Privacy Policy

Microsoft Partner Center: use this page as your Store privacy policy URL — https://graxter.com/privacy

This Privacy Policy describes how Thorium DC, LLC ("Thorium DC, LLC," "we," "us," or "our") handles personal information when you use Graxter: Cloud Cluster(the "Application"), distributed via the Microsoft Store and other channels, and when you visit https://graxter.com(the "Website").

This policy is designed to meet the Microsoft Store Policies (Section 10.5, Personal Information) and applicable privacy laws. BecauseGraxter: Cloud Cluster is a Win32/desktop product, a privacy policy is required for Microsoft Store listing and certification.

1. Publisher and contact

Publisher: Thorium DC, LLC
Address: Washington, DC, United States
Privacy contact: hello@graxter.com
Support: https://graxter.com/contact

2. Scope and consent

By installing, accessing, or using the Application, you acknowledge this Privacy Policy. If you do not agree, do not use the Application. Where required by law, we obtain your consent before collecting or using personal information for specific purposes described below.

3. Personal information we access, collect, and transmit

"Personal information" (or "personal data") means information that identifies or could reasonably be used to identify a person, or that is associated with such information, as defined under Microsoft Store Policies and applicable law.

3.1 Information you provide in the Application

• Account sign-in: If you sign in with Google or Microsoft Entra ID, we receive basic profile information (such as name, email address, and profile picture or tenant claims) to associate your workspace with your account and enforce organization allowlists. Authentication is handled by the identity provider; we do not receive your password.
• Server and infrastructure profiles: Hostnames, IP addresses, ports, usernames, tags, provider labels, and related configuration you enter to manage servers.
• Credentials: SSH private keys, key passphrases, and passwords you choose to store for server access.
• Operational data: Commands, deployment settings, Git repository URLs, and activity logs generated through your use of the Application.
• Support communications: Information you send when contacting us (name, email, message content).

3.2 Information stored and processed locally

By default, server credentials, SSH keys, connection profiles, audit logs, and most operational data are stored locally on your Windows device under %LOCALAPPDATA%\Graxter\ using Windows DPAPI encryption where applicable, and are not transmitted to our servers unless a feature you enable explicitly requires it. Graxter does not operate a multi tenant SaaS backend for your fleet metadata.

3.3 Information collected automatically

• Website: When you visit the Website, our hosting provider may log standard technical data (IP address, browser type, pages viewed, timestamps) for security, analytics, and performance.
• Application updates: When the Application checks for updates (including via the Microsoft Store), Microsoft or our update infrastructure may receive standard device and version metadata necessary to deliver updates.
• Diagnostics (if enabled): If you opt in to error or diagnostic reporting in a future version, we may collect crash logs, device type, Application version, and error details. We will describe any such collection in-product and obtain consent where required.

3.4 Microsoft Store subscriptions and entitlements

If you install the Application from the Microsoft Store, the base app may be free to download. Optional paid subscription add-ons (for example, Graxter Basic and Graxter Pro, monthly or annual) are purchased through Microsoft. Microsoft processes payment card data and subscription billing under Microsoft's privacy statement and Store terms. We do not receive your payment card number.

To unlock plan features (such as server capacity limits), the Application queries Microsoft Store licensing APIs on your device and receives entitlement status (for example, whether a Basic or Pro subscription is active, and related license metadata). That entitlement information is used only to enforce your plan in the Application.

Manage, renew, or cancel Store subscriptions in your Microsoft account. Microsoft does not provide us with a customer email list of Store buyers for marketing purposes.

3.5 Information we do not collect

Unless you explicitly provide it through features you use, we do not intentionally collect:

• Precise device location or GPS data;
• Health or medical information;
• Financial account numbers or payment card data (purchases through the Microsoft Store are processed by Microsoft);
• Contacts, photos, or files unrelated to infrastructure management;
• Web browsing history outside the Application.

4. When and why we collect personal information

We access, collect, or transmit personal information only to:

• Provide core Application functionality (server management, SSH, Docker, deployment);
• Authenticate your workspace when you choose to sign in;
• Respond to support requests and security reports;
• Maintain, secure, and improve the Application and Website;
• Comply with legal obligations and enforce our terms;
• Deliver updates and, with your consent where required, diagnostic information.

5. How we use personal information

We use personal information for the purposes listed above and do not use it for unrelated purposes without notice and, where required, consent. We do not sell your personal information.

6. How we store personal information

• On your device: Credentials and server profiles are stored locally on your Windows PC in encrypted form.
• On our systems: Support emails and Website logs may be stored on systems operated by us or our service providers for limited periods.
• Third-party identity: Google and Microsoft process authentication data according to their privacy policies when you use Google or Entra ID sign-in.

7. How we secure personal information

In accordance with Microsoft Store Policy 10.5.4, personal information stored or transmitted by the Application is protected using modern cryptographic and security practices appropriate to the data type, including encryption of credentials at rest on your device and encrypted transport (TLS) for network communications initiated by the Application.

You are responsible for securing your workstation, operating system account, backups, and any devices where the Application is installed.

8. Disclosure to third parties

We may disclose personal information to the following categories of recipients:

• Google / Microsoft:When you use Google or Entra ID sign-in, as governed by those providers' terms and privacy policies.
• Microsoft Store commerce: When you purchase or renew a subscription add-on, Microsoft processes billing. We receive license / entitlement status via Store APIs so the Application can unlock the correct plan. See Section 3.5.
• Microsoft:When you obtain the Application through the Microsoft Store, Microsoft may collect purchase, download, and update data under Microsoft's privacy statement.
• Service providers: Hosting, email, or infrastructure vendors that process data on our behalf under contractual confidentiality and security obligations.
• Legal and safety: When required by law, court order, or to protect rights, safety, and security.

We do not publish your personal information to outside services without opt-in consent in the Application user interface, except as described in this policy or as required by law (Microsoft Store Policy 10.5.2).

9. Your controls, choices, and access

You have the following controls over your information:

• Local data: View, edit, or delete server profiles and credentials within the Application; uninstall the Application to remove locally stored data (subject to your backup and OS behavior).
• Identity providers:Revoke the Application's access through your Google Account or Microsoft account security settings.
• Support data: Request access, correction, or deletion of personal information we hold from support interactions by emailing hello@graxter.com.
• Store subscriptions: Cancel or manage Microsoft Store subscriptions through your Microsoft account billing settings.
• Marketing: We do not send promotional email unless you opt in; you may opt out at any time.

Depending on your jurisdiction, you may have additional rights (see Section 12). We will respond to verified requests within timeframes required by applicable law.

10. Data retention

• Local Application data remains until you delete it or uninstall the Application.
• Support correspondence is retained as long as needed to resolve inquiries and comply with law.
• Website logs are retained for a limited period for security and operations.

11. International transfers

If you use the Application outside the United States, your information may be processed in the United States or other countries where we or our service providers operate. We take steps designed to ensure appropriate safeguards where required by law.

12. Regional privacy rights

European Economic Area, UK, and Switzerland (GDPR)

If you are in the EEA, UK, or Switzerland, you may have rights to access, rectify, erase, restrict, or port your personal data, and to object to or withdraw consent for certain processing. You may lodge a complaint with your local supervisory authority. Contact us at hello@graxter.com to exercise rights.

California (CCPA/CPRA)

California residents may have rights to know, delete, and correct personal information, and to opt out of sale or sharing. We do not sell personal information. Submit requests to hello@graxter.com.

Other regions

We comply with applicable privacy laws in regions where the Application is offered, including Microsoft Store Policy 10.5.8 regarding children's privacy.

13. Children's privacy

The Application is intended for adults and professional operators. It is not directed to children under 18 (or the age of majority in your jurisdiction), and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us at hello@graxter.com and we will take steps to delete it.

14. Changes to this policy

We may update this Privacy Policy when we add features, change data practices, or to comply with law or Microsoft Store requirements. We will post the updated policy at https://graxter.com/privacy with a revised effective date. Material changes may also be communicated in the Application or via the Microsoft Store listing where appropriate.

15. Related documents

Your use of the Application is also governed by our Terms of Service / End User License Agreement. For Microsoft Store purchases, Microsoft's terms also apply to Store transactions.

16. Contact us

Privacy questions or requests:
Thorium DC, LLC
Washington, DC, United States
hello@graxter.com