Privacy Policy

Last updated: July 26, 2026

LayerOne, LLC ("LayerOne", "we", "us", or "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, and the choices available to you when you visit layeronecloud.com, use our client portal, or consume our VPS hosting services (collectively, the "Services").

This policy applies to U.S.-based operations. It is designed for customers and visitors in the United States.

1. Who we are

LayerOne, LLC is a Florida limited liability company providing VPS hosting from infrastructure in the Tampa, Florida metro area. Our mailing address is 5005 W Laurel St Ste 100 1010, Tampa, FL 33607, United States. For privacy inquiries, contact [email protected].

2. Information we collect

We collect information in the following categories:

• Account information: email address, account identifiers, authentication events, and access preferences (such as admin/client mode for staff accounts).
• Billing information: invoices, payment status, account credit ledger entries, order history, and billing correspondence. Full payment card numbers are processed by our payment providers; we store only tokens and references needed to reconcile payments.
• Support and communications: tickets, contact form submissions, and email correspondence with our team.
• Service and technical data: VM identifiers, plan assignments, IP allocations, provisioning status, snapshot settings, console session metadata, and configuration required to operate your VPS.
• Security and abuse data: login rate-limit counters, webhook delivery logs, audit events, network abuse reports, and technical logs needed to protect the platform.
• Website technical data: standard server logs (such as IP address, user agent, requested URL, and timestamps) and essential session cookies described in Section 6.

We do not intentionally collect sensitive categories of personal information (such as government ID numbers or health data) through the Services.

3. How we use information

We use personal information to:

• Create and administer accounts and authenticate users
• Provision, bill, suspend, and terminate VPS services
• Process payments and maintain account credit
• Provide customer support and respond to inquiries
• Monitor reliability, investigate incidents, and prevent fraud or abuse
• Comply with law, enforce our Terms of Service and Acceptable Use Policy, and protect our rights
• Improve the Services and communicate operational updates

We do not sell personal information or share customer lists with data brokers.

4. Legal bases and purposes

We process information as necessary to perform our contract with you, to pursue legitimate interests in operating a secure hosting platform (including abuse prevention and network protection), and to comply with legal obligations. Where consent is required (for example, optional marketing emails if offered in the future), we will request it separately.

5. Payment processors and service providers

We use trusted third parties who process information on our behalf, including:

• Stripe, Inc.: card, ACH, and crypto (stablecoin) payments
• Railway Corp. and other infrastructure vendors: application hosting, databases, caching, and background job processing for our platform
• Email delivery providers: transactional email configured in our operations console

These providers are permitted to use information only as needed to deliver their services to us. Their privacy practices are governed by their own policies.

We may disclose information when required by law, subpoena, or court order, or when we believe disclosure is necessary to protect rights, safety, or the integrity of the Services.

6. Cookies and similar technologies

We use essential cookies and similar technologies required for the Services to function, including:

• Session cookies: keep you signed in to the client portal and operations console
• CSRF tokens: help prevent cross-site request forgery on form submissions

We do not use third-party advertising cookies or cross-site tracking pixels on the public marketing site at this time. If we add analytics or marketing tools in the future, we will update this policy.

You can control cookies through your browser settings. Disabling essential cookies may prevent sign-in and checkout from working.

7. Data retention and deletion

We retain information for as long as needed to provide the Services, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements.

Typical retention practices include:

• Active account and billing records: retained while your account exists and for a reasonable period afterward
• Invoice and payment records: retained as required for tax and audit purposes (often seven years or as required by law)
• Support tickets: retained for operational history and quality review
• Security and audit logs: retained for a limited period appropriate to investigation needs
• VPS disk contents: deleted when services are cancelled or removed under our billing deletion policy described in the Terms of Service

Encrypted credentials (such as VM root passwords and ticket secrets) are purged according to operational schedules documented in our platform.

8. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including access controls, encryption of sensitive fields at rest, HTTPS for data in transit, and staff access restrictions. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. Your choices and requests

You may update account contact information from the client portal. You may request access to, correction of, or deletion of personal information by contacting [email protected]. We will respond within a reasonable timeframe and may need to verify your identity.

We may retain certain information where required by law or for legitimate business purposes (such as fraud prevention or outstanding billing). Deletion of an account does not automatically remove information we must retain for legal compliance.

10. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this Privacy Policy by posting a revised version on our website and updating the "Last updated" date. Material changes will be communicated through the client portal or email where practicable.

12. Contact

Privacy questions or requests: [email protected].

Mailing address: LayerOne, LLC, 5005 W Laurel St Ste 100 1010, Tampa, FL 33607, United States.