Privacy Policy

We collect information you provide directly and information generated automatically when you use the Services:

• Account & billing data — name, email address, company name, billing address, and payment details processed through our payment providers.
• Identity verification data — where required by our merchant gateway providers, copies of personally identifying documents used solely to approve and process payments.
• Support communications — the contents of tickets, emails, and other messages you send us.
• Technical & usage data — IP addresses, browser and device information, request logs, and diagnostic data generated by your use of the website and servers.
• Cookies — small files used to keep you signed in and to understand aggregate website usage (see “Cookies & Analytics” below).

The content you store on your VPS or dedicated server is your data; we do not access it except as necessary to operate the Services, respond to a support request, or comply with law.

We use personal information to: create and administer your account; provision, maintain, and secure the Services; process payments and prevent fraud; provide technical support; send service, security, and billing notices; enforce our Terms of Service and Acceptable Use Policy; and meet legal and regulatory obligations. We may send occasional product updates or offers, from which you can opt out at any time.

Payments are handled by third-party payment processors and merchant gateways. To comply with their policies, we may request copies of identifying documents in order to approve and process credit card payments. Any such information is transmitted over encrypted channels only and stored according to industry compliance standards, retained no longer than necessary for verification and fraud-prevention purposes.

We use strictly necessary cookies to operate core website functions such as authentication, and we may use privacy-respecting analytics to understand aggregate traffic and improve the Services. You can control or block cookies through your browser settings; disabling strictly necessary cookies may affect functionality.

We share personal information only as needed to run the business and never in exchange for money. Categories of recipients include:

• Service providers — payment processors, data-center and network partners, email and support tooling, all bound to protect the information and use it only to provide services to us.
• Legal & safety — law enforcement or other parties where required by valid legal process, or where necessary to investigate abuse, protect our rights, or protect the safety of others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We retain account and billing records for as long as your account is active and thereafter as required for legal, tax, and audit purposes. Following cancellation, customer data and backups remaining after the cancellation date are destroyed in accordance with our Terms of Service; selecting immediate cancellation results in termination of customer data within 24 hours.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, or misuse, including encryption in transit, access controls, and a fully redundant, monitored network backbone. No method of transmission or storage is completely secure, and you are responsible for maintaining the security of your own credentials and the data hosted on your server.

We operate data centers in North America and Europe. Depending on the location you select, your information may be processed in Canada, the United States, or the European Union. Where you choose an EU facility (Dublin or Amsterdam), data you host there remains in that region unless you move it. We take steps to ensure appropriate protections apply to cross-border transfers of personal information.

Subject to applicable law, you may request access to, correction of, or deletion of the personal information we hold about you, object to or restrict certain processing, and withdraw consent where processing is based on consent. Residents of the EU/UK (GDPR) and applicable Canadian and U.S. jurisdictions may have additional rights. To exercise any right, contact us using the details below; we will respond within the timeframes required by law.

The Services are intended for businesses and adults. We do not knowingly collect personal information from children under the age of majority. If you believe a child has provided us personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date, and your continued use of the Services after a change constitutes acceptance of the revised Policy.

Questions about this Privacy Policy or your personal information can be sent to [email protected]. This Policy is governed by the laws of the Province of Ontario, consistent with our Terms of Service.