Privacy Policy

This Privacy Policy explains how Afforet Innovation Private Limited ("Afforet", "we"), operating Afforet Hosting, collects, uses and protects your personal data when you use www.afforet.in/hosting, the customer portal at hosting.afforet.in and our hosting services. We process personal data in accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

1. Data we collect

• Account details: name, company name, email address, phone number, postal address and your customer ID.
• Contact form: the name, email, phone number and message you send us.
• Service data: your domain names, website files, SSH public keys, DNS settings and, if you choose automatic DNS, your domain registrar API token (stored encrypted).
• Payment data: plan, amount, date and Razorpay payment/order IDs. Card, UPI and bank details are collected and processed by Razorpay, not by us.
• Technical data: IP addresses, login times and server logs needed to run and secure the Services.

2. How we use it

To create and manage your account, provide and support the Services, process payments and issue bills, send service emails (welcome details, plan reminders, security alerts), prevent fraud and abuse, and meet legal and tax obligations. We do not sell your personal data and we do not send marketing emails without your consent.

3. Sharing

We share data only with: Razorpay (payment processing), your domain registrar (only when you enable automatic DNS), Google reCAPTCHA (spam protection on our contact form), and government authorities when required by law.

4. Cookies

The customer portal uses a session cookie to keep you signed in. We do not use advertising cookies.

5. Security

Data is sent over HTTPS, portal logins are protected by passwords and two-factor authentication (TOTP), secrets are stored encrypted, and our servers are located in India with restricted access.

6. Retention

We keep account and payment records for as long as your account is active and afterwards as long as required by tax and accounting law (generally 8 years). Website files are deleted after the hosting plan ends and is not renewed.

7. Your rights

You may ask to access, correct or delete your personal data, or withdraw consent, by emailing hosting@afforet.in. Some data may be kept where the law requires it.

8. Grievance Officer

For any complaint about the processing of your personal data, contact our Grievance Officer at hosting@afforet.in, phone +91 93458 13130, or by post at the address below. We acknowledge complaints within 48 hours and resolve them within 30 days.

9. Changes

We may update this policy; the latest version is always on this page with its "Last updated" date.