you signed in (an HttpOnly session cookie that cannot be read by JavaScript) and, where applicable, to let you preview the normal site during scheduled maintenance.

We use Google Analytics on our website and client panel to understand traffic and usage (for example, which pages are visited and how). Google Analytics sets its own cookies and collects information such as your IP address, device/browser type, and pages viewed. This data is processed by Google in accordance with Google's Privacy Policy. We do not use Google Analytics for interest-based advertising, and we do not otherwise use third-party advertising cookies.

Google Analytics only runs, and its cookies are only set, if you click Accept in the cookie banner. If you decline, no analytics cookies are set. We remember your choice in a small first-party cookie (ulo_consent) for 12 months. You can change your choice at any time: Cookie settings.

6. Data retention

We retain account and server data for as long as your account is active. If your account is closed or your VPS is destroyed for non-payment under our Terms of Service, associated server data and backups are permanently deleted and cannot be recovered. We retain billing records for as long as required by applicable tax and accounting law, even after an account is closed.

7. Security

We use industry-standard safeguards appropriate to the data involved — including password hashing, encryption of sensitive stored values (such as root passwords and API tokens), rate limiting, and access controls restricting administrative functions to authorized staff. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security; see also our Terms of Service regarding the unmanaged, self-service nature of your own VPS.

8. Your rights & choices

You can review and update most of your account information directly from the client panel. To request a copy of your personal data, request deletion of your account and associated data, or ask a question about how your data is handled, contact us at [email protected]. We will respond within a reasonable time, subject to the retention requirements described in Section 6 (for example, we may need to retain billing records even after deleting an account).

9. Children's privacy

The Service is not directed to, and may not be used by, anyone under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated "Last updated" date, and where practical, we will provide additional notice (such as by email).

11. Contact

Questions about this Privacy Policy, or requests regarding your data, can be sent to [email protected].