Privacy, kept simple

1. What we collect

• Account data: name, email, phone (if you provide it), billing address
• Payment data: processed by PCI-DSS compliant providers (Razorpay, Stripe, PayPal, UPI) — we never see or store card numbers
• Usage data: server metrics, tickets, support conversations, and standard logs needed to keep services running and secure
• Cookies: a small preference cookie for your INR/USD currency choice and session login

2. Why we collect it

• To provide, bill and support your hosting services
• To secure our infrastructure and investigate abuse or attacks
• To send essential notices (renewals, outages, security alerts)
• To improve our services with anonymised, aggregated analytics

3. What we never do

• We never sell or rent your personal data to anyone
• We never read your site files without a support request from you
• We never serve ads or track you across third-party websites

4. Where data lives

Your account data is stored on encrypted servers operated by our cloud providers (DigitalOcean, Google Cloud, Vultr). Depending on your plan and chosen region, data may reside in India, Singapore, the EU or the US. Transfers outside India are covered by standard contractual clauses where required.

5. How long we keep it

We keep account data while your account is active, plus a retention period of 12 months after cancellation for legal and anti-fraud purposes. Backups are retained up to 7 days, or as long as you hold on-demand snapshots.

6. Your rights

Under the Digital Personal Data Protection Act (India) and GDPR where applicable, you can:

• Access or export a copy of your personal data
• Correct inaccurate data
• Request deletion of your data (subject to legal retention)
• Object to or restrict processing
• Withdraw consent at any time

Email privacy@hosttoup.com to exercise any of these rights. We respond within 30 days.

7. Children’s privacy

Our services are not directed at children under 18, and we do not knowingly collect their data.

8. Data breaches

In the unlikely event of a breach affecting your personal data, we’ll notify you within 72 hours with what happened, what we’re doing, and how you can protect yourself.

9. Changes & contact

Material changes to this policy are emailed 14 days in advance. Questions? Contact us — or write to privacy@hosttoup.com, HostToUp.com, Kolkata, West Bengal, India.