1. Scope & data controller
This policy covers personal data processed when you browse the MacFTP website, create or use an account, rent a cloud Mac, pay for an order or contact our support team. MacFTP provides rentals of dedicated Apple Silicon physical Macs, with macOS running natively on the hardware, not in a virtual machine.
The entity operating this platform determines how and why account, order, support-ticket and website access data is processed. To verify the operator’s identity, request details about data processing related to your order, or ask about this policy, contact support@macftp.comand identify the service or order your request relates to.
This policy distinguishes platform business records from files on your physical Mac. We process the former as needed to provide the service, maintain security and meet record-keeping requirements; you decide what the latter contain and how they are used. If you process other people’s personal data on your machine, you are responsible for determining the appropriate permissions, notices and access controls. This policy is governed by the laws of the jurisdiction where the platform operator is based. Disputes are subject to the jurisdiction of the competent courts there.
2. Information we collect
Account and service information.This includes your email address, information needed to authenticate your account, and your selected model, location, rental term, order number and service status. We use these records to link your account to a physical Mac, verify renewals and handle service requests. Do not enter sensitive information unrelated to your rental in your account name or general-purpose fields.
Order and payment records.Services are billed in US dollars (USD). We accept USDT-TRC20 and Visa / Mastercard / Amex (via Stripe); available payment gateways are determined by the options returned by our backend. Stripe processes card details; we do not store card numbers. We retain the order amount, currency, payment status and transaction references returned by the payment processor as needed. For USDT-TRC20 payments, records may include the transaction hash and on-chain information used to verify payment.
Support tickets and communications.This includes issue descriptions, related orders and incident times you send by email or through the signed-in console, along with any screenshots, logs or attachments you choose to provide. Before submitting, redact passwords, private keys, access tokens, full payment details and personal information unrelated to the issue. We will not ask you to send complete machine login credentials by regular email.
Access and security logs.These may include access times, source IP addresses, browser and device types, request paths, error statuses and necessary security incident records. We use this information to investigate website or login issues, detect abuse and understand how pages are used—not to read project files on your physical Mac.
3. How we use information
To set up, deliver and provide the service.We use account and order information to confirm your rental, assign your selected physical Mac, show instance and subscription status, and provide connection details, renewals and support. For requests involving account access or service changes, we first verify the requester’s connection to the account.
Billing, reconciliation and security reviews.Transaction references help us verify payments and handle billing questions or refund requests. Access and security incident records help us detect unusual logins, investigate unauthorized activity and protect the service. Internal access is restricted to personnel who need the relevant records to perform their duties.
Service-related notices.We may use your account email to send notices about authentication, orders, payments, rental terms and security. These notices are directly related to providing the service. If we plan to use information for a new purpose that differs from this policy, we will explain that purpose first and obtain your authorization where applicable rules require it. We do not automatically use order details for unrelated purposes.
4. Data on your physical Mac
You or the relevant rights holder own the source code, build artifacts, models, certificates, configurations and other files you upload to or create on your physical Mac. We do not proactively read these files or use them for website analytics. A dedicated physical Mac does not replace your own access controls: limit remote access, rotate connection credentials promptly and keep project keys secure.
When you need technical help, we first troubleshoot using the error details and redacted logs you provide. If access to the machine environment is necessary, we will confirm the scope of assistance and obtain the required authorization first. Do not send an entire project, a complete keychain or unrelated data to troubleshoot a single issue. Access during support should not exceed what is needed for that request.
What happens when your rental ends.When service ends, the physical Mac enters the recovery process and your rental access is revoked. Its disk must be erased and checked before the Mac can be assigned to another user. The deadline is before the Mac is delivered again; this is not a post-expiry retention period during which files remain accessible or recoverable. To check the recovery status for a specific order, submit a ticket through the console.
Export your files before your rental ends or you terminate it, and verify that your backups work on storage you control. Do not treat a Mac that has not yet been recovered or reassigned, or a ticket still being processed, as a backup guarantee. Once erasure is complete, the original files cannot be used for recovery. Platform-held order, payment and support records are handled separately under Section 7 and are not deleted by erasing the disk.
5. Sharing & third parties
Payment processors.For card payments, Stripe processes the data needed to handle the transaction and returns the payment result and transaction reference needed to verify your order. For USDT-TRC20, the transaction hash and on-chain records are used to confirm payment. Deleting your platform account does not change the visibility of transactions on a public blockchain. The fact that we do not store card numbers does not mean a payment processor is not involved.
Data center and infrastructure providers.To provide network connectivity, physical facilities and incident response, data center operators may access equipment, network or incident information needed to deliver the service. We limit what we share to what each task requires. Routine work with a data center does not involve proactively sharing your project source code, models or files on the machine.
We do not sell your personal data. We do not disclose account details for unrelated purposes, except to processors needed to provide the service, recipients you have expressly authorized, or in response to valid requests we are required to comply with by law. For legally required disclosures, we verify the scope of the request and provide only the information needed; where permitted, we will notify you. We will explain material changes to our processors or sharing purposes, for example by updating this policy.
6. Cookies & analytics
Essential storage.The website and console may use cookies or browser local storage to maintain your signed-in session, protect requests and remember basic preferences such as language. Authentication storage lets the server recognize a signed-in session; it does not make your account details publicly visible. Sign out after using a shared device, and clear that device’s site data if needed.
Usage analytics.The website may use a same-domain analytics service to record page views, clicks on plan links and other necessary interactions. This helps us identify information that is hard to find and actions that often fail. Analytics events should not contain passwords, connection credentials, card numbers or files from your physical Mac. We do not analyze website usage by reading project contents.
You can view, restrict or delete cookies and local storage in your browser settings. Deleting essential session data will sign you out, and restricting all storage may affect console features. Clearing browser data does not automatically delete account or order records on our servers. To request deletion of those records, follow the instructions in Section 8. You can also use the same contact channels to ask about or object to specific analytics records.
7. Retention & international transfers
Retention depends on record type.We keep account details while providing account services. Order and payment records are handled as needed to provide the service, reconcile payments and meet applicable record-keeping requirements. Support tickets and security logs are retained for as long as needed to address issues, investigate incidents and resolve disputes. When the purpose is fulfilled and there is no longer a reason to retain the information, we delete or de-identify it. We do not keep every type of record indefinitely.
Actual retention periods may depend on transaction status, outstanding bills, ongoing disputes or applicable obligations, so this policy does not set one fixed period for all records. If you request deletion, you can ask which categories are involved, what has been deleted, what must still be retained and why. Records retained with restricted access are not used for new, unrelated purposes.
Node locations and international processing.Physical Macs are available in Singapore, Tokyo, Seoul and Hong Kong. Once you choose a location, files uploaded to your machine are processed there. Account, payment and support processes may also involve locations where the platform operator and necessary service providers are based. Choosing a node location does not mean all business records are stored only there.
For international transfers, we assess necessity under applicable rules, limit recipient access and put safeguards in place proportionate to the processing risks. You can ask about data-location requirements for a specific project before ordering. If business records or every stage of processing must stay in one location, get explicit confirmation first; do not assume this is guaranteed based on the node name alone.
8. Your rights & contact
Where applicable rules allow, you may request information about how your personal data is processed, access to or a copy of it, correction of inaccurate information, deletion of information that is no longer needed, or restriction of or objection to certain processing. If processing is based on your consent, you may withdraw it. Withdrawal does not affect the lawfulness of earlier processing or automatically cancel an unpaid order.
Email support@macftp.comor sign in to the console and submit a ticket. Include the type of request, your account email and the relevant order number. Add specific records only if needed. Do not attach your account password, private keys, full card details or an entire project file.
To prevent others from claiming your data, we will verify your connection to the account and may ask for information directly relevant to your request. Once verification is complete, we will handle the request according to its scope and applicable requirements. If we cannot fulfill it in full, we will explain why, which records must be retained and what steps you can take next. You can also use the contact channels above to raise an objection or ask for an update.
If this policy changes materially, we will update this page and take appropriate steps to notify existing users about changes that significantly affect their rights. If you want to know whether a specific processing activity has taken place or whether particular data is still being retained, ask us with the relevant order details. This is more reliable than inferring the answer from the policy version alone.