Privacy Policy
Last updated: September 2026
1. Information We Collect
When registering for an account on Hostiom, we collect essential account information such as your name, email address, password hash (encrypted using bcrypt with salt rounds), and optional company name. When purchasing services, billing records, transaction identifiers, and target domain names are recorded in our secure database.
2. Data Security & Storage
Hostiom enforces enterprise-level security standards. All API tokens and integration credentials are dynamically isolated in encrypted environment variables and are never stored in plaintext database tables or exposed in public code. Communication with our VPS cluster nodes and customer sessions is protected by TLS 1.3 encryption.
3. Third-Party Registrars & Gateways
To fulfill domain name registrations and process payment settlements, necessary registration attributes and payment tokens are processed via compliant partners (such as ICANN accredited registrars and PCI-DSS Level 1 payment processors). We never store raw credit card numbers on our infrastructure.
4. Your Data Rights
Under GDPR, CCPA, and international data privacy regulations, you retain the right to inspect, correct, export, or request the deletion of your account and personal profile data. You can exercise these rights at any time by opening a data privacy ticket in your Client Portal or emailing privacy@hostiom.com.
5. Cookies & Tracking Technologies
Hostiom uses cookies and local storage tokens to deliver secure, functional hosting services. The specific cookies we deploy include:
- hostiom_session (Essential): Encrypted HTTP-only authentication cookie required to maintain your login session. Expires after 7 days.
- cookie-consent (Functional): Stores your cookie banner acceptance preference in local storage.
- hostiom_ref (Affiliate / Attribution): Functional attribution cookie used solely to attribute referral credits if you arrived via an affiliate partner link.
- Stripe Payment Cookies (__stripe_mid, __stripe_sid): Deployed strictly during checkout for transaction fraud prevention and PCI-DSS compliant payment processing.
You may adjust or reject non-essential cookies via our Cookie Consent banner or through your browser settings. Note that disabling essential session cookies will prevent login and checkout features from operating.
6. Data Retention & Erasure
Active hosting server logs and customer records are retained for the duration of your active subscription plus any legally mandated tax and audit retention periods (typically up to 7 years for financial billing records). Server backup snapshots are automatically purged according to your plan's backup retention cycle upon cancellation or termination.