Last updated: July 22, 2026
1. Introduction
EpicHostly (“we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our website, web hosting services, APIs, and administrative control panels.
2. Information We Collect
We only collect information necessary to provide and secure our services. Specifically, we collect:
- Account Information: Your first and last name, email address, password (stored securely as a cryptographic hash), and optional two-factor authentication (2FA) secrets. We also collect Google OAuth identifiers if you choose to "Sign in with Google."
- Billing & Profile Information: Phone number, company name, and your physical address (lines 1 & 2, city, state, postcode, and country) for invoicing and legal compliance.
- Technical Data: IP addresses and browser User Agents. These are logged systematically during logins, active session tracking, order placements, and interactions that trigger audit logs to ensure account security.
- Hosting Platform Data: Metrics related to your hosting service provisioning (e.g., via aaPanel or WHM/cPanel), including resource usage, bandwidth consumption, active accounts, and service statuses.
- Communication Data: Content from support tickets, contact forms, and communication via our designated WhatsApp integration.
3. How Information Is Collected
We collect information through the following methods:
- Directly from you: When you register an account, fill out your billing profile, submit support tickets, or use our contact forms.
- Automatically: Through system audit logs (`activity_logs`), session tracking, login attempts (used for brute-force protection), and infrastructure monitoring (recording disk/bandwidth usage).
- From Third-Party Partners: Specifically from Google (if you use OAuth for authentication) and from our payment gateways (Razorpay and Cashfree) when processing transactions.
4. Why We Collect Information
The information we collect is strictly used to:
- Provision, manage, and support your hosting services.
- Process orders, handle billing cycles, and maintain accurate financial invoices.
- Secure your account against unauthorized access, brute-force attacks, and credential stuffing.
- Provide prompt customer support and resolve technical issues.
5. Cookies and Tracking Technologies
We respect your privacy and do not use any third-party marketing or analytics cookies (such as Google Analytics or Facebook Pixel). We only use strictly necessary cookies:
- Session Cookies: Used to maintain your active login session (e.g.,
PHPSESSID). - Remember Me Cookies: A secure token used only if you select the "Remember Me" option during login.
- Security Cookies: Functional cookies deployed by Cloudflare Turnstile to prevent bot traffic and abuse.
6. Third-Party Services
To provide our services, we integrate with select third-party providers. Information is shared only to the extent necessary to perform these functions:
- Authentication: Google OAuth (for simplified login).
- Payment Processors: Razorpay and Cashfree. We do not store raw credit card numbers; all payment processing is handled securely by these gateways.
- Security: Cloudflare Turnstile is utilized across our forms (login, registration, contact) to mitigate bot abuse.
7. Security, Abuse, and Fraud Prevention
As a hosting provider, maintaining the integrity of our infrastructure is critical. We deploy custom security measures including rate limiting and a Fraud Queue for risk-scoring orders.
Hosting Specifics: We actively monitor server resources and maintain system logs. In the event of an abuse complaint, DMCA takedown request, or suspected fraudulent activity, we may investigate your account data, service configurations, and activity logs to determine compliance with our Terms of Use and applicable laws.
8. Data Retention and Your Rights
We retain your data as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements. Depending on your jurisdiction (such as under the GDPR or CCPA), you have the right to access, update, export, or delete your personal information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at support@epichostly.in, via our Support Center, or reach out to us directly through WhatsApp.