Privacy Policy

Red Water Hosting LLC (Delaware, United States) is the controller of the personal data described here. Contact for anything privacy-related: support@redwaterhost.com.

What we collect and why

• Account and billing data: name, email, billing address, and payment references. We need these to create your account, bill you, and meet tax obligations. Card and PayPal details are held by the payment processors, never on our servers.
• Service data: the files, databases, and email you host with us. It is yours. We access it only to provide support you have asked for, to keep backups running, or to protect the platform from abuse.
• Support history: tickets, chat transcripts, and emails, kept so we have context when helping you.
• Server logs: IP addresses and request logs generated by normal operation, kept up to 30 days for security and troubleshooting, then rotated out.
• Website analytics: we use Google Analytics with a consent banner. Analytics cookies are set only if you accept; if you decline, we receive only anonymous, cookieless counts. We do not use advertising or remarketing features.
• Live chat: chat runs on tawk.to and only processes data when you open a chat. The chat page sets its own cookies, described when you use it.
• Unfinished inquiry forms: our migration form asks a few questions across several steps. If you fill in your name and email and then leave without finishing, we receive what you had entered up to that point, so we can follow up rather than lose the inquiry. We use it only to reply to you about that inquiry. Say so when we contact you, or email support@redwaterhost.com, and we will delete it.
• Newsletter: your email address and, if you give it, your first name, when you sign up. It is stored as unconfirmed and we send you nothing until you click the confirmation link. We use it for nothing but the monthly newsletter. Every issue has an unsubscribe link, and when you unsubscribe we stop sending immediately and keep only a record that you opted out, so we do not add you again. Checking the newsletter box on a contact or migration form is a separate choice from the inquiry itself and is never pre-checked.
• WHMCS module license checks: if you run one of our WHMCS modules, it checks its license with our client area. Each check sends the license key, your WHMCS domain, the server's IP address and the WHMCS folder. Firewall Unblocker can also send the server's other address, IPv4 or IPv6, so a server reachable on both is licensed once. We use this to confirm the license is valid and to notice a key used on more installations than it covers. What your clients do in a module, such as their sign-ins, IP addresses, passkeys and audit records, stays in your WHMCS database and is never sent to us.
• Feedback board: if you sign in to feedback.redwaterhost.com to post, comment or vote, we store your name and email address. Your name and what you post or comment are public on the board; your email address is not. We use the address to sign you in and to send the board notifications you have chosen in its settings. The board runs on our own server.

Legal bases (for EEA/UK visitors)

We process account, billing, and service data and module license checks to perform our contract with you; logs and abuse prevention under legitimate interest in running a secure service; analytics cookies, chat, the newsletter and the feedback board only with your consent, which for the newsletter you withdraw by unsubscribing; tax records because the law requires them.

Who receives data

We do not sell personal data. It is shared only with processors needed to run the service:

• Stripe and PayPal for payments
• Google (Analytics), only after you consent
• tawk.to when you start a chat
• A third-party newsletter platform, which stores the newsletter list and sends the issues. Confirmation and unsubscribe pages are served from a redwaterhost.com address.
• Domain registries and registrars when you register a domain (WHOIS/escrow rules of the registry apply)
• Infrastructure providers that host our website and monitoring, under data processing agreements

Where personal data of EEA/UK residents is transferred outside those regions (we are a US company), we rely on the processors' EU-approved safeguards such as standard contractual clauses or Data Privacy Framework certification.

How long we keep it

• Account and billing records: while your account exists, then as long as tax law requires
• Hosted service data: 7-day rolling backups, or the longer period your plan states. Deleted everywhere, backups included, 14 days after cancellation, and immediately where we terminate a service for abuse
• Support history: up to 3 years after the last interaction
• Module license checks: 12 months for each check. The domain, IP address and folder a license is tied to are kept while the license exists, then with your account records
• Newsletter list: until you unsubscribe, after which we keep only the record that you opted out
• Feedback board account: until you delete it in the board's settings or ask us to. Deleting it removes your votes and leaves your posts and comments in place without your name
• Server logs: up to 30 days
• Analytics: per Google Analytics retention settings, aggregate only

Your rights

You can ask for a copy of your personal data, have it corrected or deleted, restrict or object to processing, and take your data elsewhere. For consent-based processing you can withdraw consent at any time (the cookie banner choice can be reset by clearing site data). Write to support@redwaterhost.com and a human handles it. EEA/UK residents can also complain to their local data protection authority.

Security

Access to customer data is restricted to engineers who need it for support, transport is encrypted, and payment data never touches our servers. No system is perfectly secure; if a breach affects your personal data we will notify you as the law requires.

Children

Our services are not directed at children under 16 and we do not knowingly collect their data.

Changes

We will post changes here and, for material changes, email account holders before they take effect.