Privacy Policy
YunZheng LAB — AS204921 Educational and Research Computer Experimental Network
1. Who We Are
YunZheng LAB operates AS204921, a non-profit educational and research computer experimental network. This privacy policy applies to all services provided through yunzheng.space, including the Orbit console, virtual machine hosting, BGP services, and related infrastructure.
Data controller: Zhenyun Sun
Contact: lemon@lab.yunzheng.space
Orbit Help: when an organisation uses Orbit Help to serve its own customers, that organisation is the controller of its customers' ticket data, and we are its processor. We process and store that data on the platform on the organisation's behalf; email to and from the organisation's help desk is sent and received through the organisation's own mail server. For the help desk we run for our own customers (helpdesk.yunzheng.space), we remain the controller.
2. Data We Collect
2.1 Account Information
When you create an account, we collect:
- Name
- Email address
- Password (stored as a cryptographic hash — we cannot read your password)
2.2 Billing Information
Payment processing is handled by Stripe. We do not store your credit card numbers or bank details on our servers. We retain:
- Stripe customer ID (a reference identifier)
- Transaction history (amounts, dates, payment status)
- Invoice records
2.3 Service Data
To provide and maintain our services, we collect:
- VM configuration and usage data (hostname, IP address, resource allocation)
- Traffic/bandwidth usage statistics
- BGP session information (ASN, peering configuration)
2.4 Technical Data
When you access our platform, we may automatically collect:
- IP address
- Browser type and version
- Access timestamps
- Pages visited
2.5 Support Data
When you contact us through the helpdesk, we collect the information you provide in your ticket (name, email, message content).
3. How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide and manage services | Account, service data | Contract performance |
| Process payments | Billing information | Contract performance |
| Send service notifications | Email address | Legitimate interest |
| Prevent abuse and enforce ToS | Technical data, service data | Legitimate interest |
| Respond to support requests | Support data | Contract performance |
| Monitor network health | Traffic statistics | Legitimate interest |
4. Data Sharing
We do not sell or trade your personal information. We may share data only with:
- Stripe — for payment processing (Stripe Privacy Policy)
- Cloudflare — for content delivery and security (Cloudflare Privacy Policy)
- Law enforcement — only when required by applicable law or valid legal process
5. Data Storage and Security
- Your data is stored on Cloudflare's infrastructure (D1 database) and on our managed servers.
- Orbit Help: the content of the tickets an organisation's help desk receives, their messages and attachments, is stored on the platform. Email to and from that help desk is sent and received through the organisation's own mail server, where the original messages remain.
- Passwords are hashed using industry-standard cryptographic algorithms.
- Authentication tokens are stored in secure, HTTP-only cookies.
- Transport is TLS 1.2 or better with HSTS; administrative access requires a second factor; and access to stored data is limited to the operator named above.
6. Data Retention
- Account data: Retained for the lifetime of your account plus 30 days after deletion.
- Billing records: Retained for 7 years to comply with financial record-keeping requirements.
- Traffic logs: Retained for the current billing period plus one additional month.
- Support tickets: Retained for 2 years after resolution.
7. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate data.
- Deletion — request deletion of your data (subject to retention obligations).
- Data portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
To exercise any of these rights, open a request at helpdesk.yunzheng.space.
8. Cookies
We use only essential cookies required for the service to function:
- token — authentication session cookie (HTTP-only, secure). Expires when you log out or the session ends.
We do not use analytics cookies, advertising trackers, or third-party tracking cookies.
9. Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
10. International Transfers
Your data may be processed in various countries where our infrastructure is located. By using our services, you acknowledge that your data may be transferred internationally. We ensure appropriate safeguards are in place for such transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Material changes will be communicated via email.
12. Contact
For any privacy-related questions or requests:
- Helpdesk: helpdesk.yunzheng.space