Privacy Policy

1. Information We Collect

Account & Contact Data: When registering or communicating with us, we collect your email address, name (if provided), and language preference.

Payment & Billing Data: Checkout transactions are processed directly by our authorized payment gateways (such as Stripe or PayPal). DockSpin does not store or process raw credit card numbers or banking secrets. We retain only billing references, subscription tiers, and transaction IDs.

Technical & Access Logs: To protect the infrastructure from unauthorized intrusions and DDoS attacks, our web servers and edge proxies record standard IP addresses, HTTP request headers, and user-agent strings.

Cloud Storage Integrations: If you choose to enable the Google Drive offsite backup feature, we request OAuth permission solely to upload and manage encrypted snapshot archives within your designated personal Google Drive folder. OAuth tokens are encrypted with AES-256-GCM and are never shared.

2. Zero-Data Mining & AI Training Prohibition

We operate under a strict zero-data-mining architecture. DockSpin and Pioneer Ventures Technology do NOT scan, inspect, index, or harvest customer database records, application code, files, or customer orders.

We contractually prohibit the ingestion or use of customer website data, databases, or application files for artificial intelligence (AI) or machine learning (ML) model training. Your data is purely yours.

We do NOT sell, rent, monetize, or trade your personal information or website data to third parties or advertising networks under any circumstances.

3. Client-Held Backup Vault (Zero Host Custody)

When you enable Google Drive offsite backups, snapshots are encrypted client-side using Restic before transmission, utilizing customer-designated encryption keys.

Snapshots are stored directly in your personal Google Drive account. DockSpin does NOT maintain custody or commercial visibility over your offsite backup archives. We run the hosting engine; you hold the keys to your personal backup vault.

4. Data Security & Storage Architecture

All communication between your browser, the control plane, and our host servers is encrypted in transit using TLS 1.3.

Production servers utilize isolated directory permissions (0711 traverse-only isolation) to prevent cross-tenant data access. Administrative control plane mutations are recorded in an immutable audit ledger.

5. Data Retention & Right to Erasure

Your website files and database dumps remain your property at all times. You can export a complete, portable archive via the 1-click 'Take My Site' tool whenever you choose.

Upon account termination, your hosted sites, databases, and stored configs are permanently deleted from our active clusters. Transactional invoice records are retained only as required by Hong Kong accounting and tax regulations.

6. Contacting the Data Controller

If you have questions about this Privacy Policy, wish to request access to your personal data, or exercise your statutory rights under the Hong Kong Personal Data (Privacy) Ordinance, please contact:

Pioneer Ventures Technology — Data Protection Team Email: [email protected] / [email protected] Website: https://pvent.tech

7. Governing Language & Interpretation

In the event of any discrepancy, ambiguity, or conflict between the English version of this Privacy Policy and any translated version, the English version shall prevail and govern in all respects.