Privacy Policy
How VisiHost collects, processes, and safeguards your personal data, billing records, and technical telemetry.
At VisiHost ("we," "our," or "us"), we are committed to respecting your privacy and protecting the personal and technical data you entrust to us. This Privacy Policy explains what information we collect when you visit our website (https://visihost.in), use our billing portal (https://billing.visihost.in), or utilize our hosting services, how that information is used, and the choices available to you.
We align our data processing principles with applicable privacy frameworks, including the Digital Personal Data Protection Act, 2023 (DPDP Act) in India and standard global data protection principles for international clients.
1. Information We Collect#
We collect information necessary to deliver our hosting services, maintain network security, and comply with legal and financial obligations:
A. Account & Contact Information#
- Full name, active email address, physical billing address, phone number, and Discord username (when authenticating via Discord OAuth).
- Account login credentials (stored using salted, one-way cryptographic hashing).
B. Billing & Financial Metadata#
- Invoicing records, transaction IDs, payment method types (e.g., UPI, RuPay, Visa, PayPal), and payment status.
- Card Security: All sensitive payment card data is processed directly by certified, PCI-DSS compliant payment gateways. VisiHost never collects, stores, or processes raw credit or debit card numbers on our servers.
C. Technical & Connection Logs#
- IPv4 and IPv6 addresses used to connect to our billing portal, control panels, or server ports.
- Web browser user-agent headers, operating system information, and authentication timestamps.
- Firewall connection logs and network flow metadata used for DDoS mitigation and intrusion prevention.
D. Server Resource Telemetry#
E. Support Communications#
- Tickets, inquiries, chat logs, and correspondence exchanged through our billing ticket system, support email, or official Discord server.
2. How We Use Your Information#
We process your data strictly for legitimate business operations and contractual fulfillment:
- Service Delivery & Provisioning: Setting up your containers, provisioning Cloud VPS instances, configuring DNS records, and issuing panel credentials.
- Billing & Accounting: Generating recurring invoices, processing gateway transactions, and maintaining statutory accounting and tax ledgers.
- Operational Communications: Delivering essential transactional notices, including invoice receipts, renewal reminders, password reset links, and scheduled maintenance announcements.
- Network Security & Defense: Detecting and mitigating volumetric DDoS attacks, combating automated brute-force intrusion attempts, and investigating malicious activities under our Acceptable Use Policy.
- Customer Support: Troubleshooting server issues, addressing configuration questions, and processing service credit requests under our SLA.
3. Data Sharing & Third-Party Processors#
VisiHost does not sell, lease, rent, or trade your personal information to third-party advertisers or data brokers. We share data only with trusted infrastructure partners necessary to deliver our services:
- Payment Gateways: Third-party payment processors (including UPI processors, Razorpay/Stripe, and PayPal) to securely verify transactions.
- Data Centers & Upstream Carriers: Tier-1 transit carriers and data center colocation facilities to route network packets and provide physical security.
- DDoS Mitigation Providers: Automated edge traffic filtering networks that scrub malicious packets before they reach our host nodes.
- Legal Compliance: We will disclose information only when strictly mandated by valid legal processes, such as a formal court order, search warrant, or binding statutory directive from law enforcement agencies having lawful jurisdiction.
4. Hosting Locations & Data Processing#
Because VisiHost operates distributed hosting infrastructure, customer server containers and virtual instances are currently deployed across data center locations in:
- United States: Ashburn, VA and Miami, FL
- India: Noida and Delhi
(Additional domestic and international locations are planned for future expansion.)
Your server data resides in the specific geographic region selected during checkout. Billing records and client account profiles are maintained centrally with encrypted data safeguards.
5. Cookies & Browser Telemetry#
We use minimal, privacy-conscious cookies on our web properties:
- Essential Authentication Cookies: Standard session tokens required to keep you securely signed in to the billing dashboard and control panels.
- CSRF Tokens: Security tokens used to prevent Cross-Site Request Forgery attacks.
- Interface Preferences: Remembering your theme preferences (dark mode vs. light mode) and selected language.
You can configure your browser to reject cookies, but doing so may impair your ability to log into management dashboards.
6. Security Standards & Practices#
We implement robust administrative, physical, and technical safeguards:
- Transport Encryption: All web traffic to our website, API endpoints, billing area, and control panels is encrypted using TLS 1.3 / SSL certificates.
- Data Hardening: Sensitive database tables and billing records are stored with encryption at rest.
- Access Controls: Employee and technician access to hypervisors and internal systems is governed by strict role-based access control (RBAC), multi-factor authentication, and audited SSH bastion hosts.
7. Data Retention & Permanent Deletion#
We retain personal information only for the duration necessary to satisfy business and regulatory purposes:
- Active Services: Application files, databases, and container environments remain stored on our NVMe arrays as long as the service is active and in good standing.
- Terminated Services: Once a service is permanently canceled or terminated for non-payment, all virtual containers, VPS disk volumes, and database records are permanently wiped within seven (7) days.
- Financial & Invoice Records: Billing invoices and transaction metadata are retained for statutory accounting and tax compliance periods (typically 6 to 8 years under statutory regulations).
- System Access Logs: Routine web server and firewall logs are automatically rotated and purged on standard 30-day rolling cycles.
8. Your Data Protection Rights#
Under applicable data protection laws (including the Indian DPDP Act and international standards), you have the right to:
- Access: Request confirmation of whether we process your personal data and obtain a summary of stored records.
- Correction & Rectification: Request correction of incomplete, inaccurate, or outdated personal information in your profile.
- Erasure / Account Deletion: Request that your account be permanently closed and personal data erased, subject to our statutory accounting, fraud prevention, and dispute defense obligations.
- Withdraw Consent: Withdraw consent for optional communications at any time.
To exercise any of these rights, please submit a formal data request through the VisiHost Client Area.
9. Frequently Asked Questions (FAQ)#
Does VisiHost store my credit card or UPI PIN?#
No. VisiHost never collects, processes, or stores sensitive credit/debit card numbers or UPI PINs. All financial transactions are handled exclusively by certified, PCI-DSS compliant third-party payment processors.
What happens to my data after I cancel my hosting service?#
When a service is canceled or terminated, all associated virtual containers, disk volumes, and databases are permanently and securely wiped within seven (7) days. Billing and accounting invoices are retained as required by statutory financial regulations.
Does VisiHost sell user data to advertising networks?#
No. We do not sell, rent, monetize, or trade any customer information, email addresses, or server traffic data to advertisers, data brokers, or marketing firms.
10. Privacy Inquiries & Grievance Officer#
If you have questions, feedback, or concerns regarding this Privacy Policy, or wish to reach our Grievance Officer:
- Client Area Ticket: https://billing.visihost.in
- Primary Privacy & Support Email:
support@visihost.in - Secondary Contact:
visihostindia@gmail.com - Community Inquiries: VisiHost Discord Server