Privacy Policy

Last updated: January 15, 2026

1. Who we are

FranceVPS SAS, registered at 15 rue de la Banque, 75002 Paris, France. SIRET 123 456 789 00012. We are the data controller for personal data collected through fra-vps.com and the customer dashboard.

2. Personal data we collect

We collect only what's necessary to provide the service and meet legal obligations:

• Account data: name, email, billing address, phone (optional).
• Payment data: processed by Stripe; we never store full card numbers.
• Usage data: server lifecycle events, API request logs (90 days retention).
• Support data: ticket content (3 years retention for legal/quality reasons).

3. Legal basis

Account data and payment data: contractual necessity (Article 6(1)(b) GDPR). Usage logs: legitimate interest (security, fraud prevention). Marketing: explicit opt-in only, withdrawable at any time.

4. Data residency

All personal data is stored on servers physically located in France. We do not transfer personal data outside the EU. Subprocessors (Stripe for payments, Postmark for transactional email) are contractually bound to EU-only processing.

5. Your rights

Under GDPR, you have rights to access, rectify, erase, restrict processing, data portability, and object to processing. Exercise any of these by emailing privacy@fra-vps.com. We respond within 30 days.

6. Retention

Account data: kept for the duration of the account, plus 5 years after closure (French commercial code requirement). Usage logs: 90 days. Support tickets: 3 years. Backups: 30 days rolling.

7. Security

Data encrypted in transit (TLS 1.3) and at rest (AES-256). Access controlled via SSO with hardware 2FA for FranceVPS staff. ISO 27001 certified.

8. Cookies

See our Cookie Policy.

9. CNIL

If you believe we've mishandled your data, you have the right to file a complaint with the CNIL (French data protection authority): cnil.fr.

10. Contact

Data Protection Officer: dpo@fra-vps.com.