Privacy Policy

Red Water Hosting LLC (Delaware, United States) is the controller of the personal data described here. Contact for anything privacy-related: [email protected].

What we collect and why

• Account and billing data: name, email, billing address, and payment references. We need these to create your account, bill you, and meet tax obligations. Card and PayPal details are held by the payment processors, never on our servers.
• Service data: the files, databases, and email you host with us. It is yours. We access it only to provide support you have asked for, to keep backups running, or to protect the platform from abuse.
• Support history: tickets, chat transcripts, and emails, kept so we have context when helping you.
• Server logs: IP addresses and request logs generated by normal operation, kept up to 30 days for security and troubleshooting, then rotated out.
• Website analytics: we use Google Analytics with a consent banner. Analytics cookies are set only if you accept; if you decline, we receive only anonymous, cookieless counts. We do not use advertising or remarketing features.
• Live chat: chat runs on tawk.to and only processes data when you open a chat. The chat page sets its own cookies, described when you use it.

Legal bases (for EEA/UK visitors)

We process account, billing, and service data to perform our contract with you; logs and abuse prevention under legitimate interest in running a secure service; analytics cookies and chat only with your consent; tax records because the law requires them.

Who receives data

We do not sell personal data. It is shared only with processors needed to run the service:

• Stripe and PayPal for payments
• Google (Analytics), only after you consent
• tawk.to when you start a chat
• Domain registries and registrars when you register a domain (WHOIS/escrow rules of the registry apply)
• Infrastructure providers that host our website and monitoring, under data processing agreements

Where personal data of EEA/UK residents is transferred outside those regions (we are a US company), we rely on the processors' EU-approved safeguards such as standard contractual clauses or Data Privacy Framework certification.

How long we keep it

• Account and billing records: while your account exists, then as long as tax law requires
• Hosted service data: 7-day rolling backups; deleted 14 days after cancellation
• Support history: up to 3 years after the last interaction
• Server logs: up to 30 days
• Analytics: per Google Analytics retention settings, aggregate only

Your rights

You can ask for a copy of your personal data, have it corrected or deleted, restrict or object to processing, and take your data elsewhere. For consent-based processing you can withdraw consent at any time (the cookie banner choice can be reset by clearing site data). Write to [email protected] and a human handles it. EEA/UK residents can also complain to their local data protection authority.

Security

Access to customer data is restricted to engineers who need it for support, transport is encrypted, and payment data never touches our servers. No system is perfectly secure; if a breach affects your personal data we will notify you as the law requires.

Children

Our services are not directed at children under 16 and we do not knowingly collect their data.

Changes

We will post changes here and, for material changes, email account holders before they take effect.