This Privacy Policy explains how Andrews Development LLC, doing business as ServerBorn ("ServerBorn," "we," "us"), collects, uses, shares, and safeguards personal information when you visit serverborn.com, use the customer panel at panel.serverborn.com, or use any of our hosting services (the "Services").
Section 01Overview
This policy covers the personal information we collect and process as the "controller" of that data, namely information about prospective customers, customers, and visitors to our marketing site. It does not cover Customer Content that you put on a site we host; for that, you are the controller and we are a processor acting on your instructions under our Terms of Service.
Section 02Information We Collect
Information you provide
- Account information: name, email, password (hashed), business name, billing address, phone number (optional).
- Billing information: processed by our payment processor; we receive a non-sensitive payment token, the last four digits of the card, the brand, and the expiration. We do not see or store full card numbers.
- Support content: tickets, chat messages, and any files you attach when contacting us.
Information we collect automatically
- Server and network logs: IP address, user agent, request URL, response status, byte counts, and timestamps. These are essential for security, abuse detection, and debugging.
- Panel telemetry: the actions you take in the panel (which we keep for audit and to improve usability), plus session identifiers.
- Cookies and similar: see Section 04 below.
Information we receive from third parties
- Cloudflare: edge logs covering requests routed through Cloudflare to your sites and to ours, including security events such as blocked attacks.
- Payment processor: billing status, dispute information, fraud signals.
Section 03How We Use Information
We use personal information to:
- provide, maintain, and improve the Services;
- create and administer your account, including authentication and security;
- bill you and collect payment;
- communicate with you about your account, service status, security incidents, planned maintenance, and policy changes;
- respond to support requests;
- monitor for, detect, investigate, and prevent abuse, fraud, and security incidents;
- comply with legal obligations and respond to valid legal process; and
- with your consent, send occasional product updates that you can opt out of at any time.
Where we rely on legitimate interests as a legal basis (such as protecting our network from abuse), we have balanced those interests against your rights and consider them not to override them.
Section 04Cookies and Similar Technologies
The marketing site and the customer panel use a small number of cookies, each strictly necessary for the site to work or to keep you signed in. We do not run third-party advertising trackers on serverborn.com.
Categories in use:
- Strictly necessary: session cookies, CSRF tokens, load-balancing cookies set by Cloudflare to keep traffic stable.
- Functional: remembering small UI preferences such as theme or last-viewed page in the panel.
You can block or delete cookies in your browser at any time. Doing so may break parts of the panel that depend on session cookies.
Section 05How We Share Information
We share personal information only as described below. We do not sell personal information for advertising or rent contact lists.
- Infrastructure providers who help us run the service, including Cloudflare, Inc. (edge network, DDoS, DNS), our payment processor (billing), our object-storage provider (encrypted off-site backups), and our transactional email provider.
- Professional advisors such as accountants and lawyers, bound by confidentiality.
- Legal and safety: in response to a valid subpoena, court order, or other legal process; to enforce our Terms; or where we believe disclosure is necessary to protect the rights, property, or safety of ServerBorn, our customers, or the public.
- Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our assets. We will require any successor to respect the commitments in this policy.
Section 06Data Retention
We retain personal information only as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. General retention periods:
- Account records: for the life of the account, then up to 24 months after closure.
- Billing records: at least seven (7) years for tax and accounting reasons.
- Server access logs: typically 30 to 90 days.
- Backups: 30-day rolling encrypted backups by default; longer retention available on request.
- Support tickets: 24 months from closure.
When personal information is no longer needed, we delete it or irreversibly anonymize it.
Section 07Security
We use industry-standard technical and organizational measures to protect personal information, including TLS in transit, AES-256 for backups at rest, hardened operating systems, least-privilege access, and audit logging. We rely on Cloudflare's certified edge network (SOC 2 Type II, ISO 27001) in front of every site.
No security control is perfect. If we become aware of a breach affecting your personal information, we will notify you and any required authority without undue delay.
Section 08Your Rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- correct inaccurate or incomplete information;
- request deletion of your personal information (subject to legal retention requirements);
- restrict or object to certain processing;
- request portability of personal information you have provided to us; and
- withdraw consent where we rely on consent as the legal basis.
To exercise any of these rights, email [email protected] from the address on your account or use the contact form. We may need to verify your identity before acting on a request.
California residents (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect about you, the right to delete it (subject to exceptions), the right to correct it, and the right to opt out of sale or sharing. We do not sell personal information and do not share it for cross-context behavioral advertising.
Section 09International Data Transfers
ServerBorn is based in the United States and our infrastructure is operated from the United States. Cloudflare's edge network is global, which means content delivered from your site may be routed through and cached at locations outside your home country. Where personal information of EU or UK residents is transferred to the United States, we rely on appropriate safeguards such as Standard Contractual Clauses with sub-processors that require them.
Section 10Children's Privacy
The Services are not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided personal information to us, please contact us so we can delete it.
Section 11Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. For material changes we will make a reasonable effort to notify you in advance, such as by email or through the panel.
Section 12Contact
Privacy questions and requests can be sent to [email protected] or through the contact form. Postal mail can be addressed to:
Andrews Development LLC
Attn: Privacy, ServerBorn
[BUSINESS MAILING ADDRESS]
South Carolina, USA