Privacy Policy

This Privacy Policy explains how EpicHostly ("we", "us", or "our") — an unregistered business operating from India — collects, uses, and protects your personal data when you use our Shared Web Hosting, Bot Hosting, and Minecraft Hosting services.

By using our services, you consent to the practices described in this policy. If you disagree, please do not use our services.

1. Information We Collect

We collect only the data necessary to provide our services:

Category	Examples	Purpose
Identity Data	Name, username, email, Indian mobile number (10-digit)	Account creation, service provisioning, support
Technical Data	IP address, browser type, device info, server logs	Security, fraud prevention, service improvement
Service Data	Domain names, Minecraft server details, bot configurations	Hosting service delivery

⚠️ For Minecraft users under 18: We require parental consent for data collection. Parents may contact us to review/delete child data.

2. How We Use Your Data

Your data is used ONLY for:

Provisioning and managing your hosting services
Communicating service updates or security issues
Complying with Indian legal obligations (IT Act, DPDP Act)
Preventing fraud, DDoS attacks, and illegal activities

We do NOT:

Sell or rent your data to third parties
Use your data for advertising or marketing (unless you opt-in)
Store passwords (we hash them using Argon2id)

3. Data Storage & Security

All data is stored on servers located in India. We implement industry-standard security measures:

Encryption of data in transit (TLS 1.3)
Password hashing with Argon2id
Regular security audits
Isolated server environments

Note: Minecraft server files and bot code are stored unencrypted (as required for execution). We recommend encrypting sensitive files yourself.

4. Data Retention

We retain your data only as long as necessary:

Active accounts: For the duration of service + 30 days
Terminated accounts: 30 days (for recovery), then permanent deletion
Legal holds: As required by Indian authorities

You may request early deletion by contacting support@epichostly.xyz.

5. Your Rights Under DPDP Act, 2023

As an Indian resident, you have the right to:

Access: Request a copy of your personal data
Correction: Fix inaccurate or incomplete data
Erasure: Request deletion of your data (subject to legal exceptions)
Grievance Redressal: Contact our Data Protection Officer (details below)

To exercise these rights, email support@epichostly.com with "DPDP Request" in the subject line. We will respond within 7 business days.

6. Changes to This Policy

We may update this policy to reflect changes in our practices or Indian laws. The "Last updated" date at the top will change accordingly. Continued use of our services after changes implies acceptance.

7. Contact Information

For privacy-related questions or DPDP Act requests:

Email: support@epichostly.com
Address: [Your City], India
Data Protection Officer: Available upon request

Parents of minors: Please include "Child Data Request" in your email subject line for expedited handling.