Privacy Policy
Effective October 7, 2026
This Privacy Policy explains how HostCrypt ("HostCrypt", "we", "us") handles personal data in the HostCrypt live chat service at chat.hostcrypt.com (the "Service").
Who is responsible
- Your account. For the data of people who use the Service — account holders and their teammates — HostCrypt is the controller. Contact: shubhairan@icloud.com.
- Your website visitors. For the data your website visitors share through the messenger, our customer (the business that installed the messenger) is the controller and we process it on their behalf. Visitors should read that business's privacy notice and contact it first.
What we collect
- Account data: name, email address, password (stored only as a secure hash), role, preferences and the settings of your workspace.
- Usage and security data: sign-in times, IP address, browser and device, and logs that keep the Service secure.
- Messenger data: messages, files, the name, email or phone number a visitor gives, pages viewed and approximate location derived from the IP address (each workspace decides how IP addresses are stored).
- Billing data: if you pay us online, the payment provider processes your payment details; we never see full card numbers.
How we use it
We use personal data to provide and support the Service, keep it secure and prevent abuse, send you service emails (such as password resets and notifications you choose), and meet legal obligations. Where data-protection laws such as the GDPR apply, we rely on the performance of our contract with you, our legitimate interest in a secure and working service, and legal obligations. We do not sell personal data and do not use it for advertising.
Service providers
We use carefully chosen providers who process data on our behalf and under written contracts: our live chat software and hosting providers, email delivery and, when you pay online, payment processors. They may only use the data to provide their services to us.
International transfers
Our providers may process data in other countries. When data leaves the European Economic Area or the United Kingdom, we use appropriate safeguards such as the European Commission's standard contractual clauses.
How long we keep data
Account data is kept while your account exists. Workspace content is kept until you or the retention settings of your workspace delete it, and deleting a workspace removes its conversations, contacts and files. Security logs are kept only as long as needed.
Security
Data is encrypted in transit, passwords are hashed, two-factor sign-in is available, and access to systems is limited to people who need it.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, and object to or restrict some processing. Write to shubhairan@icloud.com. You can also complain to your local data-protection authority.
Cookies
chat.hostcrypt.com uses only the cookies needed to keep you signed in and protect forms. The messenger on websites sets no cookies; it keeps a visitor token in the browser's local storage.
Changes
We may update this policy and will tell you about significant changes. See also our Terms of Service.
Contact
HostCrypt
shubhairan@icloud.com