Privacy Policy

Last updated: January 2025

Who We Are

ChillXand is based in Alberta, Canada. We provide infrastructure services for the Xandeum ecosystem, including managed pNode operations and RPC endpoint services.

Information We Collect

We only collect data necessary to provide our services. We do not collect any data beyond what is required for account management, billing, and service delivery.

Account Information

When you create an account, we collect:

• Email address
• Username or display name
• Password (stored in encrypted form)

Service Usage Data

We automatically collect certain information when you use our services:

• API request logs (for RPC services)
• Service usage metrics
• IP addresses
• Browser type and version
• Access timestamps

Payment Information

For paid services, we collect:

• Cryptocurrency wallet addresses (Solana/Xandeum)
• Transaction signatures and payment history
• Invoice and billing records

Payments are made in XAND or USDC cryptocurrency. We monitor the blockchain to verify transactions. Please note that blockchain transactions are publicly visible by nature. We do not process credit card payments.

Communications

If you contact us for support or other inquiries, we retain the content of those communications to help resolve issues and improve our services.

Cookies and Analytics

We do not use third-party analytics or tracking cookies. We only use essential cookies required for authentication and session management.

How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send service-related notifications and updates
• Respond to support requests and inquiries
• Monitor and analyze usage patterns to improve performance
• Detect and prevent fraud or abuse
• Comply with legal obligations

Automated Decisions

Our billing system makes automated decisions that may affect your service:

• pNode Management: Billing is collected one month in advance. If an invoice remains unpaid, service continues through your pre-paid period. At the end of that period, pNode management is automatically suspended.
• RPC Services: If an invoice remains unpaid by the deadline, your account is automatically downgraded to the free tier.

You will receive notifications before any automated actions are taken, and you can contact support to discuss payment arrangements.

Information Sharing

We do not sell, rent, or trade your personal information. We may share information only in these circumstances:

• Service Providers: We use Contabo for server hosting. Your data may be processed on their infrastructure in accordance with their privacy practices.
• Legal Requirements: When required by law or to respond to legal process
• Protection: To protect the rights, property, or safety of ChillXand, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Location

Your data is stored on servers located in the United States. By using our services, you consent to the transfer and processing of your data in the United States.

Data Retention

We retain your data as follows:

• Active accounts: Data is retained for as long as your account is active
• Closed accounts: Account data is retained for 1 year after account closure to allow you to return and restore your account if desired
• After retention period: Data is permanently deleted after the 1-year retention period
• API logs: Request logs are purged after 90 days

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL)
• Encrypted storage of sensitive data
• Regular security assessments
• Access controls and authentication requirements
• Secure infrastructure hosted with reputable providers

Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours of discovering the breach
• Explain what happened and what data was affected
• Describe the steps we are taking to address the breach
• Report to relevant authorities as required by Canadian law (PIPEDA)

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, contact us at [email protected].

Contact Us

If you have questions about this privacy policy, please contact us: