Summary: NgBaiyun collects information you provide directly and usage data from your infrastructure. We use it to deliver and improve our services. We never sell your data to third parties. You can request access, correction, or deletion at any time.
NgBaiyun ("we," "us," "our") operates the cloud infrastructure platform available at ngbaiyun.com and associated sub-domains. We act as both a data controller (for customer account and billing data) and a data processor (for data you store on our infrastructure).
Our Data Protection Officer can be reached at info@ngbaiyun.com.
Account & Registration Data: Name, email address, company name, billing address, and payment information (processed via a PCI-DSS compliant payment processor — we never store raw card numbers).
Usage & Technical Data: IP addresses, API request logs, resource consumption metrics, service configuration, and infrastructure telemetry. This data is used for billing, performance monitoring, and security purposes.
Communications: Messages you send to our support team, feedback forms, and survey responses.
Customer Infrastructure Data: Data you store on NgBaiyun's storage, compute, and database services. We process this data solely on your behalf and subject to our Data Processing Agreement.
We do not use your data for advertising or sell it to any third party.
Where GDPR applies, we process your data under the following legal bases:
We do not sell, rent, or trade your personal data. We may share data with:
A current list of sub-processors is available upon request at info@ngbaiyun.com.
We retain account data for the duration of your subscription plus 90 days post-termination (to allow for reactivation). Billing records are retained for 7 years as required by law. Infrastructure logs are retained for 30 days by default; this can be configured in your account settings.
Upon account deletion, customer infrastructure data is permanently deleted within 30 days.
NgBaiyun operates globally. Your data may be transferred to and processed in countries outside your own, including the United States. Where we transfer data from the EEA or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate transfer mechanisms.
We implement industry-standard technical and organisational measures including: AES-256 encryption at rest, TLS 1.3 in transit, SOC 2 Type II certification, role-based access controls, and 24/7 security monitoring. Despite these measures, no system is 100% secure. We will notify you of any data breach affecting your personal data as required by law.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, email info@ngbaiyun.com. We will respond within 30 days.
We use strictly necessary cookies (for authentication and security), functional cookies (to remember your preferences), and analytics cookies (to understand how the platform is used). You can manage cookie preferences via the banner shown on first visit or by contacting us.
NgBaiyun services are intended for business and professional use only. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has provided us with personal data, please contact us immediately.
We may update this Privacy Policy from time to time. Material changes will be communicated via email and a notice in your dashboard at least 14 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
For privacy enquiries, data subject requests, or to contact our Data Protection Officer:
Email info@ngbaiyun.com — our DPO team responds within 48 hours.