Privacy Policy

1. Who We Are

OffloadHost, Inc. is a Delaware corporation that provides web hosting, domain registration, email, and related services. For the purposes of data-protection laws (including the EU General Data Protection Regulation, or "GDPR"), OffloadHost is the controller of personal information you provide directly to us.

Our mailing address is:

OffloadHost, Inc.
2810 N Church St PMB 890397
Wilmington, Delaware 19802-4447
United States

2. Information We Collect

2.1 Information you provide directly

• Account information: name, email address, password (stored as a one-way hash), billing address, phone number, and any profile details you choose to add.
• Payment information: card number, expiration date, CVC, and billing address. Payment details are collected and processed by our payment processor (Stripe) and are not stored on our servers. We retain limited information such as the last four digits of the card and brand for your records.
• Domain registration data: name, organization, address, phone, and email required to register a domain name. This data may be submitted to the relevant domain registry and displayed in WHOIS records as required by ICANN and the registry, unless privacy protection is enabled.
• Communications: the content of support requests, emails, and any other messages you send to us.

2.2 Information collected automatically

• Usage and log data: IP address, browser type and version, operating system, referring URL, pages visited, actions taken, request timestamps, and error codes.
• Server logs: records of requests made to hosted websites and our dashboard, including IP addresses, HTTP method, URL, response code, and user agent.
• Cookies and similar technologies: see our Cookie Policy for details.

2.3 Customer content

Websites, files, databases, emails, and other content that you upload, create, or store through the Services is considered "Customer Content." We do not access Customer Content except as necessary to provide the Services, respond to a support request, comply with law, or enforce our Terms of Service.

3. How We Use Information

We use personal information to:

• Provide, operate, maintain, and improve the Services;
• Create and manage your account;
• Process payments, renewals, and refunds;
• Provision and manage domain registrations and DNS records;
• Communicate with you about your account, service notices, security alerts, and support requests;
• Send marketing messages about OffloadHost products and offers, where permitted (you can unsubscribe at any time);
• Detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms;
• Comply with legal obligations, court orders, and lawful requests from public authorities; and
• Enforce our agreements and protect the rights, property, and safety of OffloadHost, our users, and the public.

4. Legal Bases for Processing (EU/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases under the GDPR:

• Contract: to provide the Services you have requested and fulfill our obligations to you;
• Legitimate interests: to secure, improve, and market our Services in ways that do not override your fundamental rights;
• Legal obligation: to comply with applicable laws; and
• Consent: where you have given consent (for example, certain marketing communications), which you can withdraw at any time.

5. How We Share Information

We share personal information only as described below:

• Service providers and sub-processors who help us operate the Services. See Section 6 for a list.
• Domain registries and registrars when you register, renew, or transfer a domain, as required by ICANN and the applicable registry.
• Legal requirements when we believe in good faith that disclosure is required by law, legal process, or to protect the rights, property, or safety of OffloadHost, our users, or others.
• Business transfers: in connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, personal information may be transferred as part of that transaction, subject to customary confidentiality protections.
• With your consent or at your direction.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

6. Third-Party Processors

The following third parties process personal information on our behalf to deliver the Services. Each operates under a contract that restricts their use of the information to purposes we specify:

We review our sub-processors periodically and may add or replace them as our infrastructure evolves. Material changes will be reflected in updates to this Privacy Policy.

Optional marketing integrations. Merchants may, at their option, connect their accounts on third-party social platforms — including TikTok, Instagram, X (Twitter), Facebook, and Pinterest — to publish content from their OffloadHost dashboard. These connections are established per merchant via the platform's official OAuth flow only when the merchant explicitly clicks "Connect" in their Marketing tab. For each provider we receive and store only the data the merchant authorizes through that flow. For TikTok specifically (Login Kit, scope user.info.basic), we receive the merchant's open_id and display_name, plus an encrypted access and refresh token that we use to display the connected handle and to publish content the merchant explicitly initiates. We do not read TikTok content outside of what the merchant authorizes. A merchant may disconnect at any time from the Marketing tab; disconnecting revokes the token and removes it from our database.

7. Data Retention

We retain personal information for as long as your account is active and for a reasonable period afterward to meet legal, tax, accounting, dispute-resolution, and fraud-prevention requirements. Specifically:

• Account information is retained for the life of the account plus up to seven (7) years after closure for legal and tax purposes;
• Billing records are retained for at least seven (7) years to meet accounting and tax obligations;
• Server and application logs are typically retained for up to ninety (90) days, or longer when required for security investigations;
• Customer Content is retained for the duration of your subscription and may be permanently deleted within a reasonable period after cancellation unless a longer period is required by law.

8. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), encryption at rest where applicable, access controls, monitoring, and regular backups. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for using strong, unique passwords.

9. International Data Transfers

OffloadHost is headquartered in the United States, and our service providers are located in several countries. If you access the Services from outside the United States, your information may be transferred to and processed in countries that may not provide the same level of data protection as your home country. Where required by law, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, to protect such transfers.

10. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you;
• Correction — ask us to correct inaccurate or incomplete information;
• Deletion — ask us to delete your personal information, subject to legal exceptions;
• Portability — request a copy of certain information in a structured, machine-readable format;
• Restriction and objection — ask us to limit or stop certain processing;
• Withdrawal of consent — where processing is based on consent; and
• Complaint — lodge a complaint with your local data-protection authority.

To exercise any of these rights, please contact us at [email protected]. We will respond within the time period required by applicable law.

11. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA") provide you with additional rights, including the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of any "sale" or "sharing" of your information. We do not sell or share personal information as those terms are defined under California law.

To exercise your California rights, email [email protected]. We will not discriminate against you for exercising any of these rights.

12. Children's Privacy

The Services are not directed to children under the age of 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us at [email protected] and we will take appropriate steps to delete it.

13. Cookies and Tracking

We use cookies and similar technologies to operate and improve the Services. For details about the cookies we use and how to manage them, see our Cookie Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services at least thirty (30) days before the changes take effect, unless an earlier effective date is required by law. The "Last updated" date at the top of this page indicates when the Policy was last revised. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your personal information, please contact:

OffloadHost, Inc. — Privacy
2810 N Church St PMB 890397
Wilmington, Delaware 19802-4447
United States
Email: [email protected]