Privacy Policy
How SharkCluster collects, uses, processes, and safeguards your personal data.
Effective Date: August 26, 2026
Last Updated: August 26, 2026
This Privacy Policy explains how Coreway Solution, doing business as SharkCluster ("SharkCluster", "we", "us"), collects, uses, processes, and safeguards personal data when you interact with sharkcluster.com, our dashboard, APIs, and management services.
We operate with reference to the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA).
1. Data We Collect
Account & Billing: Name, business name, email, phone, billing address, GSTIN (where applicable). Payments are processed via Razorpay (PCI-DSS certified); we do not store full card numbers or CVV.
Technical & Server Metadata: IP addresses, CPU/RAM/storage/bandwidth metrics, OS versions, panel audit logs (logins, API calls, SSH key changes, firewall edits, deployments).
Application Data Exemption: We do not inspect or monetize the contents of your applications or databases. The panel communicates with your server to execute administrative tasks (e.g., web server setup, database creation). Support staff access server contents only when you explicitly authorize it for a support ticket.
Cookies & Analytics: Standard analytics cookies on the marketing site to understand traffic; these do not track activity inside your managed servers.
2. Purpose of Processing
1. Provision, authenticate, automate, and bill your service
2. Monitor system health, detect abuse, and prevent unauthorized access
3. Deliver receipts, security alerts, and maintenance notices
4. Fulfill accounting and GST compliance obligations under Indian law
3. Data Storage, Hosting Regions, and Localization
Your managed servers reside on third-party infrastructure (currently DigitalOcean, Contabo, and OVHcloud, with additional providers being added over time) in the region you select at provisioning. If your organization is subject to specific data localization requirements (e.g., RBI directives for regulated financial data, or GDPR for EU personal data), you are solely responsible for choosing a region that meets those obligations — SharkCluster does not evaluate this for you.
4. Third-Party Disclosures
We share data only as needed to operate the Service:
- Infrastructure Providers — DigitalOcean, Contabo, OVHcloud, for server provisioning
- Razorpay — payment processing
- Transactional email provider — service and account emails
- Law enforcement — only when compelled by valid legal process under Indian law
We do not sell personal data.
5. Retention & Security
Billing records: retained per applicable Indian tax/GST record-keeping requirements.
Server logs & telemetry: retained 30–90 days for diagnostics and abuse investigation, then purged.
Security measures: TLS encryption in transit, role-based access control, and vulnerability monitoring on our own systems.
6. Your Rights Under DPDPA
You may request access to, correction of, or erasure of your personal data, subject to legal retention obligations we must comply with (e.g., billing records). You may also nominate someone to exercise these rights on your behalf in case of incapacity. Submit requests to [email protected].
7. Grievance Officer
Designation: Grievance Officer
Company: Coreway Solution, doing business as SharkCluster
Address: 602, Leela Plaza, Kanba Hospital Road, Nikol, Ahmedabad
Email: [email protected]
Response: acknowledgment within 24 hours, resolution target within 15 days.
8. Children's Data
The Service is intended for business use and not directed at individuals under 18.
9. Changes to This Policy
Material changes will be notified via the dashboard or registered account email.
10. Contact
[email protected] · 602, Leela Plaza, Kanba Hospital Road, Nikol, Ahmedabad
Last updated: August 2026. Questions about this policy? Contact us.
Ready to take control
of your hosting?
Deploy servers, run self-hosted business apps, and keep your data on your own VPS — with a dedicated DevOps manager by your side.