Privacy Policy

1. Information We Collect

We collect the following types of information:

1.1 Information You Provide

• Account Information: Email address, username, and password when you register.
• Payment Information: Billing details necessary to process payments. Payment processing is handled by trusted third-party providers; we do not store your full payment card details.
• Support Communications: Any information you provide when contacting our support team.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, timestamps, and interaction patterns.
• Device Information: Browser type, operating system, screen resolution, and device identifiers.
• Network Data: IP address, approximate location (country/region), and referring URLs.
• Cookies & Tracking: We use cookies and similar technologies for analytics, session management, and improving your experience. You can manage cookie preferences through your browser settings.

1.3 Server & Hosting Data

• Hosted Content: Files, databases, configurations, and application data you upload to or create on our servers.
• Server Logs: Access logs, error logs, and resource usage metrics for your hosted services.

2. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve our hosting and related services.
• Account Management: To create and manage your account, process payments, and communicate with you about your services.
• Security & Abuse Prevention: To detect, prevent, and respond to fraud, abuse, security threats, and technical issues. This includes automated abuse detection systems and manual server reviews conducted exclusively by the management team.
• Compliance & Enforcement: To enforce our Terms of Service and comply with applicable legal obligations.
• Analytics: To understand usage patterns and improve our platform.
• Communications: To send you service updates, security alerts, and, with your consent, promotional offers. You can opt out of promotional communications at any time.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• Service Providers: With trusted third-party providers who assist in operating our platform (e.g., payment processors, analytics providers, infrastructure partners). These providers are bound by confidentiality obligations and may only use your data to perform services on our behalf.
• Fraud Prevention Provider: With TrueID (trueid.me), a third-party visitor-identification and fraud-prevention provider that processes device and network signals on our behalf to detect bots, automation, and duplicate or alternate ("alt") accounts. See Section 8 for details.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Protection of Rights: To protect the rights, property, or safety of Orihost, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any such change.

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law.
Account data is retained for the duration of your account's active status.
Upon account suspension or termination, your data may be permanently deleted in accordance with our Terms of Service. Suspended servers are subject to automatic cleanup and permanent data deletion daily at 20:00 CET.
Server logs and usage data are retained for a reasonable period for security and analytics purposes, after which they are automatically purged.
You may request deletion of your personal data at any time (see Section 6).

5. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit, access controls, and regular security audits.
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security and are not liable for any unauthorized access, data breaches, or data loss beyond our reasonable control.
In the event of a data breach that may affect your personal information, we will notify affected users as soon as reasonably practicable.
You are solely responsible for maintaining backups of your hosted data. Orihost does not guarantee the availability or recoverability of any data stored on our platform.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Objection: Object to certain types of processing of your personal data.
• Portability: Request your data in a structured, commonly used, machine-readable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within 30 days. We may require identity verification before processing your request.

7. Server Monitoring & Access

As outlined in our Terms of Service, Orihost reserves the right to access and review server files, databases, and configurations for compliance, security, and abuse prevention purposes.
All manual reviews are conducted exclusively by the management team. Any information accessed during these reviews is treated as strictly confidential and is used solely for the purposes stated above.

8. Fraud Prevention & Device Identification

To protect our services and users from fraud and abuse, we use TrueID (trueid.me), a third-party visitor-identification and fraud-prevention provider that acts as our data processor / service provider. TrueID helps us recognize returning devices and detect bots, automation, and attempts to create multiple or duplicate accounts ("alt accounts") to evade bans or abuse trials and promotions, as prohibited under our Terms of Service.

8.1 Information Processed

When you visit our website or use our services, TrueID processes the following device and environment signals from your browser:

• Device & Browser Attributes: User agent, language settings, timezone, screen dimensions, color depth, pixel ratio, platform, CPU core count, device memory, touch support, and cookie availability.
• Fingerprinting Hashes: One-way hashes derived from canvas, WebGL, audio, and installed-font characteristics of your device.
• Network Data: Your IP address and its coarse geolocation (country/region), used for risk rules such as datacenter/VPN detection, IP churn, and geographic mismatch.

8.2 How This Data Is Used

• Pseudonymous Identifier: Raw signals are converted into one-way hashes and used to derive an opaque, per-project visitor ID. This identifier is pseudonymous — it is not your name, email, or other directly identifying information — and allows the same device to be recognized across visits, even without cookies. TrueID does not store raw device data or personal fingerprint inputs.
• Risk Scoring: TrueID computes a risk score (0–100) and level (low, medium, high, or critical) from explainable rules. We use this score to allow a request, add additional verification (friction), or block requests we assess as fraudulent or abusive.

8.3 Legal Basis

Where the GDPR or UK GDPR applies, we rely on our legitimate interests (Article 6(1)(f)) in preventing fraud and abuse, preventing the circumvention of account restrictions, and maintaining the security and integrity of our services. Where the CCPA/CPRA applies, this processing is carried out for the business purpose of detecting and preventing security incidents and fraudulent or illegal activity; TrueID acts as our service provider, and we do not sell or share this data. In other jurisdictions, we rely on legitimate interest or the equivalent lawful basis available to us.

8.4 Data Deletion

Visitor data held by TrueID is deletable on request. To request deletion of the pseudonymous identifier and associated data held for fraud-prevention purposes, contact our Data Protection Officer at [email protected]; we will arrange deletion via TrueID's API. This right is exercised in accordance with the process, response times, and identity-verification requirements described in Section 6, and may be subject to our need to retain certain data to prevent ongoing fraud or abuse.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication state.
• Remember your preferences and settings.
• Analyze site traffic and usage patterns.
• Improve our services and user experience.

You can control cookies through your browser settings. Disabling cookies may limit certain functionality of our services.

10. Third-Party Services & Links

Our platform may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices, content, or security of any third-party services.
We encourage you to review the privacy policies of any third-party services you interact with through our platform.

11. Children's Privacy

Orihost is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.
If you believe we have inadvertently collected information from a child under 13, please contact us immediately at [email protected] and we will promptly delete the information.

12. International Data Transfers

Your data may be processed and stored on servers located in different countries. By using our services, you consent to the transfer of your data to jurisdictions that may have different data protection laws than your country of residence.

13. Changes to This Policy

We may update this Privacy Policy at any time. Changes take effect immediately upon posting. Your continued use of our services after any changes constitutes acceptance of the updated policy.
It is your responsibility to review this policy periodically. The "Last updated" date at the top of this page indicates when the latest changes were made.

14. Contact

If you have any questions about this Privacy Policy or how we handle your data, contact our Data Protection Officer at [email protected].
For general support inquiries, email us at [email protected].