Legal

Privacy policy

What is collected, why, who processes it on our behalf, and how to access or export your data.

Draft under the owner’s legal review — not final until a lawyer has reviewed it.

Data controller

Hostingsurge's registered operator details are being published here. Until then, this page names the brand (Hostingsurge) only.

What we collect

  • Account data: email address, name and a hashed password (never stored in plain text).
  • Team data: organizations, members and roles.
  • Project data: files, configuration, environment variables and deployment history for your projects.
  • AI builder chats: the prompts you send to the AI builder and its replies, kept with the project.
  • Logs: build and runtime logs needed to run and troubleshoot your service.
  • Email content: if you use the email service, our own mail servers handle the content of your mailboxes.
  • Cookies: see /legal/cookies for the full, factual list.

Language suggestion

The website suggests a language based on the country you are visiting from. The country is looked up locally on our server from your IP address, without storing the address or sending it to anyone. The language you read the site in, whether you picked it or followed a link in that language, is remembered in the hs_lang cookie (see /legal/cookies) so the next page and the dashboard open in the same language.

Why we collect it

Solely to provide the service: authentication, deployment, billing (when enabled), support, and keeping the platform secure and reliable. No data is sold, and there is no third-party tracking or advertising on the platform.

Who processes data for us

A complete, named list of sub-processors and where they are located is at /legal/subprocessors — including where your server hosting, off-site backups, DNS, source code storage, deployment, certificates, email, AI builder model calls and payments (when enabled) happen.

International transfers

Server hosting and off-site backups are within the EU. Some sub-processors are outside the EU: Cloudflare (DNS, global network, US-headquartered), GitHub (source code storage) and Stripe (payments, when enabled) in the US, and DeepSeek in China, which processes the prompts and project files you send to the AI builder. See /legal/subprocessors for per-vendor detail.

Retention

Data is retained for as long as your account or project is active. Backups run nightly on the production server and are copied, encrypted, to Backblaze in the EU (Amsterdam), where prior versions are kept for 30 days; a restore from the off-site copy is tested every week.

Your rights

  • Access and export: your project files and versions can be exported at any time from the dashboard.
  • Deletion: you can close your account; contact us below for a full deletion request.
  • Correction: you can update your account details directly in the dashboard.

Contact

Reach the operator at hello@hostingsurge.com.