Privacy Policy

This Privacy Policy explains how [LEGAL ENTITY FULL NAME — TO BE COMPLETED] (“Hostlas,” “we,” “us”) collects, uses, discloses, and protects personal information when you visit hostlas.com, create an account, purchase Services, chat with support, or otherwise interact with Hostlas.

Controller contact: [LEGAL ENTITY FULL NAME — TO BE COMPLETED], [REGISTERED ADDRESS — TO BE COMPLETED]. Privacy requests: privacy@hostlas.com (or support@hostlas.com if privacy inbox is not yet monitored).

1. Information we collect

1.1 You provide

• Account data: name, email, password (stored hashed), organization name
• Billing metadata: billing name/address (where collected), last four of card via processor, tax IDs if provided
• Support content: tickets, chat transcripts, contact-form messages, attachments you upload
• Domain/email configuration: domains, DNS settings, mailbox addresses you create

1.2 Collected automatically

• Technical logs: IP address, user agent, device/browser type, timestamps, referring URLs
• Product telemetry: feature usage, error events, performance metrics (aggregated where practical)
• Cookies and similar technologies for session auth, preferences, and analytics (see Section 6)

1.3 From processors and partners

• Payment status from Stripe (we do not store full card numbers on Hostlas application servers)
• Email delivery events from providers such as Resend
• OAuth profile data if you sign in with Google or GitHub (email, name, provider account id)

2. How we use information

• Provide, operate, secure, and improve the Services
• Authenticate users and prevent fraud, abuse, and spam
• Process payments, renewals, invoices, and refunds
• Send transactional email (verification, resets, receipts, notices)
• Respond to support and sales inquiries
• Comply with law, enforce Terms, and protect rights and safety
• With consent or as otherwise permitted: product updates and marketing (you may unsubscribe)

We do not sell personal information and we do not share it for cross-context behavioral advertising as those terms are commonly defined under US state privacy laws, unless we clearly disclose otherwise before doing so.

3. Legal bases (EEA/UK where applicable)

Where GDPR/UK GDPR applies, we rely on: contract performance (providing Services you request), legitimate interests (security, improvement, fraud prevention—balanced against your rights), consent (where required for cookies/marketing), and legal obligation.

4. Sharing

We share personal information with:

• Processors that host infrastructure, send email, process payments, provide analytics, or power chat—bound by contracts to process data on our instructions
• Professional advisors (legal, accounting) under confidentiality
• Authorities when required by law, legal process, or to protect Hostlas, customers, or the public
• Successors in a merger, acquisition, or asset sale, subject to this Policy or equivalent protection

5. International transfers

We may process data in the United States and other countries where we or our processors operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for transfers from the EEA/UK.

6. Cookies

Essential cookies keep you signed in and secure forms. Preference cookies remember UI settings. Analytics cookies (if enabled) help us understand traffic. You can control cookies through your browser; disabling essential cookies may break login and checkout.

7. Retention

We retain account and billing records for as long as your account is active and as needed for legal, tax, and dispute purposes. Support tickets and logs are retained for a commercially reasonable period, then deleted or anonymized. Backup copies may persist for a limited window after deletion requests.

8. Security

We use encryption in transit (HTTPS), hashed passwords, access controls, and monitoring appropriate to our risk profile. No online service is perfectly secure; please use unique passwords and protect your devices.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain processing, and to object to processing based on legitimate interests. You may also appeal a denied request where required by law. Submit requests via Contact (topic: Legal / privacy request) or privacy@hostlas.com. We may need to verify your identity. You may lodge a complaint with a supervisory authority in your region.

10. Children’s privacy

Hostlas Services are not directed to children under 16 (or the age defined by local law). We do not knowingly collect personal information from children. If you believe we have, contact us for deletion.

11. Changes

We may update this Policy by posting a revised version. Material changes will be indicated by the “Last updated” date and, when appropriate, additional notice. Continued use after changes take effect means you acknowledge the updated Policy.

12. Contact

[LEGAL ENTITY FULL NAME — TO BE COMPLETED]
[REGISTERED ADDRESS — TO BE COMPLETED]
Privacy: privacy@hostlas.com
General: support@hostlas.com

Governing considerations for privacy disputes align with [GOVERNING LAW / VENUE — TO BE COMPLETED] except where mandatory local law applies.

Related: Terms of Service · Refund Policy · Contact