Privacy Policy

Information We Collect

We collect information to provide and improve our hosting services. The types of information we collect include:

Information You Provide

• Account registration details (name, email address, billing address)
• Payment and billing information (processed securely through our payment providers)
• Support requests and communications with our team
• Domain registration details, if applicable
• Any content you upload to servers we manage on your behalf

Information Collected Automatically

• Log data (IP address, browser type, operating system, referring URLs)
• Device information (hardware model, operating system version)
• Usage data (pages visited, features used, time spent on our platform)
• Performance and diagnostic data from your hosted websites
• Cookies and similar tracking technologies (see Section 4)

Information from Third Parties

• Payment processors (transaction confirmation, fraud prevention data)
• Analytics providers (aggregated usage statistics)
• Domain registrars (WHOIS information for domains registered through us)

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our managed WordPress hosting services
• To process transactions and send related billing information
• To respond to your support requests and provide technical assistance
• To send service-related announcements (e.g., maintenance windows, security updates)
• To monitor and improve the performance, security, and reliability of our infrastructure
• To detect, prevent, and address fraud, abuse, and security issues
• To comply with legal obligations and enforce our Terms of Service
• To send marketing communications (only with your consent; you can opt out at any time)
• To personalize your experience and provide tailored recommendations

Information Sharing & Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: We work with trusted third-party providers (payment processors, CDN providers, data centers) who need access to your information to perform services on our behalf. These providers are bound by contractual obligations to keep your data secure and confidential.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.
• With Your Consent: We may share information with third parties when you give us explicit permission to do so.
• Aggregated Data: We may share anonymized, aggregated data that cannot reasonably be used to identify you.

Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website and platform.

Essential Cookies

These are required for our platform to function properly, including authentication, session management, and security features. You cannot opt out of essential cookies.

Analytics Cookies

We use analytics tools (such as Google Analytics) to understand how visitors interact with our website. These cookies collect aggregated, anonymous data to help us improve our services.

Marketing Cookies

With your consent, we may use marketing cookies to deliver relevant advertisements and measure campaign effectiveness. You can manage your cookie preferences at any time through your browser settings or our cookie consent banner.

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our platform.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain certain information as required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes.

When you close your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

Backup data stored on our infrastructure is automatically purged within 30 days of account closure.

Data Security

We take the security of your data seriously and implement industry-standard measures to protect it, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms for our staff
• DDoS protection and web application firewalls
• 24/7 monitoring for unauthorized access or suspicious activity
• Automated daily backups with secure offsite storage

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest standards.

Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to certain exceptions.
• Portability: Request a machine-readable copy of your data to transfer to another provider.
• Objection: Object to our processing of your personal data for certain purposes.
• Restriction: Request that we restrict the processing of your data in certain circumstances.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at privacy@envosta.com. We will respond to your request within 30 days.

International Data Transfers

Our servers and data centers are located in the United States and Europe. If you access our services from outside these regions, your information may be transferred to and processed in countries with different data protection laws than your own.

We ensure appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission where applicable.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information promptly.

Third-Party Services

Our platform may contain links to third-party websites or integrate with third-party services (such as payment processors, analytics tools, or plugins). This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party services you interact with.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by email or by posting a prominent notice on our website prior to the changes taking effect.

We encourage you to review this page periodically to stay informed about how we protect your data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@envosta.com
• Support: Contact our support team
• Mail: Envosta Inc., Privacy Team, 123 Hosting Lane, Suite 400, San Francisco, CA 94105

We will make every effort to respond to your inquiry within 30 business days.