Who we are
This policy applies to 444Host and to services we operate under this brand. For addresses and contact details, see /contact.
What we collect
Account data (name, email, phone, billing address), service data (domain, plan, resource usage, ticket history), and technical data (IP address, browser, timestamps) used to provide and secure the service.
How we use it
To deliver services you bought, to bill accurately, to prevent abuse, to respond to support requests, and to comply with law. We do not sell personal data.
Payment processors
Card payments are handled by PCI DSS-certified processors (Stripe, PayPal). We do not store card numbers. Gateway identifiers (payment intent IDs, order IDs) are kept on invoices for audit.
Data we share
Only with subprocessors required to deliver the service: our payment gateways, our domain registrar (OpenSRS) when you register a domain, and law enforcement when a lawful request is received.
Storage and location
Production data is stored on our own infrastructure. Operational backups are encrypted and retained for a limited window.
Retention
Active account data is kept for as long as your account is open. On closure, most data is deleted within 90 days; invoices and tax records are retained longer where required by law.
Your rights
You can access, correct, export, or delete your data from your account panel or by contacting support. EU/UK/Türkiye residents have additional rights under GDPR / KVKK including objection and restriction.
Security
Encryption in transit (TLS) and at rest (AES-256-GCM for sensitive columns), hashed passwords (bcrypt), least-privilege access, audit logging, and 2FA for admin accounts.
Contact
Reach our privacy team via /contact or the support email listed there. We respond within statutory timeframes.