Legal & Compliance

Privacy Policy

Last updated: September 2026. How HostCraft handles, secures, and protects your account details and payment data.

Strict Zero-Access Data Policy: HostCraft provides infrastructure services. We do not inspect, log, monitor, or monetize the application data, database records, or traffic running on your dedicated instances or private virtual machines.

1. Information We Collect

When you register an account, order services, or request support from HostCraft, we collect the necessary business and contact details required to establish legal service agreements and issue GST-compliant tax invoices:

  • Account Details: Full name, registered company name, email address, billing address, and contact telephone number.
  • Tax & Compliance: GSTIN (Goods and Services Tax Identification Number) for Indian businesses claiming input tax credit.
  • Financial Credentials: Transaction identifiers and payment status. Credit card numbers, UPI PINs, and net banking credentials are processed via RBI-authorized payment gateways (such as Razorpay/Stripe); HostCraft does not store card numbers or banking secrets on our servers.
  • Telemetry & Audit Logs: Access timestamp, client IP address, and browser agent when logging into the HostCraft dashboard to safeguard your account against unauthorized logins.

2. How We Use Collected Data

Information gathered is strictly utilized for operational, transactional, and legal purposes:

  • Automated provisioning and maintenance of your virtual servers, bare metal instances, and hosting services.
  • Generating official tax invoices and keeping compliance records in line with Indian corporate laws.
  • Notifying you regarding critical maintenance windows, IP updates, resource threshold alerts, or security vulnerabilities.
  • Providing technical support and investigating network abuse or unauthorized access attempts.

3. Data Sovereignty & Residency

HostCraft operates physical server clusters inside carrier-neutral data centers in Delhi NCR (Noida) and Mumbai (Chandivali). Your server files, private SSH keys, and customer records remain resident within Indian geographical boundaries in full compliance with CERT-In and Indian IT directives.

4. Data Retention & Erasure

Upon cancellation or termination of your services:

  • All data on NVMe disk arrays is securely zero-wiped before drives are returned to the provisioning pool.
  • Account billing receipts and GST logs are retained for the statutory period mandated by tax regulations.
  • You may request complete account deletion by submitting an erasure ticket to our compliance desk.

5. Contact Our Privacy Officer

If you have any questions or data concerns, contact our compliance desk at privacy@hostcraft.xyz or via our 24/7 client dashboard.