Privacy policy
Last updated: 20 April 2026
This policy explains how villagehosting.in collects, uses and protects your information. We try to collect as little as possible, tell you about it plainly, and never sell it.
What we collect
- Account data: name, email, phone, billing address, GST number (if provided).
- Billing data: payment method metadata (we do not store full card numbers; those are held by Razorpay and PayPal).
- Service data: logs of your server usage (CPU/RAM/bandwidth), IP addresses from control panel logins, support tickets.
- Site content: whatever you put on our servers. We don't scan or analyze it.
Why we collect it
- To provide the service you pay for.
- To send transactional emails (invoices, incident reports, renewal reminders).
- To comply with legal obligations (e.g. GST filings, lawful requests).
- To improve our service (aggregate usage patterns, no personal data).
We never sell your personal data or use it for behavioural advertising.
Cookies
We use strictly necessary cookies for authentication and CSRF protection. We use privacy-respecting analytics (Plausible / self-hosted) that does not set third-party cookies or fingerprint users.
Where we store it
- Primary data: servers we operate in India.
- Backups: encrypted off-site in India.
- Email delivery: via Postmark (USA) — transactional email only, no marketing lists.
- Payments: Razorpay (India) and PayPal (USA) handle card data under PCI-DSS.
How long we keep it
- Active account data: as long as you're a customer, plus 3 years for tax/legal reasons.
- Support tickets: 3 years.
- Access logs: 90 days.
- Backups: per your plan (7/30/60/90 days).
Your rights
You can:
- Access and export all personal data we hold about you.
- Correct or update your information.
- Delete your account and all data (after any legal retention period).
- Object to specific processing.
Email privacy@villagehosting.in for any of the above.
Security
We encrypt data in transit (TLS 1.3) and at rest. Employee access to customer data is role-based, logged, and only happens with your consent (e.g. when you open a support ticket).
Lawful requests
If we receive a lawful request for your data (Indian law enforcement, court order), we will:
- Verify the request is valid under Indian law.
- Notify you unless legally prohibited.
- Push back on overbroad requests.
Breach notification
If we ever suffer a data breach affecting your personal data, we will notify you within 72 hours with full details and remediation steps.
Contact
Privacy questions: privacy@villagehosting.in.