Privacy Policy

Last Updated: July 13, 2025

Introduction

Welcome to HostingBox ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our static website hosting service.

By using HostingBox, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide to Us

Account Information

  • Email address - Required for account creation and communication
  • Name - Optional, for account personalization
  • Password - Stored securely using industry-standard encryption

Payment Information (Premium Users)

  • Payment processing is handled by third-party processors (Stripe/PayPal)
  • We do not store credit card numbers or banking information
  • We retain transaction IDs and subscription status

Site Content

  • Files you upload for hosting (HTML, CSS, JavaScript, images, etc.)
  • Site metadata (site names, descriptions)
  • Custom domain configurations

Information Automatically Collected

Usage Data

  • IP addresses (anonymized after 30 days)
  • Browser type and version
  • Operating system
  • Pages visited and time spent
  • Referring website
  • Date and time of access

Cookies and Tracking

  • Session cookies for authentication
  • Preference cookies for user settings
  • Analytics cookies (if you consent)

How We Use Your Information

We use the collected information for:

Service Provision

  • Creating and managing your account
  • Hosting and serving your static websites
  • Processing payments for premium subscriptions
  • Providing customer support

Service Improvement

  • Analyzing usage patterns to improve our service
  • Developing new features
  • Preventing fraud and abuse
  • Ensuring platform security and stability

Communication

  • Sending service-related emails (account verification, password resets)
  • Notifying about important service updates
  • Marketing communications (only with your consent)

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following situations:

Service Providers

  • Infrastructure providers (AWS/Google Cloud) - for hosting services
  • Payment processors (Stripe/PayPal) - for payment handling
  • Email service providers - for transactional emails
  • Analytics providers - for service improvement (anonymized data only)

Legal Requirements

We may disclose information if required by:

  • Court orders or legal processes
  • Law enforcement requests
  • Protection of our legal rights
  • Prevention of fraud or security issues

Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

Data Retention

We retain your information for as long as necessary to provide our services:

  • Account data: Retained while your account is active
  • Site content: Retained while your sites are active
  • Usage logs: Retained for 90 days
  • Payment records: Retained for 7 years for tax purposes
  • Deleted account data: Removed within 30 days of account deletion

Data Security

We implement appropriate security measures including:

  • SSL/TLS encryption for all data transmissions
  • Encryption of sensitive data at rest
  • Regular security audits and updates
  • Access controls and authentication
  • Regular backups with encryption
  • DDoS protection and firewall systems

However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

Access and Portability

You can access and download your data at any time through your dashboard.

Update and Correction

You can update your account information through your account settings.

Deletion

You can delete your account and all associated data through your account settings or by contacting support.

Marketing Communications

You can opt-out of marketing emails using the unsubscribe link in any marketing email.

Cookies

You can disable cookies in your browser settings, though this may limit some functionality.

Do Not Track

We respect Do Not Track browser settings and will not track users who have enabled this setting.

International Data Transfers

Our servers are located in the United States. If you access our service from outside the United States, your information will be transferred to and processed in the United States.

Children's Privacy

HostingBox is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately.

California Privacy Rights (CCPA)

California residents have additional rights including:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to say no to the sale of personal information
  • Right to access personal information
  • Right to equal service and price

GDPR Rights (European Users)

If you are in the European Economic Area, you have additional rights including:

  • Right to access your personal data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

Third-Party Services

Static Site Content

Your hosted sites may include third-party content or services. We are not responsible for the privacy practices of these third parties.

External Links

Our service may contain links to external sites. We are not responsible for the privacy practices of these external sites.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new policy on this page
  • Updating the "Last Updated" date
  • Sending an email notification (for material changes)

Contact Information

If you have questions or concerns about this Privacy Policy, please contact us:

Email: [email protected]
Address: Four Capital Ltd, Bulgaria, EU.

Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer:
Email: [email protected]

This privacy policy is effective as of the Last Updated date and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.