> For the complete documentation index, see [llms.txt](https://docs.wavehost.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.wavehost.org/policies/privacy-policy.md). # Privacy Policy [Link](https://docs.google.com/document/d/10RqI2a30yzZzoZQHhf5-dlTdwh29LpgaskTdWu9bMDo/edit?usp=sharing) ## Wave Host Privacy Policy Effective Date: 7/8/2026 Last Updated: 7/8/2026 ### 1. Introduction Wave Host ("Wave Host," "we," "us," or "our") provides web hosting, email hosting, and related infrastructure services at wavehost.org (the "Services"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using our Services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Services. ### 2. Information We Collect #### 2.1 Account Information When you sign up for an account, we collect information such as your name, email address, billing/mailing address, and phone number (if provided). #### 2.2 Payment Information Payments are processed through third-party payment processors (e.g., Stripe). We do not store full credit card numbers on our own servers. We retain transaction records such as billing history, invoice amounts, and payment status. #### 2.3 Service and Usage Data Depending on which Services you use, we may collect:
* Server and hosting account configuration data * Email account metadata (e.g., mailbox size, send/receive logs) for accounts hosted through our Mailcow-based email service — we do not read the content of your email * IP addresses, access logs, and timestamps for security and troubleshooting purposes * DNS records and domain configuration associated with your account #### 2.4 Support Communications When you contact support (via ticket, email, or chat), we retain the content of those communications to resolve your issue and improve our service. #### 2.5 Website & Cookies Our website may use cookies or similar technologies for basic functionality (e.g., staying logged in) and, if enabled, Google Analytics. Visitors from the EU are shown a cookie consent option before any non-essential cookies (such as Google Analytics) are set. ### 3. How We Use Your Information We use collected information to:
* Provision, maintain, and secure the Services you've purchased * Process payments and send billing notices * Respond to support requests * Monitor for abuse, fraud, or violations of our Terms of Service * Send service-related communications (maintenance notices, security alerts) * Improve and troubleshoot our infrastructure * Comply with legal obligations
We do not sell your personal information to third parties. ### 4. How We Share Your Information We share information only in the following circumstances:
* Service providers: Third parties who help us operate the business, such as payment processors (e.g., Stripe/Paymenter), and infrastructure or remote-access tools we use internally. These providers only receive the information needed to perform their function and are bound by confidentiality obligations. * Legal requirements: If required by law, subpoena, or legal process, or to protect the rights, property, or safety of Wave Host, our customers, or others. * Business transfers: If Wave Host is involved in a merger, acquisition, or sale of assets, customer information may be transferred as part of that transaction, subject to this policy. ### 5. Data Retention We retain account and billing information for as long as your account is active and for a reasonable period afterward to comply with legal, tax, and accounting obligations. Server/email data is retained per our backup policy (currently: daily backups retained for 7 days) and is deleted upon account termination, subject to backup rotation schedules. ### 6. Data Security We take reasonable technical and organizational measures to protect your information, including access controls, encrypted connections (TLS/SSL), and restricted internal access to customer data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. ### 7. Your Rights and Choices Depending on your location, you may have the right to:
* Access the personal information we hold about you * Request correction of inaccurate information * Request deletion of your account and associated data * Object to or restrict certain processing * Request a copy of your data in a portable format
To exercise any of these rights, contact us at . #### 7.1 Additional Rights for EU/EEA Users (GDPR) If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) applies to our processing of your personal data. In addition to the rights listed above, you have the right to:
* Data portability — receive your personal data in a structured, commonly-used, machine-readable format * Restriction of processing — request that we limit how we use your data in certain circumstances * Lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data properly
Legal basis for processing. We process your personal data on the following legal bases: performance of a contract (account provisioning, billing), legitimate interest (security monitoring, fraud prevention, service improvement), and consent (optional cookies such as analytics, which you can decline).
International data transfers. Wave Host's infrastructure is based in the United States. Where we transfer personal data of EU/EEA users outside the EU/EEA, we rely on appropriate safeguards, such as Standard Contractual Clauses, to ensure your data continues to receive an equivalent level of protection.
EU representative. \[Wave Host currently processes EU customer data on a small scale and believes it qualifies for the Article 27 exemption for occasional, low-risk processing. If EU customer volume grows, we will appoint an EU representative and update this section with their contact details.]
No Data Protection Officer required. Given the scale and nature of our processing, Wave Host is not required to appoint a Data Protection Officer under Article 37. You can still direct any privacy inquiries to . #### 7.2 Additional Disclosures for California Residents (CCPA/CPRA) Wave Host does not currently meet the California Consumer Privacy Act's applicability thresholds (annual gross revenue over $26,625,000, buying/selling/sharing personal information of 100,000+ California consumers or households annually, or deriving 50%+ of revenue from selling/sharing personal information), so the CCPA does not currently impose legal obligations on us. We're including this section voluntarily for transparency, and will update it if that changes.
* We do not sell or share your personal information, as those terms are defined under the CCPA. * California residents may request to know what personal information we hold, request correction, and request deletion, using the same contact method above (). * We will not discriminate against you for exercising any of these rights. * You may designate an authorized agent to make a request on your behalf; we may ask for verification of that authorization. ### 8. Children's Privacy Our Services are not directed to individuals under the age of 13 (or 16, where applicable), and we do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it. ### 9. Third-Party Links Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies. ### 10. Changes to This Policy We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our website prior to the change taking effect. Continued use of the Services after changes constitutes acceptance. ### 11. Contact Us If you have questions about this Privacy Policy or how your data is handled, contact us at:
Wave Host Email: Website: wavehost.org
***