Privacy Policy

1What we collect

When you open an account: your name, email address, postal address, phone number and — where you are registered for tax — your GSTIN. Indian tax rules and our payment provider's checks both require a billing address, which is why it is not optional.

When you pay: the amount, the invoice, the method used and a reference from the payment provider. We never see or store your card number, UPI PIN, or bank credentials. Those go directly to the payment provider and never touch our servers.

When you use the service: server logs including IP addresses, resource usage, backup records and — for edge delivery — aggregate request and bandwidth counts by region. Logs are how we find out why your site was slow at four in the morning.

When you contact us: the message you send and the conversation that follows.

2Why we hold it

To provide the service you bought, to invoice you for it and to meet the record-keeping that Indian tax law requires. To detect and stop abuse — spam, intrusion attempts, compromised accounts. To answer you when you write to us. To send service notices such as renewal reminders, maintenance windows and security alerts.

Marketing email is separate and optional: you are not opted in by buying something, and every marketing message carries a working unsubscribe link. Service notices are not marketing and cannot be turned off while you hold an active service, because they are how we tell you your site is about to expire.

3Who else processes it

Running a hosting company means using other companies, and they see the parts of your data their job requires:

• The data centre that houses our servers, in the United States.
• Our edge delivery partner, for content served through the CDN.
• Our payment provider, which handles card, UPI, net banking and wallet payments.
• The domain registry and registrar for any domain you register, which is required to receive registrant details under ICANN rules.
• Our email provider, for the messages we send you.

Each is bound to use the data only to provide that service to us. We do not sell personal data, and we do not share it for anyone else's advertising. We disclose data to authorities only where a valid legal demand requires it, and we will tell you unless we are forbidden from doing so.

4Where it is stored

Our shared hosting servers are currently in the United States, so account data and site content are stored there. Edge caches hold copies of your public content in locations worldwide, including in India, for as long as your cache settings say. Backups sit alongside the servers they protect.

Where data leaves India, it does so under the contractual protections our providers offer. An India-based hosting location is planned; when it is live you will be able to choose it.

5How long we keep it

Account and billing records: for as long as you are a customer, and then for the period Indian tax and company law requires us to retain invoices — currently eight years.

Site content and backups: while the service is active, and for thirty days after it ends. After that they are deleted and cannot be recovered.

Server logs: ninety days, then discarded. Support conversations: three years, because an old thread is often the fastest answer to a recurring problem.

6Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct anything wrong, ask us to delete it, or object to a particular use. Write to support@greenhostinggo.com from the address on your account and we will act within thirty days.

Most of it you can do yourself: your billing details are editable in your dashboard, your site content is yours to export from cPanel, and closing your account starts the deletion clock described above.

Deleting data we are legally required to retain — invoices, chiefly — is the one request we cannot always grant, and we will say so rather than quietly ignore it.

7Security

Accounts are isolated from one another with CloudLinux, so one compromised site cannot read another's files. Imunify360 scans and firewalls every account. Transport is encrypted: free SSL is issued and renewed automatically for every domain, and our control panels are reachable only over HTTPS.

Card and UPI details never reach our systems. Passwords are stored hashed, never in a form we could read back to you.

If a breach affects your personal data, we will tell you what happened, what was exposed and what we are doing about it — promptly, and without waiting for it to become public.

8Cookies

This site sets only what it needs: a session cookie when you sign in to your dashboard, and a preference cookie remembering choices such as currency. There are no advertising trackers and no third-party profiling cookies on these pages.