Privacy Policy

1. Infrastructure Neutrality & Third-Party Availability

DockSpin is an open, neutral cloud hosting and edge reverse-proxy control plane. Our infrastructure services are offered to any third party on uniform, transparent terms. Software platforms (such as Hubiko) connect to DockSpin via standardized APIs as independent tenants.

DockSpin does not operate as an umbrella platform or data aggregator. We do not aggregate, cross-reference, or combine data between different tenants, platforms, or custom domains hosted on our infrastructure.

2. Data Protection Roles: Data Controller vs. Data Processor (HK PDPO & GDPR)

Direct Account Holders (Data Controller): With respect to your DockSpin account registration, login credentials, and billing contacts, Pioneer Ventures Technology Limited acts as a Data Controller under the Hong Kong Personal Data (Privacy) Ordinance (PDPO, Cap. 486) and applicable laws.

Hosted Content, Reverse Proxy Traffic & End-User Data (Data Processor): With respect to any personal data, customer transactions, website visitors, files, or databases hosted on, proxied through, or processed by your DockSpin instances (including ecommerce storefronts, web applications, or custom domains), you (or your respective clients) are the sole Data Controller. Pioneer Ventures Technology Limited acts strictly as a Data Processor.

As a Data Processor, we process data solely upon your automated and documented instructions to route network traffic, issue SSL/TLS certificates, and execute server operations. We maintain zero commercial interest, ownership, or independent usage rights over personal data processed on your behalf.

3. Zero-Data-Mining & AI Training Prohibition Covenant

We operate under a strict zero-data-mining architecture. DockSpin and Pioneer Ventures Technology do NOT scan, inspect, index, or harvest customer database records, application code, uploaded media, or customer order transactions.

We contractually prohibit the ingestion or use of customer website data, databases, traffic logs, or application files for artificial intelligence (AI) or machine learning (ML) model training. Your data is never used to train public, shared, or proprietary AI models.

We do NOT sell, rent, monetize, broker, or trade your personal information, customer lists, or website traffic to third parties or advertising networks under any circumstances.

4. Custom Domain, Brand & Asset Sovereignty

Customers retain 100% unencumbered legal and commercial ownership over their custom domain names, subdomains, DNS routing records, trademarks, store branding, and intellectual property.

DockSpin acts solely as an automated technical conduit providing reverse-proxy routing and Let's Encrypt SSL/TLS certificates. Neither DockSpin nor Pioneer Ventures Technology claims any ownership, title, copyright, trademark, or lien over any custom domain or brand hosted on or routed through our infrastructure.

5. Information We Collect as an Infrastructure Provider

Account & Contact Data: When registering or communicating with us, we collect your email address, name (if provided), and language preference for account administration.

Payment & Billing Data: Checkout transactions are processed directly by our authorized PCI-DSS compliant payment gateways (such as Stripe or PayPal). DockSpin does not store or process raw credit card numbers or banking secrets. We retain only billing references, subscription tiers, and transaction IDs.

Technical & Access Logs: Web servers and reverse proxies record standard IP addresses, HTTP request headers, and user-agent strings solely for DDoS defense, intrusion prevention, network security, and performance optimization.

6. Client-Held Backup Vault (Zero Host Custody)

When you enable Google Drive offsite backups, snapshots are encrypted client-side using Restic before transmission, utilizing customer-designated encryption keys.

Snapshots are stored directly in your personal Google Drive account. DockSpin does NOT maintain custody, retention, or commercial visibility over your offsite backup archives. We run the hosting engine; you hold the sovereign keys to your personal backup vault.

7. Data Security, Tenant Isolation & Open Portability

All communication between your browser, the control plane, and our host servers is encrypted in transit using TLS 1.3.

Production servers utilize isolated directory permissions (0711 traverse-only isolation) to prevent cross-tenant data access. Administrative control plane mutations are recorded in an immutable audit ledger.

Zero Vendor Lock-in & Portability: Your website files and database dumps remain your property at all times. All paid plans provide 1-click 'Take My Site' open-format exports, allowing you to freely migrate to any VPS or cloud provider without penalty.

8. Data Retention & Right to Erasure

Your website files and database dumps remain your property at all times. You can export a complete, portable archive via the 1-click 'Take My Site' tool whenever you choose.

Upon account termination, your hosted sites, databases, and stored configs are permanently deleted from our active clusters. Transactional invoice records are retained only as required by Hong Kong accounting and tax regulations.

9. Contacting the Data Protection Officer

If you have questions about this Privacy Policy, wish to request a Data Processing Addendum (DPA), or exercise your statutory rights under the Hong Kong Personal Data (Privacy) Ordinance or GDPR, please contact:

Pioneer Ventures Technology — Data Protection Team Email: [email protected] / [email protected] Website: https://pvent.tech

10. Governing Language & Interpretation

In the event of any discrepancy, ambiguity, or conflict between the English version of this Privacy Policy and any translated version, the English version shall prevail and govern in all respects.