Skip to content

Privacy Policy

Last updated:

1. Overview

This policy explains how Veenam Technologies ("we", "us") handles personal data when you use Raksh, our server monitoring and management service available at rakshcloud.com and app.rakshcloud.com (the "Service"). It is written to meet the Digital Personal Data Protection Act, 2023 (DPDP) and the EU/UK General Data Protection Regulation (GDPR).

2. Who we are & our role

For account, billing and website data, we act as a data controller. For the monitoring data our agents collect on your servers, we act as a data processor on behalf of the organisation that holds the account (the data controller). If you use the Service through an employer or client, their policies govern that data — please contact them first.

3. Data we collect

  • Account data: name and email address, hashed password, role, and last-login metadata.
  • Server identifiers: hostname and, where enabled, public and private IP addresses. These are encrypted at rest.
  • Telemetry: host metrics (CPU, memory, disk, load, uptime) and service metrics (e.g. nginx, MySQL, PostgreSQL, PHP-FPM). Metrics carry no personal data.
  • Technical data: session cookie, and standard server logs (which we keep free of personal data).

4. How we use it

To provide and operate the Service, authenticate you, display dashboards, secure the platform, provide support, and comply with legal obligations. We do not sell personal data or use it for advertising.

6. Cookies

The admin portal uses a single, strictly necessary session cookie (HttpOnly, SameSite=Lax, Secure over HTTPS) to keep you signed in. We do not use advertising or third-party tracking cookies. On the corporate website (rakshcloud.com) we use privacy-friendly, cookieless analytics to understand aggregate traffic; it does not identify you or follow you across sites.

7. Sharing & sub-processors

We share personal data only with sub-processors that help us run the Service (for example, hosting, content delivery, and privacy-friendly website analytics), under contracts that require appropriate safeguards. We disclose data where required by law.

8. Retention

Raw one-minute metrics are retained for a short window (default 14 days) and then aggregated into hourly and daily rollups for longer-term insights. Account data is retained while your account is active and for a limited period afterwards to meet legal obligations. Deleting a server, user or company removes the associated telemetry.

9. Security

We protect data with encryption in transit (TLS) and encryption of personal-data fields at rest, Argon2id password hashing, per-agent API keys stored only as hashes, role-based access control with tenant isolation, and audit logging of administrative actions.

10. Data residency & transfers

The Service is deployed in a single, configurable region. Where data is hosted is a deployment choice, and we do not transfer personal data across borders by default.

11. Your rights

Subject to applicable law you may request access, correction, erasure, restriction, portability, and object to certain processing; withdraw consent; and lodge a complaint with your data-protection authority. The Service provides export and erasure for users and companies, and we honour these requests by email at privacy@rakshcloud.com.

12. Children

The Service is intended for organisations and is not directed to children.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, notified to account administrators.

14. Contact

Questions or requests: privacy@rakshcloud.com. See also our Terms & Conditions.