Privacy Policy
Last updated October 1, 2026 · We never sell your personal data.
We collect only what we need to run your services, we never sell your data, and you can export or delete it at any time from your dashboard.
1. Data we collect
We collect information you provide (name, email, billing address, payment details processed by our payment partners), information generated by your use of our services (logs, usage metrics, support conversations) and limited technical data from your browser or device.
2. How we use your data
- To provide, secure and maintain your services and account.
- To process payments, prevent fraud and comply with legal obligations.
- To provide support and send important service notifications.
- To improve our products using aggregated, de-identified analytics.
- To send marketing emails — only with your consent, and you can opt out anytime.
3. Sharing
We share data only with vetted sub-processors that help us deliver our services (such as payment processors and domain registries), under strict data processing agreements. We disclose information to authorities only when legally required and challenge overbroad requests.
4. Retention
We keep account data for as long as your account is active and for up to 7 years afterwards where required for tax and accounting. Website backups are deleted 14 days after service termination.
5. Security
Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access is restricted by role, protected by hardware security keys and logged. We are audited annually for SOC 2 Type II and ISO 27001.
6. Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. Most requests can be completed instantly from your dashboard; others are answered within 30 days.
7. Cookies
We use strictly necessary cookies to keep you signed in and secure. With your consent, we also use analytics cookies to understand how our site is used. You can change your preferences at any time via the cookie banner or your browser settings.
| Cookie | Purpose | Duration |
|---|---|---|
| bh_session | Keeps you signed in | Session |
| bh_csrf | Protects forms from forgery | Session |
| bh_prefs | Remembers theme & currency | 12 months |
| bh_analytics | Anonymous usage statistics (opt-in) | 13 months |
8. International transfers
Where data is transferred outside your region, we rely on adequacy decisions or Standard Contractual Clauses. Customers can choose EU-only or region-locked data residency for hosted content.
9. Contact our Data Protection Officer
Email privacy@behost.com. You also have the right to lodge a complaint with your local supervisory authority.
