Privacy Policy

Effective Date: May 10, 2026

At CubiqHost, we are committed to protecting the privacy, security, and confidentiality of our users' personal and server data. This Privacy Policy outlines what information we collect, how we handle it, and the security measures we enforce.

1. Information We Collect & Why We Collect It

We collect only the essential data necessary to deliver secure hosting services:

• Account Details: Full name, email address, and account passwords (stored as secure, one-way cryptographic bcrypt hashes).
• IP Addresses (Strict Security Logging): We log your IP address in our admin database to comply with the Information Technology Act of India and Computer Emergency Response Team (CERT-In) guidelines. We use IP logs to prevent unauthorized account access, protect against DDoS or system abuse, validate the legal consent of your electronic contract signatures under Section 10A of the IT Act, and cooperate with law enforcement cyber cells during official investigations.
• UTR / Transaction IDs (Billing Security): When you submit a UTR or Transaction ID for payment verification, this data is logged and reviewed by our billing administrators. We log this information to match incoming UPI transactions with our actual corporate bank ledgers, protect our business against transaction spoofing, and resolve double-billing disputes.
• Consent Signatures: Active logs of your acceptance of our Terms and Policies, including timestamp and IP logging.

2. How We Use Your Information

Your personal data is used solely to:

• Provision, maintain, and secure your hosting nodes.
• Process payments, verify transaction IDs, and prevent fraud.
• Send critical transactional notifications (such as backup alerts, billing reminders, and server state updates).
• Investigate system abuse, DDoS source coordinates, or policy violations.

3. Cookies & Session Storage

We use strictly essential cookies and browser local storage to maintain your active login session securely.

• We do not deploy marketing, ad-targeting, or third-party behavioral tracking cookies on our platform.
• Disabling browser cookies may prevent you from logging into your billing panel or accessing the server managers.

4. Data Security & Node Privacy

• Hashing & Encryption: Passwords and sensitive SFTP configurations are stored using industry-standard modern encryption algorithms (AES-256-GCM and bcrypt).
• No Data Selling: We strictly do not sell, rent, lease, or share your personal data, server files, or transaction history with any third-party marketing companies.

5. Third-Party Integrations

We partner with trusted, secure infrastructure providers to deliver our services:

• Cloudflare: Used for DDoS mitigation, caching, and network security.
• Resend: Used to dispatch secure, transaction-level system emails.
• Pterodactyl Application Layer: Integrates your panel account securely using API bridges.

6. User Rights & Data Deletion (Purge)

• You have the right to request access to or update your personal information.
• You can request a complete account deletion. As configured in our system, deleting your account will permanently and irreversibly purge all your servers, invoice histories, consent logs, and sessions from both the website database and connected panel nodes.

7. Policy Updates

• We may update this Privacy Policy periodically. We recommend checking this page to stay informed of our latest privacy standards.