Privacy Policy - Hostgrid Social

1. Data Controller

Hostgrid Social (a division of Hostgrid Private Limited) is the data controller for personal data processed through our website and services. Contact: noreply@hostgrid.in.

2. Data We Collect

2.1 Information You Provide

Name, email, phone, company name — when you submit a quote request, contact form, or create an account.
Business details (industry, website, location) — to tailor our services.
Brand assets, logos, content, credentials — to deliver services.
Communication records — emails, messages, support tickets.

2.2 Automatically Collected Data

IP address, browser type, operating system, referral source — via server logs.
Usage analytics (pages viewed, time on site) — via privacy-respecting analytics (no third-party tracking cookies).

3. How We Use Your Data

To provide, manage and improve our services.
To communicate about your account, quotes, projects and support.
To send service-related notifications (invoices, reports, updates).
With consent: marketing emails about our services (you can unsubscribe anytime).
To comply with legal obligations and enforce our Terms.

4. Legal Basis (GDPR)

Contract performance: Delivering services, billing, support.
Legitimate interest: Improving services, security, analytics.
Consent: Marketing communications, optional cookies.
Legal obligation: Accounting, tax, regulatory compliance.

5. Data Sharing

We do not sell your data. We share data only with:

Sub-processors: Payment processors (Razorpay/Stripe), email delivery (Mailgun/SendGrid), cloud hosting (AWS/DigitalOcean). All under DPAs.
Legal authorities: When required by law or to protect rights/safety.
Business transfers: In case of merger/acquisition, with notice.

6. Data Retention

Account data: Retained while account is active + 7 years for financial records.
Quote/enquiry data: 3 years from last activity.
Analytics data: Aggregated/anonymised after 14 months.
Marketing data: Until you unsubscribe or 2 years of inactivity.

7. Your Rights

You have the right to: access, rectify, erase, restrict processing, data portability, object to processing, and withdraw consent. To exercise these rights, email noreply@hostgrid.in. We respond within 30 days.

8. International Transfers

Our services are hosted in India. If you're outside India, your data transfers to India under appropriate safeguards (standard contractual clauses or adequacy decisions).

9. Security

We implement appropriate technical and organisational measures: TLS encryption, encrypted storage, access controls, regular security reviews, and staff training. No system is 100% secure; we notify you promptly of any breach affecting your rights.

10. Cookies

We use only essential cookies (session, CSRF, preferences). No third-party tracking cookies. See our Cookie Policy for details.

11. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect children's data. If you believe we have, contact us immediately.

12. Changes

We may update this Policy. Material changes will be notified via email or dashboard at least 30 days prior. Continued use constitutes acceptance.

13. Contact

Data protection queries: noreply@hostgrid.in.