Privacy Policy

1. Introduction

This Privacy Policy describes how ByteHost and its affiliates (collectively "ByteHost", "we", "our", "us") collect, use, share, protect or otherwise process your information/personal data through our website https://bytehost.org (hereinafter referred to as "Platform"). Please note that you may be able to browse certain sections of the Platform without registering with us.

We do not offer any product/service under this Platform outside India and your personal data will primarily be stored and processed in India. By visiting this Platform, providing your information or availing any product/service offered on the Platform, you expressly agree to be bound by the terms and conditions of this Privacy Policy, the Terms of Use and the applicable service/product terms and conditions, and agree to be governed by the laws of India including but not limited to the laws applicable to data protection and privacy. If you do not agree, please do not use or access our Platform.

We comply with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA) of India.

2. Information We Collect

We collect your personal data when you use our Platform, services or otherwise interact with us during the course of our relationship and related information provided from time to time. Some of the information that we may collect includes but is not limited to:

• Personal Information: Name, date of birth, address, telephone/mobile number, email ID and/or any such information shared as proof of identity or address
• Payment Information: Processed by our payment gateway; we do not store card numbers, CVV, UPI PIN, or banking credentials. Some sensitive personal data may be collected with your consent, such as your bank account or credit or debit card or other payment instrument information
• Technical Information: IP addresses, browser type, OS, device info, referral URLs, pages visited
• Hosting Data: Websites, files, databases, emails stored on our platform
• Communication Data: Emails and support requests you send us
• Behavioural Data: We may track your behaviour, preferences, and other information that you choose to provide on our Platform. This information is compiled and analysed on an aggregated basis

You always have the option to not provide information, by choosing not to use a particular service or feature on the Platform.

Important: If you receive an email or a call from a person/association claiming to be ByteHost seeking any personal data like debit/credit card PIN, net-banking or mobile banking password, we request you to never provide such information. If you have already revealed such information, report it immediately to an appropriate law enforcement agency.

3. How We Use Your Information

We use personal data to provide the services you request. To the extent we use your personal data to market to you, we will provide you the ability to opt-out of such uses. We use your personal data to:

• Provision and maintain your hosting account
• Process payments and send confirmations
• Send account credentials
• Enhance customer experience
• Resolve disputes and troubleshoot problems
• Inform you about online and offline offers, products, services, and updates
• Customise your experience
• Detect and protect us against error, fraud and other criminal activity
• Enforce our terms and conditions
• Conduct marketing research, analysis and surveys
• Respond to support requests
• Comply with legal obligations

You understand that your access to these products/services may be affected in the event permission is not provided to us.

4. Legal Basis for Processing

We process data based on: (a) your consent; (b) contractual necessity; (c) legitimate interests; and (d) legal compliance under Indian law.

5. Payment Processing

Payments are processed through PCI-DSS compliant gateway partner(s) with SSL/TLS encryption. We never store full card details or UPI credentials.

6. Data Security

We implement industry-standard security:

• SSL/TLS encryption for data in transit
• Firewall protection (UFW + Cloud Firewall)
• SSH key-based auth on non-standard ports
• Fail2Ban intrusion prevention
• ClamAV antivirus scanning
• Regular security updates
• Encrypted cloud backups

No transmission method is 100% secure; we cannot guarantee absolute security.

7. Data Sharing and Disclosure

We may share your personal data internally within our group entities, our other corporate entities, and affiliates to provide you access to the services and products offered by them. These entities and affiliates may market to you as a result of such sharing unless you explicitly opt-out.

We may disclose personal data to third parties such as:

• Payment processors (including PhonePe, Razorpay) for secure payments
• DigitalOcean (infrastructure) for service delivery
• Mailgun for transactional emails
• Third-party service providers including logistics partners, prepaid payment instrument issuers
• Government agencies or authorised law enforcement agencies if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal process

We may disclose personal data to law enforcement offices, third party rights owners, or others in the good faith belief that such disclosure is reasonably necessary to: enforce our Terms of Use or Privacy Policy; respond to claims that content violates the rights of a third party; or protect the rights, property or personal safety of our users or the general public.

8. Cookies and Tracking

We use essential cookies for authentication and security only. No third-party tracking or advertising cookies.

9. Data Deletion and Retention

You have an option to delete your account by contacting our support team. This action would result in you losing all information related to your account. We may, in the event of any pending grievance, claims, pending shipments or any other services, refuse or delay deletion of the account.

We retain your personal data information for a period no longer than is required for the purpose for which it was collected or as required under any applicable law. However, we may retain data related to you if we believe it may be necessary to prevent fraud or future abuse or for other legitimate purposes. We may continue to retain your data in anonymised form for analytical and research purposes.

Upon account termination:

• Hosting data deleted within 30 days
• Account info retained up to 90 days for disputes
• Payment records retained per Indian tax laws
• Backups may exist up to 60 days due to rotation

10. Your Rights

You may access, rectify, and update your personal data directly through the functionalities provided on the Platform.

• Access: Request a copy of your data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion (subject to legal requirements)
• Withdrawal of Consent: Withdraw consent at any time
• Grievance Redressal: Lodge a complaint

Contact support@mail.bytehost.org. We respond within 30 days.

11. Children's Privacy

Our services are not for individuals under 18. We do not knowingly collect data from children.

12. Data Transfer

Data is stored in India (DigitalOcean Bangalore). Third-party services may process data outside India with adequate safeguards.

13. Consent

By visiting our Platform or by providing your information, you consent to the collection, use, storage, disclosure and otherwise processing of your information on the Platform in accordance with this Privacy Policy. If you disclose to us any personal data relating to other people, you represent that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy.

You, while providing your personal data over the Platform or any partner platforms or establishments, consent to us (including our other corporate entities, affiliates, lending partners, technology partners, marketing channels, business partners and other third parties) to contact you through SMS, instant messaging apps, call and/or e-mail for the purposes specified in this Privacy Policy.

You have an option to withdraw your consent that you have already provided by writing to the Grievance Officer at the contact information provided below. Please mention "Withdrawal of consent for processing personal data" in your subject line of your communication. However, please note that your withdrawal of consent will not be retrospective and will be in accordance with the Terms of Use, this Privacy Policy, and applicable laws. In the event you withdraw consent given to us under this Privacy Policy, we reserve the right to restrict or deny the provision of our services for which we consider such information to be necessary.

14. Changes to This Policy

Please check our Privacy Policy periodically for changes. We may update this Privacy Policy to reflect changes to our information practices. We may alert/notify you about the significant changes to the Privacy Policy, in the manner as may be required under applicable laws.

15. Grievance Officer

Per the Information Technology Act, 2000:

16. Contact Us

For privacy questions or data requests: