Privacy Policy

1. Introduction

HostKro (“we”, “our”, or “us”) is committed to protecting the privacy and personal data of our users. This Privacy Policy details how we collect, use, store, and disclose information when you visit our website (hostkro.com), use our client portal (my.hostkro.com), or purchase our web hosting, domain registration, and related technical services.

2. Information We Collect

We may collect information you provide directly to us, including:

• Contact Information: Name, business name, email address, postal address, and telephone number.
• Account Credentials: Username, encrypted passwords, and security verification details for your client portal.
• Domain Registration Data: Contact details required by ICANN or ccTLD registries for WHOIS verification (which we protect with free privacy where eligible).
• Billing Information: Transaction histories and payment confirmation tokens. Note that credit card and UPI information is processed directly by PCI-DSS certified payment processors (e.g. Razorpay, PayPal) and never stored on our servers.
• Technical & Log Data: IP address, browser type, referring URLs, operating system, and timestamp metrics when accessing our servers.

3. How We Use Your Information

Your information is used strictly to:

• Provision and maintain your web hosting, server accounts, and domain registrations.
• Process financial transactions and send automated invoices and renewal notices.
• Provide 24/7 technical customer support and respond to service inquiries.
• Monitor server health, prevent unauthorized network access, and mitigate DDoS or abuse.
• Comply with applicable legal, regulatory, and ICANN requirements.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to third parties for marketing purposes. Data is only shared with trusted service providers strictly necessary to deliver your requested service:

• Domain Registrars and Registries (such as NIXI, Verisign, Registry.si) for mandatory domain registration.
• Payment Gateways (Razorpay, Stripe, PayPal) for secure transaction processing.
• Law enforcement agencies only when compelled by valid legal subpoenas or court orders.

5. Data Retention & Security

We implement industry-standard technical and organizational security protocols, including TLS 1.3 encryption, firewalls, and strict access controls to safeguard your data. Personal data is retained only as long as your account remains active or as required by financial and tax audit laws.

6. Your Rights

Depending on your jurisdiction (including GDPR and Indian Digital Personal Data Protection laws), you have the right to request access to, correction of, or deletion of your personal data. You may update your profile directly at my.hostkro.com or contact our data privacy officer at privacy@hostkro.com.