1. Overview
SagaHosting operates game server, bot, web, and VPS hosting services. This policy applies to all personal data we collect through our website, dashboard, and support channels. It does not apply to third-party services you may connect to your hosting.
We aim to comply with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and similar laws in other jurisdictions where our customers reside.
2. What We Collect
We collect the following categories of information:
- Account data: name, email, hashed password, account creation date.
- Billing data: billing details, transaction IDs, and payment status. Card numbers and UPI credentials are handled by Cashfree, our PCI-compliant payment processor — we never see or store them.
- Service data: server configurations, resource usage metrics, IP addresses assigned to your services.
- Support data: tickets, chat logs, and emails exchanged with our team.
- Technical data: IP address, browser type, device type, pages visited, and timestamps.
3. How We Use It
- To create and manage your account and deliver the services you ordered.
- To process payments through Cashfree and prevent fraud.
- To send OTP codes and verification emails (sent from [email protected]).
- To provide customer support and respond to your requests.
- To send service notifications (renewals, downtime, security alerts).
- To send marketing emails — only if you opt in. You can unsubscribe at any time.
- To monitor infrastructure health, debug issues, and improve our services.
- To comply with legal obligations and enforce our Terms of Service.
6. Data Retention
- Account data: kept while your account is active, plus a reasonable period afterwards to comply with tax and accounting obligations.
- Server data and backups: deleted 48 hours after plan expiry, in line with Section 7 of our Terms of Service.
- Support tickets: kept for 3 years for record-keeping.
- Billing records: kept as long as legally required by Indian tax law.
7. Security
We use industry-standard security: encrypted connections (TLS), hashed passwords, DDoS protection, firewalls, access controls, and regular security reviews. However, no system is 100% secure and we cannot guarantee absolute protection against all threats.
You play a role too — use a strong unique password and enable two-factor authentication where available.
8. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and data (subject to legal retention requirements).
- Object to or restrict certain processing.
- Export your data in a portable format.
- Withdraw consent for marketing at any time.
To exercise any of these, email [email protected]. We respond within 30 days.
9. Children
Our services are not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with data, contact us and we will delete it.
10. International Transfers
Our servers are primarily located in India. Some third-party processors (such as payment or email providers) may operate outside India. Where data is transferred internationally, we ensure appropriate safeguards are in place.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced on this page and, where appropriate, by email. The “Last updated” date at the top reflects the latest revision.
