Privacy Policy

1. Information We Collect

We collect information you provide directly and information generated through your use of our Services:

• Account data: Name, email address, password (hashed), company name, billing address
• Payment data: Processed securely by Stripe or PayPal — we do not store full card numbers
• Usage data: IP addresses, browser type, pages visited, login timestamps
• Support data: Messages and files you send to our support team
• Cookies: Session cookies for authentication, preference cookies for your settings

2. How We Use Your Information

We use your information to:

• Provision and manage your hosting services
• Process payments and send invoices
• Send transactional emails (order confirmations, renewal reminders, security alerts)
• Respond to support requests
• Detect and prevent fraud, abuse, and security threats
• Improve our services and analyze usage patterns
• Send marketing emails (you may opt out at any time)

3. Data Sharing

We do not sell your personal data. We share data only with:

• Payment processors: Stripe and PayPal, to process transactions
• Infrastructure providers: Server and datacenter partners for service delivery
• Email providers: Transactional email delivery services
• Legal obligations: When required by law, court order, or to protect our rights

4. Data Retention

We retain your account data for as long as your account is active. After account closure, we retain data for up to 90 days before deletion. Invoice and billing records are retained for 7 years as required by applicable law. You may request deletion of your personal data by contacting us.

5. Cookies

We use essential cookies for authentication and security (these cannot be disabled). We use optional analytics cookies to understand how our services are used. You can manage cookie preferences in your browser settings. For more detail, see our Cookie Policy.

6. Security

We protect your data using industry-standard measures including TLS encryption in transit, hashed passwords (bcrypt), role-based access controls, and regular security audits. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but are committed to protecting your data.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability (receive your data in a structured format)
• Withdraw consent at any time for consent-based processing

To exercise these rights, contact us at privacy@nexahost.com.

8. Children's Privacy

Our Services are not directed to children under 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided data without parental consent, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on our website at least 14 days before taking effect. Continued use of our Services after changes constitutes acceptance.

10. Contact Us

For privacy-related questions or requests, contact our privacy team at privacy@nexahost.com or via our contact page.