This Privacy Policy describes how hostedit.cloud ("we", "us", or "our") collects, uses, and protects your information when you use our file hosting service.

1. Information We Collect

We collect information you provide directly:

• Account data: Email address, username, and hashed password when you register.
• Files: Files you upload are stored securely on encrypted cloud object storage.
• Payment data: Billing information is processed by Stripe. We store only your Stripe customer ID and subscription status — no card numbers.
• Usage data: Download counts, storage usage, and daily download statistics.

2. How We Use Your Information

• To provide and operate the service (file hosting, sharing, downloads).
• To send transactional emails (email verification, 2FA codes, password resets, security alerts).
• To enforce plan limits (storage quotas, download limits, speed limits).
• To prevent abuse and maintain security.
• To communicate service updates and billing changes.

3. Data Storage and Security

Your files are stored on encrypted cloud servers. Passwords are hashed — we never store plaintext passwords. 2FA codes are hashed before storage and expire within 10 minutes. API keys are stored as one-way hashes.

We use HTTPS/TLS for all data in transit. Access to production systems is restricted to authorized personnel.

4. Email Communications

We send transactional emails for account-related purposes only: email verification, two-factor authentication codes, password resets, and security alerts (e.g., password change notifications). We do not send marketing emails unless you explicitly opt in.

5. Sharing Your Information

We do not sell your personal data. We share data only with:

• Cloud storage providers — for file storage and retrieval.
• Stripe — for payment processing and subscription management.
• Email delivery providers — for transactional email delivery.
• Law enforcement or regulatory bodies when required by applicable law.

6. Public File Sharing

When you enable sharing on a file, it becomes accessible to anyone with the share link until the selected expiry time. Share-link limits depend on your plan: Free up to 48 hours, Starter up to 72 hours, and Pro or higher up to 10 days. If you disable sharing before expiry, the link is deactivated immediately. You are responsible for the content of files you share publicly.

7. Data Retention

We retain your account data and files for as long as your account is active. When you delete a file, it is permanently removed from our storage. When you close your account, your files and personal data are deleted within 30 days. Email addresses that have been used on an account may be locked from re-registration for 30 days after an email change for security purposes.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request deletion of your account and associated data.
• Export your files at any time from your dashboard.
• Correct inaccurate account information via Account Settings.

To exercise these rights, contact us at the email below.

9. Cookies

We do not use tracking cookies. We store your authentication token in localStorage for session management only.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the site. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or data requests, contact us at: support@hostedit.cloud

By using hostedit.cloud, you agree to this Privacy Policy.