Privacy Policy

1. Scope and responsibility

This policy explains how Servxbit I.T. Solutions (“Servxbit,” “we,” “us”) processes personal information when you register for, administer, or use SXBuilder. It applies to the SXBuilder control plane, client workspace, support, security, billing, and product communications. A customer remains responsible for the content and personal data it places in its own connected databases and applications.

2. Information we process

• Account and business profile: name, work email, organization, job title, business phone, country, plan, and billing schedule.
• Security and operations: password hashes, email-verification state, MFA configuration, recovery-code hashes, session records, login and security-request history, IP address, audit events, and support diagnostics.
• Subscription and payment metadata: requested plan, trial and subscription status, payment-order identifiers, gateway event references, and invoice-related records. Payment card or wallet credentials are handled by the hosted payment provider and are not collected by SXBuilder.
• Workspace metadata: organizations, memberships, projects, environments, pages, components, bindings, templates, settings, deployment-validation records, and activity history.
• Client-owned database connection metadata: provider, host, port, database/schema identifiers, health diagnostics, discovered schema metadata, and explicit resource/field permissions. Database usernames and passwords are encrypted, write-only, and are not displayed after submission.

3. Why we process information

We process information to provide and secure the service, verify identity, enforce tenant boundaries and plan limits, deliver required notifications, operate trials and subscriptions, prevent fraud and abuse, diagnose incidents, maintain auditability, comply with law, and improve reliability. Processing is based on performance of the service agreement, compliance with legal obligations, legitimate operational and security interests, and consent where applicable.

4. Service providers and transfers

We may use vetted hosting, database, email-delivery, monitoring, support, and payment providers acting under appropriate confidentiality and data-protection obligations. Information may be processed outside your country when required to operate the service, subject to appropriate safeguards and applicable law. We do not sell personal information.

5. Retention

We retain account and workspace records while the service relationship is active and for a limited period afterward when needed for security, dispute resolution, accounting, legal compliance, backups, and audit integrity. Security logs and failed-request records may be retained for shorter operational periods. Encrypted backups follow controlled retention and deletion schedules. We delete or de-identify information when it is no longer needed, unless law requires retention.

6. Security

Controls include encrypted transport, secure password hashing, MFA, CSRF protection, tenant-scoped authorization, encrypted write-only secrets, session rotation and expiry, rate limits, audit logging, least-privilege data policies, and fail-closed production execution gates. No online service can guarantee absolute security. Notify us promptly if you suspect unauthorized access.

7. Your choices and rights

Subject to applicable law, you may request access, correction, objection, erasure or blocking, portability, information about processing, or assistance with a privacy complaint. We may need to verify your identity and preserve records that must legally or operationally be retained. Philippine data subjects may also contact the National Privacy Commission.

8. Contact

Send privacy requests or security notices to [email protected]. Include your account email and organization, but never send passwords, MFA codes, database credentials, or payment credentials by email.

9. Changes

We may update this policy as the service, providers, or legal requirements change. Material changes will be communicated through SXBuilder or the verified account email and will show a new effective date.