Privacy Policy

Last updated: 21 October 2026

This policy explains what personal information Vega ("Vega", "we", "us") collects when you use vegaservers.com, our client area, our API and our services, why we collect it, who we share it with, and the choices you have. We are a New Zealand business and we handle personal information in line with the Privacy Act 2020. The legal entity behind Vega is named on our invoices.

1. What we collect

Information you give us

Account details: your name, email address, password, and, if you choose to give them, your company, phone number, postal address and country.
Orders and billing: the services you order, invoices, payments, account credit history, and any GST or tax details you provide.
Saved payment methods: if we set up automatic card payments for you, we keep the Stripe customer ID and payment method ID, and the card brand, last four digits and expiry date that Stripe tells us. We never see or store your full card number or security code.
Support and contact: tickets, replies, contact form messages and any files or details you include in them.
Your game server content: the files, worlds, configuration and data you place on your server. We do not look at this unless it is needed to provide support you ask for, to investigate abuse or security problems, or because the law requires it.

Information from other sources

Sign in with Discord: if you sign in or link your account with Discord, we receive your Discord ID, username, avatar and verified email address.
Stripe: payment confirmations, payment method details described above, and fraud signals.
Our previous billing system: if you were a customer before we moved to our current platform, we brought across your account, service, invoice and payment records from it.

Information collected automatically

Your IP address and the time of sign ins and sign in attempts, to protect accounts and detect abuse.
API requests made with your keys (time, endpoint, result and IP address), which we keep for 90 days.
Copies of the emails we send you, kept for 90 days, and delivery results.
Technical logs from our website and hosting platform, such as error logs and server activity records.
Records of actions taken on your account or services by you or our staff, for security and accountability.

2. How we use it

To create and run your account, set up and run your services, and create your server and control panel login.
To take payment, issue invoices and receipts, run automatic payments you have agreed to, and keep tax and accounting records.
To send you service emails, such as order confirmations, invoices, payment problems, renewals, suspensions and security notices. You cannot opt out of these while you have an account.
To provide support and respond to your questions.
To keep our platform, our network and other customers safe, and to detect and prevent fraud, abuse and attacks.
To give customers the roles and access they are entitled to in our community Discord, if you have linked your account.
To meet our legal obligations and to establish, exercise or defend legal claims.
To improve our website and services, using the information described above and any feedback you give us.
To tell you about news, offers and new features, only if you have not opted out. Every such email has an unsubscribe link, and you can unsubscribe at any time. If you unsubscribe, we still send you the service emails above.

3. Who we share it with

We do not sell your personal information, and we do not share it for advertising. We share it only with the following, and only as needed:

Stripe, our payment processor, to take and manage payments.
Our email delivery providers, to send you email.
Discord, if you sign in with Discord, link your account, or use our community server. Discord is subject to its own privacy policy.
Microsoft, which we use to sign our own staff in to the admin area and to run parts of our email.
Our hosting and game server platform. Your name and email are used to create your login on our game server control panel, which we run on infrastructure in the locations you choose when you order.
Our staff and contractors who need access to do their jobs, who are bound to keep it confidential.
Professional advisers such as accountants and lawyers, and a debt collection agency if an account goes unpaid.
Authorities and others where the law requires it, a court orders it, or we believe it is necessary to prevent serious harm or a serious crime, or to protect our rights, customers or network.
A buyer or successor if our business or part of it is sold or restructured. We would tell you and the new owner would need to follow this policy.

4. Where your information goes

Some of the providers we use, such as Stripe, Discord and Microsoft, process information outside New Zealand, including in the United States and Australia. Your game server runs in the location you choose when you order, which may be Auckland, Sydney or Los Angeles. When we send personal information overseas, we take reasonable steps to make sure it is protected to a standard comparable to New Zealand's Privacy Act, or we tell you if that is not the case.

5. How long we keep it

Account details are kept while your account is open, and for a reasonable period afterwards in case you return or a dispute arises.
Invoices, payment and tax records are kept for at least 7 years, as New Zealand tax law requires.
Support tickets are kept for as long as they are useful to help you and for our records.
API request logs and copies of emails are kept for 90 days.
Server files and data are deleted when a service is cancelled or terminated, as described in our Terms of Service. Deleted data cannot be recovered.
When we no longer need information, we delete it or make it anonymous.

6. Cookies

We use a small number of essential cookies, mainly a session cookie that keeps you signed in and protects your forms against forgery. We do not use advertising or tracking cookies, and we do not use third-party analytics on our website. The fonts and images on our website are hosted on our own servers. Blocking essential cookies stops sign in from working.

7. Security

We take reasonable steps to protect personal information. Passwords are stored as one-way hashes, API keys are stored in a form that cannot be read back, sensitive settings are encrypted, and staff access is limited to the roles that need it. No system is perfectly secure. If a privacy breach is likely to cause you serious harm, we will tell you and the Office of the Privacy Commissioner as the Privacy Act requires. You are responsible for choosing a strong password and for keeping your sign in details and API keys private.

8. Your rights

Under the Privacy Act 2020 you can:

ask us to confirm whether we hold personal information about you, and ask for a copy of it;
ask us to correct information that is wrong;
ask us to delete information we no longer need (we may still need to keep some records, such as invoices, for legal reasons);
opt out of marketing emails at any time.

You can update most of your details yourself in your client area. For anything else, email [email protected] or open a support ticket. We may need to verify your identity before we act on a request. We aim to respond within 20 working days.

If you are not happy with how we handle your information, please contact us first so we can try to put it right. You also have the right to complain to the Office of the Privacy Commissioner at privacy.org.nz.

9. Children

Our services are for people aged 18 and over. We do not knowingly collect personal information from anyone under 18 without a parent or guardian's involvement. If you think a child has given us information without permission, contact us and we will deal with it.

10. Third-party links and our community Discord

Our website may link to other sites, such as our community Discord. We are not responsible for their privacy practices, and what you post in a public Discord channel is visible to others there.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new "last updated" date, and, for significant changes, tell you by email before they take effect.

12. Contact us

Privacy questions or requests: [email protected], or open a ticket in your client area.