DARTNODE PRIVACY POLICY

Effective Date: January 1, 2025 | Last Revised: October 23, 2026

This Privacy Policy ("Policy") describes how Snaju Inc., doing business as DartNode ("DartNode," "Company," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you access or use our websites, services, and applications (collectively, the "Services"). This Policy applies to all DartNode properties and products, including:

1. our public website at dartnode.com and its subdomains;
2. the customer dashboard at app.dartnode.com;
3. our support, billing, and knowledge-base systems;
4. DartAds, the in-house advertising platform DartNode built and operates to plan, launch, measure, and protect DartNode's own advertising campaigns (described at ads.dartnode.com and covered in detail in Article IV of this Policy); and
5. any other DartNode service that links to this Policy.

BY ACCESSING OR USING DARTNODE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY.

ARTICLE I - INFORMATION WE COLLECT

Section 1.1 - Information You Provide Directly. We collect information you voluntarily provide when interacting with our Services, including:

1. Account Information: Name, email address, telephone number, billing address, company name, and account credentials;
2. Payment Information: Payment card details, bank account details, billing addresses, and transaction history (payment card data is collected and processed by PCI-DSS compliant third-party processors; DartNode never stores full card numbers on its own systems);
3. Identity Verification: Government-issued identification documents or other verification materials when required for fraud prevention or legal compliance;
4. Support Communications: Content of support tickets, live chat transcripts, emails, and telephone communications;
5. Survey Responses: Feedback, reviews, and responses to surveys or questionnaires.

Section 1.2 - Information Collected Automatically. When you access our Services, we automatically collect:

1. Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers;
2. Network Information: IP address, ISP, approximate geographic location (country, region, city), and connection type;
3. Usage Data: Pages visited, features used, click patterns, session duration, referral URLs, and timestamps;
4. Log Data: Server logs, error reports, access times, and system activity;
5. Advertising Measurement Data: When you arrive at dartnode.com by clicking one of our own advertisements, the URL carries a click identifier assigned by the advertising network (for example the Google Ads "gclid" parameter). We record that identifier along with the landing page, campaign, and timestamp so we can tell which of our advertisements actually produce signups. Section 4.3 explains exactly how this is used;
6. Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies (see our Cookie Policy for details).

Section 1.3 - Information from Third Parties. We may receive information about you from:

1. Payment Processors: Transaction confirmations, payment status, and fraud screening results;
2. Fraud Prevention Services: Risk scores, fraud indicators, and verification results;
3. Advertising Platforms: Aggregate campaign statistics (impressions, clicks, cost) for DartNode's own advertisements. These reports describe our campaigns, not identified individuals; see Article IV;
4. Business Partners: Referral information and affiliate data;
5. Public Sources: Publicly available information from websites, social media, and databases;
6. Law Enforcement: Information pursuant to legal process or investigations.

Section 1.4 - Information We Do NOT Collect. DartNode does not intentionally collect sensitive categories of personal information such as racial or ethnic origin, religious beliefs, health data, biometric identifiers, or precise GPS location. The contents of your virtual servers belong to you and are handled under Article VII (Customer Content), not mined for advertising or analytics.

ARTICLE II - USE OF INFORMATION

Section 2.1 - Service Provision. We use collected information to:

1. Create, maintain, and manage your Account;
2. Provision, operate, and maintain Services you have ordered;
3. Process payments and billing transactions;
4. Provide technical support and customer service;
5. Communicate service-related information, updates, and alerts;
6. Fulfill contractual obligations under our Terms of Service.

Section 2.2 - Security and Fraud Prevention. We use information to:

1. Detect, prevent, and investigate fraud, abuse, and security threats;
2. Verify identity and prevent unauthorized access;
3. Monitor compliance with our Terms of Service and Acceptable Use Policy;
4. Protect the rights, property, and safety of DartNode, our users, and third parties;
5. Enforce our agreements and policies.

Section 2.3 - Improvement and Analytics. We use information to:

1. Analyze usage patterns and trends;
2. Improve and optimize our Services, website, and user experience;
3. Develop new products, features, and functionality;
4. Conduct research and statistical analysis;
5. Personalize content and recommendations within our own Services.

Section 2.4 - Advertising Measurement. We use the advertising measurement data described in Section 1.2(e) solely to measure and improve DartNode's own advertising, as detailed in Article IV. We do not use your information to serve you third-party advertisements, and we do not build advertising profiles about you for anyone else.

Section 2.5 - Communications. We use information to:

1. Send transactional communications (invoices, receipts, confirmations);
2. Provide service announcements and maintenance notifications;
3. Send promotional materials and marketing communications (with consent where required, and always with an unsubscribe option);
4. Respond to inquiries and support requests.

Section 2.6 - Legal Compliance. We use information to:

1. Comply with applicable laws, regulations, and legal obligations;
2. Respond to subpoenas, court orders, and legal process;
3. Cooperate with law enforcement and regulatory authorities;
4. Establish, exercise, or defend legal claims.

ARTICLE III - LEGAL BASES FOR PROCESSING

Section 3.1 - Bases. Where the EU or UK General Data Protection Regulation or a similar law applies, we process personal information on the following legal bases:

1. Contract: Processing necessary to provide the Services you ordered (account management, provisioning, billing, support);
2. Legitimate Interests: Securing our network, preventing fraud and abuse, improving the Services, and measuring the effectiveness of our own first-party advertising, balanced against your rights and expectations;
3. Consent: Optional marketing communications and non-essential cookies, which you may withdraw at any time;
4. Legal Obligation: Tax, accounting, sanctions screening, and lawful process compliance.

ARTICLE IV - DARTADS: ADVERTISING, ANALYTICS, AND GOOGLE DATA

Section 4.1 - What DartAds Is. DartAds is an advertising management application built, owned, and operated by DartNode. Its sole purpose is to plan, launch, measure, and protect advertising campaigns that promote DartNode's own hosting services. DartAds serves exactly one advertiser: DartNode itself. It is not an advertising network, it does not accept third-party advertisers, it does not display advertisements to you on our Services, and it never sells, rents, or brokers data to anyone. You can read a plain-English description of the platform at ads.dartnode.com, how it works at ads.dartnode.com/how-it-works, and its data handling summary at ads.dartnode.com/data.

Section 4.2 - Data DartAds Collects and Uses. DartAds processes the following categories of data:

1. Campaign Data from Advertising Platforms: Through the Google Ads API, DartAds reads and manages data about DartNode's own Google Ads account: campaign structures, keywords, advertisement text, budgets, bids, and aggregate performance statistics (impressions, clicks, cost, conversion counts). This is business data about our advertising account, not data about identified site visitors;
2. Click Identifiers: When you reach dartnode.com by clicking a DartNode advertisement, DartAds records the click identifier from the URL (for example a Google Ads "gclid"), the landing page, the campaign it belongs to, and a timestamp;
3. Conversion Events: If a visit that carried a click identifier later results in a signup or an order on dartnode.com, DartAds records that a conversion occurred and associates it with the click identifier;
4. Invalid Traffic Signals: IP addresses, user-agent strings, and behavioral signals of visits to our advertising landing pages, used to detect bots and click fraud so we do not pay for fake clicks and our statistics stay honest.

Section 4.3 - How Conversion Reporting Works. DartAds reports conversion events (for example "this click led to a signup") back to Google Ads using the click identifier that Google itself assigned. The report contains the click identifier, the conversion action name, a timestamp, and, where applicable, an order value. It does not contain your name, your email address, the contents of your account, or anything you host with us. Google processes these reports under its own privacy policy, available at policies.google.com/privacy.

Section 4.4 - Google User Data and API Access. DartAds connects to Google services (including the Google Ads API) using OAuth credentials for Google accounts owned or administered by DartNode staff. Through that access, the application receives: (i) basic profile information of the authorizing DartNode account (email address and account identifiers) used solely to authenticate the connection; and (ii) the Google Ads account and campaign data described in Section 4.2(a). DartAds' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

1. Data received from Google APIs is used only to provide and improve DartAds' internal, user-facing campaign management features for DartNode's own advertising;
2. We do not transfer Google API data to third parties except as necessary to operate the application (hosting infrastructure under our control), to comply with applicable law, or as part of a merger or acquisition with prior notice;
3. We do not use Google API data for advertising targeting of any person, and we do not sell it;
4. We do not use Google API data to develop, improve, or train generalized artificial intelligence or machine learning models;
5. Human access to Google API data is limited to DartNode staff who operate the advertising platform, and occurs only with the account holder's consent, for security purposes, to comply with law, or where the data has been aggregated for internal operations.

Section 4.5 - Storage, Retention, and Deletion of DartAds Data. DartAds data is stored on DartNode-controlled infrastructure in the United States, encrypted in transit and at rest. OAuth tokens are stored encrypted and are never written to logs. Click identifiers and conversion records are retained for up to twenty-four (24) months to support measurement windows and dispute resolution, then deleted or irreversibly aggregated. A Google account administrator can revoke DartAds' access at any time from their Google Account security settings at myaccount.google.com/permissions; upon revocation, stored tokens are invalidated and cached Google API data is deleted within thirty (30) days. You may also request deletion of DartAds measurement data tied to your visit or account by emailing [email protected].

Section 4.6 - What DartAds Does Not Do. For clarity, DartAds does not:

1. Serve advertisements on dartnode.com or inside the customer dashboard;
2. Track your activity on websites other than our own;
3. Build or sell audience profiles, segments, or lists;
4. Share customer account data, support history, or hosted content with any advertising platform;
5. Make fully automated campaign decisions without human review: every campaign launch is approved by a person.

ARTICLE V - DISCLOSURE OF INFORMATION

Section 5.1 - No Sale of Personal Information. DARTNODE DOES NOT SELL, RENT, OR LEASE PERSONAL INFORMATION TO THIRD PARTIES FOR THEIR MARKETING PURPOSES, AND HAS NOT DONE SO IN THE PRECEDING TWELVE (12) MONTHS.

Section 5.2 - Service Providers. We share information with third-party service providers who perform services on our behalf, limited to what each provider needs:

1. Payment Processors: Stripe, PayPal, and cryptocurrency payment providers (payment and billing data);
2. Fraud Prevention: Identity verification and fraud detection services (signup and transaction signals);
3. Cloud Infrastructure: Data center and connectivity providers (the infrastructure our Services run on);
4. Advertising Platforms: Google Ads receives the conversion reports described in Section 4.3 (click identifier, conversion event, value), and nothing else about you;
5. Analytics Providers: Website analytics and performance monitoring (usage data);
6. Communication Services: Email delivery, SMS, and customer support platforms (contact details and message content);
7. Professional Services: Legal, accounting, and consulting services (records as needed).

These providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

Section 5.3 - Legal Disclosure. We may disclose information when we believe in good faith that disclosure is necessary to:

1. Comply with applicable law or legal process;
2. Respond to lawful requests from government authorities;
3. Protect the rights, property, or safety of DartNode, our users, or others;
4. Detect, prevent, or address fraud, security, or technical issues;
5. Enforce our agreements and policies.

Section 5.4 - Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will provide notice of any such transfer and any choices you may have.

Section 5.5 - Aggregated Data. We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you.

ARTICLE VI - DATA RETENTION

Section 6.1 - Retention Principles. We retain personal information only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

Section 6.2 - Specific Retention Periods.

1. Account Data: Retained while the Account is active and for seven (7) years thereafter (tax and legal compliance);
2. Transaction Records: Seven (7) years (tax and legal compliance);
3. Support Communications: Three (3) years;
4. Server and Access Logs: Ninety (90) days;
5. Advertising Click and Conversion Records (DartAds): Twenty-four (24) months, then deleted or irreversibly aggregated;
6. Google API Data Cached by DartAds: Refreshed continuously; deleted within thirty (30) days of access revocation;
7. Marketing Preferences: Until you opt out.

Section 6.3 - Data Deletion. Upon Account termination or verified deletion request, we delete or anonymize personal information within a reasonable timeframe, except where retention is required by law or for the legitimate purposes listed above.

ARTICLE VII - CUSTOMER CONTENT

Section 7.1 - Your Servers Are Yours. Data you store or process on virtual servers, dedicated servers, storage volumes, or other infrastructure you rent from us ("Customer Content") belongs to you. We access Customer Content only: (a) at your direction (for example a support request); (b) as required to operate the infrastructure (automated health checks, backups you configure); (c) to investigate violations of our Acceptable Use Policy upon credible reports; or (d) when legally compelled. We never scan Customer Content for advertising or sell information derived from it.

ARTICLE VIII - DATA SECURITY

Section 8.1 - Security Measures. We implement appropriate technical and organizational measures to protect personal information, including:

1. Encryption of data in transit using TLS;
2. Encryption of sensitive data at rest, including stored OAuth tokens;
3. Access controls, role separation, and multi-factor authentication for staff systems;
4. Regular security assessments and penetration testing;
5. Employee security training and least-privilege access;
6. Incident response and breach notification procedures.

Section 8.2 - No Guarantee. While we strive to protect your information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.

Section 8.3 - Breach Notification. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law and our incident response procedures.

ARTICLE IX - YOUR RIGHTS AND CHOICES

Section 9.1 - Access and Correction. You have the right to:

1. Access personal information we hold about you;
2. Request correction of inaccurate or incomplete information;
3. Receive a copy of your information in a portable format;
4. Update your Account information through your dashboard.

Section 9.2 - Deletion. You may request deletion of your personal information, subject to:

1. Legal retention requirements;
2. Ongoing contractual obligations;
3. Fraud prevention and security needs;
4. Protection of our legal rights.

Section 9.3 - Marketing Opt-Out. You may opt out of marketing communications by:

1. Clicking the "unsubscribe" link in marketing emails;
2. Updating preferences in your Account settings;
3. Contacting us at [email protected].

Note: You cannot opt out of transactional or service-related communications.

Section 9.4 - Cookie Preferences. You may manage cookie preferences through your browser settings. See our Cookie Policy for details, including how to browse without advertising measurement cookies.

Section 9.5 - Revoking Connected-Account Access. If you authorized DartAds or any DartNode application to access a Google account, you can revoke that access at any time at myaccount.google.com/permissions. Section 4.5 describes what we delete when you do.

Section 9.6 - Do Not Track and Global Privacy Control. Our Services do not currently respond to "Do Not Track" browser signals. Where required by law, we honor the Global Privacy Control signal as an opt-out of sharing for cross-context behavioral advertising (noting that we do not engage in such sharing in the first place).

Section 9.7 - Exercising Rights. To exercise your privacy rights, contact us at [email protected]. We may require identity verification before processing requests. We will not discriminate against you for exercising any privacy right.

ARTICLE X - INTERNATIONAL DATA TRANSFERS

Section 10.1 - Data Location. DartNode is based in the United States, and your information is processed and stored in the United States and other countries where we or our service providers operate.

Section 10.2 - Transfer Safeguards. When transferring information internationally, we implement appropriate safeguards including:

1. Standard contractual clauses;
2. Data processing agreements with our service providers;
3. Compliance with applicable data protection frameworks.

Section 10.3 - Consent to Transfer. By using our Services, you consent to the transfer of your information to the United States and other jurisdictions as described in this Policy.

ARTICLE XI - US STATE AND CALIFORNIA PRIVACY RIGHTS

Section 11.1 - CCPA/CPRA Rights. California residents have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including:

1. Right to know what personal information is collected, used, and disclosed;
2. Right to know whether personal information is sold or shared (we do not sell or share personal information as those terms are defined by the CCPA);
3. Right to opt out of sale or sharing (not applicable, as we do neither);
4. Right to request deletion and correction of personal information;
5. Right to limit use of sensitive personal information (we do not use sensitive personal information beyond what the statute permits without opt-in);
6. Right to non-discrimination for exercising privacy rights.

Section 11.2 - Other State Laws. Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws have similar rights of access, correction, deletion, portability, and opt-out of targeted advertising and profiling. We honor verified requests from all US residents regardless of state. Contact [email protected]; if your request is denied, you may appeal by replying to our decision and we will respond within the statutory window.

Section 11.3 - Shine the Light. California residents may request information about disclosure of personal information to third parties for direct marketing purposes. We do not make such disclosures. Contact [email protected].

ARTICLE XII - CHILDREN'S PRIVACY

Section 12.1 - Age Restriction. Our Services are not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18.

Section 12.2 - Parental Notice. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us at [email protected].

ARTICLE XIII - CHANGES TO THIS POLICY

Section 13.1 - Policy Updates. We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

Section 13.2 - Notification. We will notify you of material changes by:

1. Posting the updated Policy on our website;
2. Updating the "Last Revised" date;
3. Sending email notification for significant changes;
4. Displaying a prominent notice on our website.

Section 13.3 - Continued Use. Your continued use of Services after any changes indicates acceptance of the updated Privacy Policy.

ARTICLE XIV - CONTACT INFORMATION

Section 14.1 - Privacy Inquiries. For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Snaju Inc. d/b/a DartNode
Privacy Officer
League City, Texas, United States
Email: [email protected]
General: [email protected]
Phone: (281) 724-4464

Section 14.2 - Response Time. We will respond to privacy inquiries within thirty (30) days, or as required by applicable law.

BY USING DARTNODE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN.