Privacy Policy

Last updated: July 28, 2026

This Privacy Policy explains how ClouHost ("we", "us", "our") collects, uses, stores, and protects personal data when you use our website, web hosting, design and development services, member account, SEO tools, converters, and related products (the "Services").

1. Who we are (Data Controller)

ClouHost is the data controller for personal data processed through this website and our Services. For privacy requests, contact us via the details published on our website contact page or member support channels.

2. Data we collect

• Account data: name/display name, username, email address, password hash, role, avatar, and account activity.
• Order & service data: plan selections, invoices (if enabled), support tickets, migration notes, and project requirements for design/development.
• Technical data: IP address, browser/user-agent, device type, pages visited, referrer, approximate location (from IP), and security logs (login attempts, blocks).
• Cookies & similar tech: session cookies (essential), preference cookies (theme, currency), analytics (if you consent), and marketing cookies (only with consent where required).
• Communications: messages you send us (email, forms, WhatsApp if used), and feedback/reviews you submit.
• Tool inputs: content you paste into SEO/AI/converter tools is processed to provide the feature. We design client-side tools to minimize server storage of your files where possible.

2A. AI Detector & Humanizer (client-side tools)

Our free AI content detector and AI text humanizer (ClouHostAi) are designed so analysis runs in your browser:

• Text you paste, type, upload, or humanize is not stored on our servers for model training or content databases.
• Document parsing (.txt, .html, .pdf, .docx) and PDF report export are intended to run locally in the browser using client libraries.
• Our servers may issue a short-lived session token so protected analysis scripts can load — that exchange is not meant to include your essay or article text.
• Standard web server logs (IP, user-agent, URL, time) may still be recorded for security and abuse prevention, separate from tool content.
• Closing the tab clears in-session tool content unless you save it yourself on your device.

3. Legal bases (GDPR)

We process personal data only when we have a lawful basis:

• Contract — to create accounts, deliver hosting/design/development, and provide tools you request.
• Legitimate interests — security, fraud prevention, service improvement, and defending legal claims (balanced against your rights).
• Consent — non-essential cookies, marketing emails, and optional analytics (you may withdraw anytime).
• Legal obligation — tax, accounting, and law-enforcement requests where required.

4. How we use data

• Provide, operate, and improve the Services
• Authenticate users and protect against abuse, bots, and attacks
• Process orders, support, and migrations
• Send service notices (billing, security, outages) — not marketing without consent where consent is required
• Comply with law and enforce our Terms

5. Sharing & processors

We do not sell personal data. We may share data with:

• Infrastructure and hosting providers necessary to run servers
• Payment processors (if billing is enabled)
• Email/SMS providers for transactional messages
• Professional advisors (legal, accounting) under confidentiality
• Authorities when legally required

Processors act under instructions and appropriate agreements (including SCCs where international transfers apply).

6. International transfers

If data is transferred outside your country/EEA, we use appropriate safeguards such as Standard Contractual Clauses or equivalent lawful mechanisms.

7. Retention

We keep account and billing records as long as your account is active and for a reasonable period afterward for legal, tax, and security purposes. Security logs are retained for a limited period. You may request deletion subject to legal holds.

8. Security

We use industry-standard measures: HTTPS, password hashing, CSRF protection, session hardening, rate limiting, and access controls. No method of transmission or storage is 100% secure; report suspected incidents promptly.

9. Your rights (GDPR / UK GDPR / similar laws)

Where applicable, you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

Use your account profile tools where available, or contact us. We may need to verify your identity before fulfilling requests.

10. Children

Our Services are not directed to children under 16 (or higher age required in your jurisdiction). We do not knowingly collect children's data.

11. Cookies

See our Cookie notice in the cookie banner and Privacy settings. Essential cookies are required for login and security. Analytics/marketing cookies load only after consent where the law requires it.

12. Automated decision-making

We do not make decisions producing legal or similarly significant effects solely by automated means without human involvement.

13. Changes

We may update this Policy. Material changes will be posted on this page with a revised "Last updated" date. Continued use after changes means you acknowledge the updated Policy.

14. Contact

For privacy questions or requests, contact ClouHost using the contact methods listed on our website.