Draft, needs legal review. This text is a working draft and not yet in force. Items in [brackets] are still to be decided.
Privacy policy
What we collect, why, who processes it for us, how long we keep it, and your rights.
Last updated 11 October 2026
This policy covers zeyohost.com, the help centre at zeyohost.com/help, the panel at my.zeyohost.com and Zeyo Mail at zeyohost.email. [To confirm: data controller name and address; EU/UK representative if required.]
The short version
- This website sets no cookies and loads no trackers, analytics or advertising scripts. Fonts are served from our own server.
- The panel uses one essential session cookie to keep you signed in, and nothing else.
- We collect what we need to run your services and bill you, and nothing more. We never sell your data.
What we collect
| What | Why | Kept for |
|---|---|---|
| Account details: name, email, password (hashed), two-factor secret | To sign you in and contact you about your services | While your account is open |
| Billing details: plan, invoices, payment status, tax country | To bill you and meet tax law | [To confirm: as tax law requires, typically 6–10 years] |
| Payment card or PayPal details | Handled by the payment provider; we never see full card numbers | By the provider, under its policy |
| Sign-in history: time, IP address, browser | To protect your account and show you Login History | [To confirm: 90 days] |
| Your hosted content: sites, files, databases, mail | To provide the service | Until you delete it or the service ends (plus backup retention) |
| Server logs: access and error logs for your sites | To run and secure the service; shown to you in Metrics | [To confirm: 30 days] |
| Support messages | To help you | [To confirm: 2 years] |
| "Was this helpful?" answers in the help centre | To improve articles; stored without a cookie and without your IP address | [To confirm: 2 years] |
Who processes data for us
[To confirm the final list before publishing.]
- Payment providers: Stripe, PayPal and Paddle, depending on the method you choose. Paddle acts as the merchant of record for payments made through it.
- Infrastructure: the cloud providers whose servers we run in. [To confirm: provider names and server countries.]
- Cloudflare, for DNS and to protect zeyohost.com from attacks.
- Email delivery for Zeyo Mail and our own notifications. [To confirm: provider, for example Amazon SES.]
Your rights
Depending on where you live, you can ask to see the data we hold about you, correct it, delete it, receive it in a portable format, or object to how we use it. Write to [email protected] [To confirm address]. You can also complain to your data protection authority.
Security
Passwords are stored hashed. Two-factor sign-in is available to every customer and required for our staff. Access to customer data is limited to the people who run the service.
Changes
We will post changes here and email you about significant ones.