Privacy Policy

This Privacy Policy describes how Thorium DC, LLC ("Thorium DC, LLC," "we," "us," or "our") handles personal information when you use Graxter: Cloud Cluster(the "Application"), distributed via the Microsoft Store and other channels, and when you visit https://graxter.com(the "Website").

This policy is designed to meet the Microsoft Store Policies (Section 10.5 — Personal Information) and applicable privacy laws. BecauseGraxter: Cloud Cluster is a Win32/desktop product, a privacy policy is required for Microsoft Store listing and certification.

1. Publisher and contact

Publisher: Thorium DC, LLC
Address: Washington, DC, United States
Privacy contact: hello@graxter.com
Support: https://graxter.com/contact

2. Scope and consent

By installing, accessing, or using the Application, you acknowledge this Privacy Policy. If you do not agree, do not use the Application. Where required by law, we obtain your consent before collecting or using personal information for specific purposes described below.

3. Personal information we access, collect, and transmit

"Personal information" (or "personal data") means information that identifies or could reasonably be used to identify a person, or that is associated with such information, as defined under Microsoft Store Policies and applicable law.

3.1 Information you provide in the Application

• Account sign-in (optional): If you choose to sign in with Google, we receive basic profile information from Google (such as your name, email address, and profile picture) to associate your workspace with your account. Authentication is handled by Google; we do not receive your Google password.
• Server and infrastructure profiles: Hostnames, IP addresses, ports, usernames, tags, provider labels, and related configuration you enter to manage servers.
• Credentials: SSH private keys, key passphrases, and passwords you choose to store for server access.
• Operational data: Commands, deployment settings, Git repository URLs, and activity logs generated through your use of the Application.
• Support communications: Information you send when contacting us (name, email, message content).

3.2 Information stored and processed locally

By default, server credentials, SSH keys, connection profiles, and most operational data are stored locally on your Windows device and are not transmitted to our servers unless a feature you enable explicitly requires it.

3.3 Information collected automatically

• Website: When you visit the Website, our hosting provider may log standard technical data (IP address, browser type, pages viewed, timestamps) for security, analytics, and performance.
• Application updates: When the Application checks for updates (including via the Microsoft Store), Microsoft or our update infrastructure may receive standard device and version metadata necessary to deliver updates.
• Diagnostics (if enabled): If you opt in to error or diagnostic reporting in a future version, we may collect crash logs, device type, Application version, and error details. We will describe any such collection in-product and obtain consent where required.

3.4 Information we do not collect

Unless you explicitly provide it through features you use, we do not intentionally collect:

• Precise device location or GPS data;
• Health or medical information;
• Financial account numbers or payment card data (purchases through the Microsoft Store are processed by Microsoft);
• Contacts, photos, or files unrelated to infrastructure management;
• Web browsing history outside the Application.

4. When and why we collect personal information

We access, collect, or transmit personal information only to:

• Provide core Application functionality (server management, SSH, Docker, deployment);
• Authenticate your workspace when you choose to sign in;
• Respond to support requests and security reports;
• Maintain, secure, and improve the Application and Website;
• Comply with legal obligations and enforce our terms;
• Deliver updates and, with your consent where required, diagnostic information.

5. How we use personal information

We use personal information for the purposes listed above and do not use it for unrelated purposes without notice and, where required, consent. We do not sell your personal information.

6. How we store personal information

• On your device: Credentials and server profiles are stored locally on your Windows PC in encrypted form.
• On our systems: Support emails and Website logs may be stored on systems operated by us or our service providers for limited periods.
• Third-party sign-in:Google processes authentication data according to Google's privacy policy when you use Google sign-in.

7. How we secure personal information

In accordance with Microsoft Store Policy 10.5.4, personal information stored or transmitted by the Application is protected using modern cryptographic and security practices appropriate to the data type, including encryption of credentials at rest on your device and encrypted transport (TLS) for network communications initiated by the Application.

You are responsible for securing your workstation, operating system account, backups, and any devices where the Application is installed.

8. Disclosure to third parties

We may disclose personal information to the following categories of recipients:

• Google:When you use Google sign-in, as governed by Google's terms and privacy policy.
• Microsoft:When you obtain the Application through the Microsoft Store, Microsoft may collect purchase, download, and update data under Microsoft's privacy statement.
• Service providers: Hosting, email, or infrastructure vendors that process data on our behalf under contractual confidentiality and security obligations.
• Legal and safety: When required by law, court order, or to protect rights, safety, and security.

We do not publish your personal information to outside services without opt-in consent in the Application user interface, except as described in this policy or as required by law (Microsoft Store Policy 10.5.2).

9. Your controls, choices, and access

You have the following controls over your information:

• Local data: View, edit, or delete server profiles and credentials within the Application; uninstall the Application to remove locally stored data (subject to your backup and OS behavior).
• Google sign-in:Revoke the Application's access to your Google account through your Google Account security settings.
• Support data: Request access, correction, or deletion of personal information we hold from support interactions by emailing hello@graxter.com.
• Marketing: We do not send promotional email unless you opt in; you may opt out at any time.

Depending on your jurisdiction, you may have additional rights (see Section 12). We will respond to verified requests within timeframes required by applicable law.

10. Data retention

• Local Application data remains until you delete it or uninstall the Application.
• Support correspondence is retained as long as needed to resolve inquiries and comply with law.
• Website logs are retained for a limited period for security and operations.

11. International transfers

If you use the Application outside the United States, your information may be processed in the United States or other countries where we or our service providers operate. We take steps designed to ensure appropriate safeguards where required by law.

12. Regional privacy rights

European Economic Area, UK, and Switzerland (GDPR)

If you are in the EEA, UK, or Switzerland, you may have rights to access, rectify, erase, restrict, or port your personal data, and to object to or withdraw consent for certain processing. You may lodge a complaint with your local supervisory authority. Contact us at hello@graxter.com to exercise rights.

California (CCPA/CPRA)

California residents may have rights to know, delete, and correct personal information, and to opt out of sale or sharing. We do not sell personal information. Submit requests to hello@graxter.com.

Other regions

We comply with applicable privacy laws in regions where the Application is offered, including Microsoft Store Policy 10.5.8 regarding children's privacy.

13. Children's privacy

The Application is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us at hello@graxter.com and we will take steps to delete it.

14. Changes to this policy

We may update this Privacy Policy when we add features, change data practices, or to comply with law or Microsoft Store requirements. We will post the updated policy at https://graxter.com/privacy with a revised effective date. Material changes may also be communicated in the Application or via the Microsoft Store listing where appropriate.

15. Related documents

Your use of the Application is also governed by our Terms of Service / End User License Agreement. For Microsoft Store purchases, Microsoft's terms also apply to Store transactions.

16. Contact us

Privacy questions or requests:
Thorium DC, LLC
Washington, DC, United States
hello@graxter.com