Roles
For account, billing, support, security, and business records, Hostavvy generally acts as a data controller. For content you host, upload, or process through your services, you are generally the controller and we act as a processor or service provider according to your instructions and the service agreement.
Legal Bases
We process personal data to perform contracts, provide services, manage billing, comply with legal obligations, protect security, prevent abuse, respond to requests, and pursue legitimate business interests that do not override applicable privacy rights.
Customer Requests
Depending on your location and applicable law, you may request access, correction, deletion, restriction, portability, or objection. We may need to verify identity, preserve required records, or decline requests that conflict with legal, security, billing, or abuse-prevention requirements.
Hosted Content
If you receive a privacy request related to data hosted inside your account, you are responsible for responding to that request unless a signed data processing agreement assigns a different responsibility. We can assist with reasonable technical steps when available.
Subprocessors
We may use subprocessors for infrastructure, domain registration, payments, fraud prevention, email delivery, backups, analytics, monitoring, and support. Each subprocessor is expected to protect data according to the role and service they provide.
Transfers and Retention
Data may be processed in countries where we or our providers operate. We retain data only as needed for service delivery, backups, legal compliance, accounting, tax, dispute resolution, security, fraud prevention, and legitimate business needs.