← Back to Home

Privacy Policy

Last updated: August 2026

1. Data We Collect

We only collect data necessary to provide the Service:

• Account data: Name, email
• Payment data: Managed through Stripe, so we do not store credit card information directly
• Server data: IP address, domain, plan, usage status
• Usage logs: Login history, account changes

2. Content on Your Server

• Your data, files and AI conversations are confidential. We do not copy them, use them, analyse them, or disclose them to third parties
• Technical access: as your managed server provider we hold administrative access to your server, which is necessary to deliver the service. We use it in two situations only: (1) when you report a problem and we need to investigate in order to fix it, and (2) when the platform itself needs updating or repair. We do not access it otherwise
• Automated monitoring: our systems read only metadata, such as the timestamp of the most recently modified file, to determine whether the server is in use. They do not open file contents
• Credit card information: managed entirely by Stripe. We never store it

3. How We Use Data

We use data to:

• Provide the Newton service (create servers, manage domains, send emails)
• Process payments via Stripe
• Send service-related email notifications (payments, expiry)
• Improve the Service

4. Data Sharing

We do not sell customer personal data and we share it only with the providers needed to run the service, including Hetzner (servers), Cloudflare (DNS), NameSilo (domains), Stripe (payments), Brevo (email) and Anthropic (automated support).

The full list, with locations and the categories of data each one can access, is published at Subprocessor List.

5. Cookies

Our website uses localStorage for login tokens. We do not use tracking cookies.

Third-party services (Stripe) may use their own cookies during the payment process.

6. Security

• All connections use HTTPS (SSL/TLS)
• Passwords are stored as hashes, not plain text
• SSH access to customer servers uses key-based authentication only. Password login is disabled and fail2ban protects against brute-force attempts
• Each customer runs on a separate virtual server. Resources are not shared between customers

7. Data Retention and Deletion

When you cancel, the server and everything on its disk are deleted. Account data and payment records we are required to keep are described, with retention periods, at Data Retention Policy.

8. Customer Rights

Customers have the right to:

• Access and modify personal data via Dashboard
• Export data from the server at any time
• Request deletion of account and all data by contacting us via email
• Request a data processing agreement (DPA) where your use requires one

9. Changes

We may modify this Privacy Policy. Customers will be notified via email in advance.

10. Contact Us

If you have questions about this Privacy Policy:

Income in Click Co., Ltd.
Company registration number 0105564049399
98/299 Soi Pracha Uthit 33 Yaek 7, Pracha Uthit Road, Bang Mot, Thung Khru, Bangkok 10140, Thailand
Email: agent@hirenewton.com