Privacy Policy

1. Data controller

ByteHosty LLC, 30 North Gould Street, Suite 100, Sheridan, WY 82801, United States, is the controller for personal data processed in connection with our website and services. Contact for all privacy matters: [email protected].

2. Categories of data we collect

• Account data — name, email address, billing address, phone number, and password hash, collected when you register.
• Billing data — invoice history, transaction identifiers, payment status, and limited payment metadata from Stripe where card payments are available or from our cryptocurrency processor. Card details submitted through Stripe are collected securely by Stripe and are not stored on ByteHosty systems.
• Service data — server hostnames, assigned IP addresses, resource usage metrics, and control panel activity required to operate your services.
• Support data — the content of tickets and emails you send us.
• Technical data — IP address, browser type, and access timestamps recorded in web server and security logs.

3. Purposes and legal bases

• Contract performance (Art. 6(1)(b) GDPR) — account management, provisioning, billing, and support.
• Legitimate interests (Art. 6(1)(f)) — fraud prevention, network security, abuse handling, and service improvement.
• Legal obligation (Art. 6(1)(c)) — tax and accounting record retention, responses to lawful requests from authorities.
• Consent (Art. 6(1)(a)) — optional marketing communications and non-essential cookies, where used. Consent can be withdrawn at any time.

4. Customer content on your servers

Data that you or your end users store on your virtual server is under your control. With respect to such content, you act as controller and ByteHosty acts as a hosting provider. We do not access the contents of your server except where strictly necessary for support at your request, for security incident response, or where required by law.

5. Recipients and processors

We share personal data only with service providers necessary to deliver our services, including Stripe and cryptocurrency payment processors for transaction handling, data center and network providers for infrastructure, and email delivery services for transactional mail. We do not sell personal data to third parties.

6. International transfers

Where personal data is transferred outside the European Economic Area, we rely on adequacy decisions or EU Standard Contractual Clauses together with supplementary measures as appropriate.

7. Retention periods

• Account and contract data — for the life of the account plus statutory retention periods (typically up to 10 years for invoicing records).
• Web server and security logs — up to 90 days, unless needed longer for an ongoing investigation.
• Support tickets — for the life of the account, to maintain support history.
• Data on terminated servers — deleted or made unrecoverable following termination in line with Section 5 of the Terms of Service.

8. Your rights

Subject to applicable law, you have the right to access, rectify, and erase your personal data, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting prior processing. To exercise any right, contact [email protected]. We respond within one month. You also have the right to lodge a complaint with your local supervisory authority.

9. Security

We apply technical and organizational measures appropriate to the risk, including encrypted transport (TLS), hashed credential storage, network segmentation, access controls on administrative systems, and logging of privileged operations. No system is perfectly secure; please use strong, unique passwords and enable two-factor authentication in the client area.

10. Cookies

Our website uses strictly necessary cookies and local storage for session handling, authentication, security, and remembering privacy choices. These functions do not require consent. Where privacy-focused analytics is enabled, analytics storage remains disabled until you actively allow it through the consent notice. We do not send account details, invoice content, or email addresses to analytics providers. You can withdraw consent by clearing the saved site preference in your browser.

11. Changes to this policy

We will post any changes to this Privacy Policy on this page and update the "Last updated" date. Material changes will be communicated by email or client area notice.