Privacy Policy

1. Introduction

AlaaiHost ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our hosting platform and services. We comply with the Digital Personal Data Protection Act, 2023 (India) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, phone number, and password when you create an account.
• Payment Information: Payment details are processed securely by Razorpay. We do not store your full card numbers or UPI PINs.
• Domain Registration Data: WHOIS information required by ICANN and domain registries for domain registration.
• Technical Data: IP addresses, browser type, device information, access logs, and cookie data for service operation and security.
• Usage Data: Hosting resource usage, DNS configurations, and support interactions to improve our service.

3. How We Use Your Information

• To provide, maintain, and improve our hosting services
• To process payments and manage subscriptions
• To register and manage your domain names
• To send transactional emails (order confirmations, renewal notices, security alerts)
• To provide customer support and AI-powered assistance
• To detect, prevent, and address fraud and security issues
• To comply with legal obligations under Indian law

4. Cookies

We use essential cookies for authentication (session cookies) and service functionality. We do not use third-party advertising cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent you from using certain features.

5. Data Sharing and Third Parties

We share your data only with service providers necessary to operate our platform:

• Razorpay: For payment processing
• Openprovider: For domain registration services
• 20i: For hosting infrastructure provisioning
• Cloudflare: For CDN and DDoS protection

We do not sell your personal data to third parties. All third-party providers are contractually bound to protect your data.

6. Data Storage and Security

Your data is stored on secure servers with AES-256 encryption at rest and TLS 1.3 encryption in transit. We implement industry-standard security measures including DDoS protection, regular security audits, and access controls. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

You have the right to:

• Access your personal data that we hold
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for optional data processing
• Export your data in a portable format

To exercise these rights, contact us at info@alaaihost.com.

8. Data Retention

We retain your account data for the duration of your account's existence. After account deletion, we retain data for 30 days for recovery purposes, after which it is permanently deleted. Transaction records are retained for 8 years as required under Indian tax law.

9. Children's Privacy

Our Service is not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website at least 30 days before the changes take effect.

11. Contact

For privacy-related inquiries or to exercise your data rights, contact us at info@alaaihost.com.