This policy explains what personal information [Your legal business name] ("ZBSC Hosting") collects, why, and your choices. We don't sell your personal information.
What we collect
- Account details: your name, email address and a securely hashed version of your password (we never store your actual password).
- Orders: the plans or custom builds you buy, billing period, and service status.
- Payment details: handled by Stripe. We never see or store your full card number; we keep a Stripe customer reference to manage your subscription.
- Security data: IP addresses and browser type for sign-ins and failed login attempts, to protect accounts.
- Messages: what you send through our contact form or support channels.
How we use it
To provide and bill for your Services, keep your account secure, send account emails (confirmation, password reset, billing notices), answer support requests, and meet legal obligations. We don't send marketing emails unless you opt in.
Cookies
We use one essential cookie, zbsc_session, to keep you signed in. We don't use advertising or tracking cookies.
Who we share it with
Only the providers needed to run the Services: Cloudflare (website hosting and database), Stripe (payments), Resend (account emails), Discord (our staff receive contact-form messages there) and the server infrastructure that runs your Services. We may also share information if the law requires it.
How long we keep it
Account data is kept while your account is open. Billing records are kept as long as tax law requires. Sign-in sessions expire after at most 30 days, and failed-login records after 1 day.
Your choices and rights
You can see your details in your account and ask us to correct, export or delete them by emailing [email protected]. Depending on where you live (for example under the GDPR or CCPA) you may have additional rights, which we'll honour.
Security
Passwords are hashed with PBKDF2, connections use HTTPS, and only hashed versions of sign-in tokens are stored. No system is perfectly secure, so please use a strong, unique password.
Children
Our Services aren't intended for anyone under 18, and we don't knowingly collect their information.
Changes and contact
We'll post updates here and change the date above. Questions: [email protected].