Privacy Policy

This Privacy Policy explains what information RoboHost ("we", "us") collects when you use our website and Services, why we collect it, who we share it with, and the choices and rights you have. By using the Services you acknowledge the practices described here.

1. Information We Collect

Information you provide:

• Account data — name, email address, password (stored only as a bcrypt hash), company, phone number
• Billing data — billing address, payment method details (processed by our payment processors; we store only tokenized references and the last four digits where applicable), and transaction history
• Domain registration data — WHOIS contact details required by registries: name, organization, postal address, phone, and email. This is required by ICANN/registry rules and may be publicly visible depending on the TLD unless privacy protection is enabled
• Content you host — files, images, databases, and configurations you upload to the Services
• Communications — support tickets, emails, chat transcripts, and feedback you send us

Information collected automatically:

• Log data — IP address, browser type, device, pages visited, referring URLs, timestamps
• Usage data — features used, optimization runs, API calls, error reports, and performance metrics
• Cookies — session/authentication cookies (essential), preference cookies, and optional analytics cookies; see Section 6

Information from third parties: identity verification data from registry/provider partners (e.g., ResellerClub) where required to provision domains or hosting, and payment status from payment processors.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Services — including creating and serving optimized copies of your websites
• Process registrations, orders, payments, and renewals, and issue invoices
• Provision third-party products (domains, SSL, email) on your behalf
• Communicate with you about your account, service announcements, security alerts, and (with consent) marketing
• Monitor and improve performance, reliability, and security of the platform, including abuse prevention
• Comply with legal obligations (tax, registry, law-enforcement, and court orders)

Where the GDPR or similar law applies, our legal bases are: performance of our contract with you, legitimate interests (security, improvement, abuse prevention), compliance with legal obligations, and your consent (marketing, optional cookies).

3. Your Hosted Content and Visitor Data

Files you upload and data about your end-users/visitors processed by hosted sites belong to you. You act as the data controller for your sites' visitors; we act as processor or service provider, processing such data only to host, optimize, secure, and transmit it per your configuration, and not for our own purposes.

4. How We Share Information

We do not sell personal data. We share it only with:

• Service providers / processors — hosting infrastructure, payment processors, email delivery, analytics, and support tooling, bound by confidentiality and data-processing terms
• Domain registries and wholesalers — ResellerClub/LogicBoxes and TLD registries receive the registration data necessary to provision domains, SSL, and related products; WHOIS publication is governed by registry/ICANN policy
• Legal and safety — where required by law, court order, or to protect rights, property, security, or to investigate fraud or AUP violations
• Business transfers — in a merger, acquisition, or asset sale, with notice where required

5. Data Storage, Security, and International Transfers

We apply administrative, technical, and physical safeguards appropriate to the data: TLS encryption in transit, encryption at rest for sensitive stores, hashed credentials, least-privilege access, audit logging, and segregated backups. No system is perfectly secure; if a breach affects your data we will notify you and regulators as required by law.

Your information may be processed in countries other than your own where our servers or providers operate. Where required, transfers rely on appropriate safeguards (such as contractual clauses) recognized under applicable law.

6. Cookies and Tracking

We use: (a) essential cookies for login sessions and CSRF protection — required for the service to function; (b) preference cookies to remember settings; and (c) optional analytics to understand usage. You can disable non-essential cookies in your browser, though essential-cookie blocking will prevent sign-in. We do not use advertising trackers.

7. Data Retention

We keep personal data while your account is active and as needed to provide Services. After cancellation: hosted content is retained 30 days for export then deleted; backups roll off on our normal rotation schedule; billing/transaction records are retained for the period required by tax and accounting law (typically 7 years); domain registration records are retained as required by registry policy. Log data is typically retained 90 days.

8. Your Rights and Choices

Depending on your jurisdiction (including GDPR and CCPA/CPRA), you may have rights to:

• Access, correct, or receive a portable copy of your personal data
• Delete your account and personal data (subject to legal retention)
• Object to or restrict certain processing, and withdraw consent
• Opt out of marketing emails (unsubscribe link or account settings)
• Lodge a complaint with your local supervisory authority

Exercise rights via your dashboard or by emailing privacy@robohost.ai. We may verify identity before acting and will respond within the legally required period. We do not discriminate for exercising privacy rights.

9. Children's Privacy

The Services are not directed to children under 16 (or the age of consent in your jurisdiction) and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

10. Third-Party Sites and Do Not Track

Our Services may link to third-party sites we don't control; their privacy practices are governed by their own policies. We currently respond to browser privacy settings but do not honor "Do Not Track" signals in a uniform way, as no industry standard exists.

11. Changes to This Policy

We may update this policy and will post the revised date here. Material changes are announced by email or prominent notice at least 14 days before they take effect.

12. Contact

Privacy questions or requests: privacy@robohost.ai. Security issues: security@robohost.ai.