UnderHost - Privacy Policy | Secure Offshore Hosting Solutions

Our Commitment to Privacy

This Privacy Policy outlines how we collect, use, disclose, and protect your personal data when you use UnderHost services. It also explains your rights regarding your data under GDPR, PIPEDA, and other applicable regulations.

If you have questions, please contact us via our CustomerPanel.

GDPR Compliant PIPEDA Compliant Data Protected

Information We Collect

Personal Information

When you register for our services or interact with our platform, we collect personal information necessary to provide hosting, billing, and support services. This may include:

Name, address, phone number, and email address
Billing and transaction information processed through secure third-party payment providers (UnderHost does not store full credit card numbers)
Account credentials and service configuration details
Technical information provided during support interactions (e.g., operating system, browser type, server logs)

Technical and Usage Information

When you visit our website or use our services, we collect certain technical and usage information to operate, secure, and improve our platform. This may include:

IP address, timestamps, and duration of visits
Browser type, device information, and operating system
Pages viewed and interactions with website features
Cookies and similar technologies used to maintain sessions, analyze usage, or attribute referrals

Depending on applicable law, certain technical data (including IP addresses) may be considered personal data.

We may use limited email engagement tracking (such as open or click metrics) in accordance with applicable consent requirements and applicable privacy regulations.

How We Use Your Information

We use your information to:

Process payments and provide customer support
Send service-related updates and promotional offers with your consent
Improve our services and marketing strategies
Prevent fraud, abuse, or illegal activities

We do not sell or transfer your personal data to third parties except:

To law enforcement or regulatory agencies, as required by law
To service providers performing tasks on our behalf under strict confidentiality agreements
In the event of a business acquisition or transfer
To our subsidiaries and affiliates

International Data Transfers

Personal data may be processed in jurisdictions where UnderHost or its service providers operate. Where required by applicable law, we implement appropriate safeguards to ensure adequate protection of personal data in accordance with GDPR and applicable Canadian privacy legislation.

Legal Basis for Processing (EEA & UK Users)

For users located in the European Economic Area (EEA) or the United Kingdom, we process personal data under one or more of the following legal bases:

Performance of a contract (service provision, billing, support)
Compliance with legal obligations
Legitimate interests (security, fraud prevention, service improvement)
Consent (analytics, marketing communications, referral tracking where required)

Winston AI Chat Processing

AI-Powered Support Assistant

UnderHost provides an AI-powered assistant called Winston AI to support customer inquiries and technical guidance related to our services.

When you interact with Winston AI, we may process chat content, page context, technical metadata such as IP address and browser type, and any contact information you voluntarily provide. This data is used solely to deliver support, improve service quality, maintain security, and prevent abuse.

⚠️ Important Note

Winston AI does not request or store passwords, private keys, or full payment details. Account-specific matters must be handled securely through our CustomerPanel.

AI processing may involve trusted technology partners operating under strict confidentiality and data protection standards compliant with GDPR, PIPEDA, and applicable privacy regulations.

You may request access to or deletion of AI-related chat data by contacting [email protected].

Data Retention

We retain personal data only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data and applicable regulatory requirements.

Your Rights

As a user of UnderHost, you have specific rights under GDPR and PIPEDA, including:

The right to access your personal data
The right to correct or update your data
The right to request data deletion

The right to object to data processing for marketing
The right to data portability
The right to withdraw consent at any time

To exercise these rights, contact us via [email protected].

Children's Privacy

Our services are not directed to individuals under the age of 16 (or the applicable minimum age under local law). We do not knowingly collect personal data from minors.