Privacy Policy
Last updated DATE
This policy explains what we collect, why, and what we do with it. We've tried to write it in plain language rather than the usual wall of defensive text.
The short version: we collect what we need to bill you and host your site, we don't sell anything to anybody, and we never see your card number.
Who we are
hostpota.to is operated by Done Consulting LLC, BUSINESS ADDRESS. We are the data controller for the information described here.
Contact: hello@hostpota.to
What we collect
- Account details — your name, email address, business name, and any domain names we manage for you.
- Billing details — handled by Stripe. We see your name, email, billing address, the last four digits of your card, and your payment history. We never receive or store your full card number.
- Support correspondence — emails you send us, kept so we have the history of your account.
- Server logs — standard web server logs for the sites we host, including visitor IP addresses, timestamps, and requested URLs. These are used for troubleshooting and security.
- Credentials you give us — logins you share so we can migrate or fix your site. See "Credentials" below.
We do not use analytics or advertising trackers on hostpota.to, and we set no cookies on this website.
Why we collect it
- To provide the hosting you're paying for
- To take payment and send receipts
- To contact you about your service — outages, renewals, changes to these terms
- To investigate problems, abuse, and security incidents
- To meet our legal and tax obligations
We do not send marketing email unless you ask for it, and we never sell or rent your information to anyone.
Who we share it with
Only the companies we need to run the service:
- Stripe — payment processing and billing
- Hosting infrastructure providers — the companies whose servers your site runs on
- Domain registrars and certificate authorities — where needed to register domains or issue SSL certificates
- Our accountant — for tax and bookkeeping
We may also disclose information where the law requires it, or to protect our rights, our systems, or someone's safety.
Credentials
To move or fix your site we sometimes need logins to your existing hosting, registrar, or CMS. When that happens:
- We use them only for the work you asked us to do
- We ask you to change the password or revoke our access once the work is finished
- We'd rather you create us a separate account than share your own, wherever that's possible
Your website's visitors
If your site collects personal information from its visitors — a contact form, a shop, a newsletter — you are the controller of that data, not us. You are responsible for your own privacy notice and for complying with the law that applies to your visitors. We process that data only as part of hosting your site.
How long we keep it
- Account and billing records — for as long as you're a customer, then up to seven years, because tax law requires it
- Server logs — typically 30 days
- Backups — within the retention window of the backup system, usually 30 days
- Support email — for as long as it's useful for supporting you
When you leave, we'll give you a copy of your site and then remove it from our systems, other than what's held in backups until those expire.
Security
We use encrypted connections, keep software patched, and limit access to your data to the people who need it. No system is perfectly secure, but if there's ever a breach affecting your information, we'll tell you promptly and honestly about what happened.
Your rights
You can ask us to:
- Tell you what information we hold about you
- Correct anything that's wrong
- Delete your information, where we're not required to keep it
- Send you a copy of your data in a portable format
Email hello@hostpota.to and we'll respond within 30 days. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA — we'll honour those regardless of where you're based.
Children
Our service isn't directed at children under 13, and we don't knowingly collect their information.
Changes to this policy
If we change this policy in a way that materially affects you, we'll email you. The date at the top always reflects the current version.