This Privacy Policy is issued by HostCupid Web Solutions Private Limited, trading as HostCupid. It explains what personal information HostCupid receives, why it is used, who may process it and how a person can raise a privacy request or grievance.
1. Who is responsible for information?
HostCupid Web Solutions Private Limited is responsible for personal information used for its own enquiries, contracts, billing, support, website operation and business records. Where applicable under Indian data-protection law, HostCupid acts as the Data Fiduciary for those purposes.
When HostCupid hosts or maintains a customer's website or application, or assists with a connected third-party email service, the customer normally decides why end-user information is collected. For that customer-controlled data, HostCupid processes information only to provide, secure and support the service, subject to the customer's lawful instructions and the applicable agreement.
2. Information we may receive
Contact and identity: name, business name, email, phone number, address and authorised contacts.
Enquiry and project: requirements, website URLs, content, approvals, messages, meeting notes and credentials shared for work.
Account and transaction: client account identifiers, invoices, payment references, service history and tax information. Full card details are normally handled by the payment provider rather than HostCupid.
Technical and security: IP address, browser, timestamps, logs, error information, usage, support diagnostics and abuse-prevention data.
Public scanner: submitted URL, automated audit result and request data used for rate limiting, security and troubleshooting.
Customer-hosted data: files, databases, mail or logs processed through services controlled by the customer.
3. Why information is used
Information may be used to respond to enquiries, prepare quotations, verify authority, create and administer accounts, provide website and hosting services, process payment records, communicate service notices, deliver support, investigate security incidents, prevent abuse, maintain backups where included, improve service quality, enforce agreements and meet legal or regulatory obligations.
Where consent is the appropriate basis, the request will describe the purpose. HostCupid may also process information where necessary for a requested service, contractual steps, legitimate operational uses recognised by law, protection of systems or compliance with a legal obligation.
4. Public website scanner and automated results
The scanner sends the submitted public URL to the configured audit service and processes technical results. Do not submit private addresses, login URLs, secret tokens or personal information through the scanner. Results are automated snapshots and may be logged briefly for security, troubleshooting and rate limiting.
5. Service providers and disclosures
HostCupid may use infrastructure, domain, payment, support, email, analytics, security, backup, monitoring, professional-adviser and communication providers. They receive information reasonably needed for their function and may operate under their own lawful terms.
Information may also be disclosed when reasonably necessary to comply with law, court or governmental process; investigate fraud, abuse or security incidents; protect customers or infrastructure; enforce an agreement; or complete a corporate restructuring subject to appropriate safeguards.
HostCupid does not sell personal information.
6. Processing and storage locations
Information may be processed in India or another location where HostCupid or a necessary service provider operates. Cross-border processing depends on the service architecture and applicable restrictions. HostCupid will take reasonable contractual, security and access-control measures appropriate to the information and service.
7. Cookies, local storage and external links
The website may use essential cookies or local storage for session, security, preference and functional purposes. Optional analytics or marketing technologies, if introduced, should be described and managed as required by applicable law.
Links to Google Reviews, WhatsApp, payment providers, social platforms, the hosting client area and other websites are governed by those services' own privacy practices.
8. Retention and deletion
Information is retained only as long as reasonably needed for the service, account administration, support, security, dispute handling, tax, accounting or legal obligations. Different records have different retention periods.
Enquiries that do not become customers may be removed when no longer needed for follow-up or legitimate records.
Invoices, transaction and contractual records may be retained for statutory and dispute periods.
Security logs may be retained for investigation, abuse prevention and infrastructure protection.
Customer-hosted data is handled under the service's backup, suspension, expiry and deletion terms.
Deletion from active systems may not immediately remove information from secure backups until the backup cycle expires.
9. Security and incidents
HostCupid uses reasonable administrative, technical and organisational measures appropriate to the service, including access control, system hardening, logging and secure communication practices. No internet transmission, hosting platform or backup can be guaranteed completely secure.
Customers must protect credentials, limit authorised users, maintain their own devices and report suspected compromise promptly. Where required by applicable law, HostCupid will take appropriate steps concerning a qualifying personal-data breach.
10. Access, correction, erasure and other rights
Subject to applicable law and verification, a person may request information about personal data processed by HostCupid, correction of inaccurate data, erasure of data no longer required, withdrawal of consent where consent is the basis, and grievance redressal. Certain information may be retained or a request may be limited where necessary for law, security, fraud prevention, contract or another permitted reason.
Indian data-protection obligations are being brought into force in phases. HostCupid will apply the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as the relevant provisions become applicable.
11. Children's information
HostCupid's business services are not directed to children. A person ordering or administering a service should be legally competent and authorised. Do not intentionally submit children's personal data unless it is lawful, necessary for an agreed service and supported by the permissions required under applicable law.
12. Marketing preferences
HostCupid may send service-related messages necessary for an account, invoice, security or support matter. Promotional communication, where used, can be declined through the stated unsubscribe method or by contacting support. Opting out of marketing does not stop necessary service notices.
13. Changes to this policy
This policy may be updated for legal, operational, security or service changes. The revised version will show a new effective date. Material changes will be communicated where required.
14. Privacy requests and grievances
Email the Grievance Officer at info@hostcupid.com with your name, contact details, relationship to HostCupid, the request and enough information to verify it safely. Do not send passwords or unnecessary identity documents in the first message.
HostCupid will acknowledge a consumer grievance within 48 hours and aim to resolve it within one month, subject to verification, complexity and applicable law. If a request concerns data controlled by a HostCupid customer, HostCupid may direct the request to that customer.
