Privacy Policy
Last updated: March 2, 2026
1. Introduction
Hosto ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have.
2. Information We Collect
We collect the following categories of information:
Account Information: Name, email address, and password (hashed, never stored in plaintext).
Billing Information: Payment transactions are processed by Razorpay. We store only a payment reference ID — we never store your card or UPI details.
Usage Data: IP addresses, browser type, pages visited, and actions taken within the Service, used for security and improving the platform.
Site Content: Files and content you upload to your hosted sites are stored on our servers solely to provide the Service.
3. How We Use Your Information
We use your information to:
• Provide, operate, and maintain the Service
• Process payments and send receipts
• Send transactional emails (subscription confirmations, expiry reminders)
• Detect and prevent fraud or abuse
• Respond to your support requests
• Improve our platform and user experience
4. Data Sharing
We do not sell your personal data. We share data only with:
Razorpay — for payment processing (governed by their privacy policy).
Brevo — for transactional email delivery.
DigitalOcean — our infrastructure provider.
All third-party processors are contractually bound to handle your data securely and only as instructed by us.
5. Cookies
We use an HttpOnly, Secure cookie solely to store your refresh token for keeping you logged in. We do not use advertising or tracking cookies.
6. Data Retention
We retain your account data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.
7. Security
We use industry-standard security practices including HTTPS/TLS encryption, hashed passwords (bcrypt), and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security.
8. Your Rights
You have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at [email protected].
9. Children's Privacy
The Service is not directed at children under 18. We do not knowingly collect personal data from minors.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email. Continued use of the Service after changes constitutes acceptance.
11. Contact
For any privacy-related questions or requests, contact us at [email protected].