Privacy Policy

TERM, PAYMENT, ACCOUNT RENEWAL

Term of Service. Service terms begin on the date of order or provisioning and continue for the initial term selected during checkout. Unless cancelled, services automatically renew for successive terms at the then-current rates.

Payment. You agree to pay all fees when due, including taxes and any applicable third‑party charges (e.g., registry fees). Invoices are issued to your client area and are payable by the stated due date. Late or failed payments may result in suspension or termination.

Renewals. To avoid interruption, eligible services are set to auto‑renew. You may disable auto‑renew in the client area before the renewal date. Domains and SSLs are subject to registry/CA rules; failure to renew on time may lead to expiration or redemption fees.

Authorization. If you order on behalf of a business, you represent that you are authorized to bind the entity and authorize recurring charges for renewals unless cancelled.

REFUND POLICY

We aim for your satisfaction with Tupoa Hosting services. This Refund Policy describes when refunds may be available.

• 30‑Day Money‑Back (Shared Hosting only): New shared hosting plans may be refunded within 30 days of initial purchase, excluding domain, SSL, setup, or migration fees.
• Non‑Refundable Items: Domain registrations/transfers/renewals, SSL certificates, software licenses, dedicated IPs, and any third‑party or usage‑based fees.
• VPS/Dedicated/Cloud: Unless required by law, infrastructure services are non‑refundable once provisioned due to resource allocation.
• Renewals: Renewal payments are generally non‑refundable; cancel before renewal to avoid further charges.
• Abuse/Violations: Accounts terminated for policy violations or abuse are not eligible for refunds.
• Refund Method: Approved refunds are issued to the original payment method when possible; otherwise, account credit may be provided.

To request a refund, open a ticket in the Client Area within the applicable timeframe.

SECURITY

We take the security of Tupoa Hosting services seriously and implement administrative, technical, and physical safeguards designed to protect your data and systems.

• Controls: encryption in transit, hardened configurations, network firewalls, access controls, logging, and regular updates.
• Shared Responsibility: you are responsible for securing your applications, credentials, file permissions, and third‑party software installed on your account.
• Vulnerability Reporting: report suspected vulnerabilities or breaches to security@localhost/tupoahosting. We review and act on credible reports.
• Incidents: in the event of a security incident impacting your service, we will notify you where required and provide guidance to mitigate risk.
• Backups: if backups are included with your plan, they are provided on a best‑effort basis; you must maintain your own independent backups.

PROPRIETARY RIGHTS

All content, software, designs, and materials provided by Tupoa Hosting, including our website, documentation, and service platforms, are owned by Tupoa Hosting or our licensors and are protected by intellectual property laws.

• Your Content: you retain ownership of content you upload or host. You grant Tupoa Hosting a limited license to store, transmit, and process your content solely to provide services.
• Our IP: you are granted a limited, non‑exclusive, non‑transferable right to use our services during your subscription. You may not copy, modify, reverse engineer, or create derivative works of our systems or software except as permitted by law.
• Trademarks: Tupoa Hosting names, logos, and marks may not be used without our prior written consent.
• Third‑Party Software: components provided under third‑party licenses are subject to their respective terms.

Privacy & Cookie Policy

Last updated: September 2025

This Privacy & Cookie Policy explains how Tupoa Hosting ("Tupoa Hosting", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you visit our website, use our client area, or purchase our products and services, including web hosting, domains, email, and related solutions. By using our services, you agree to the practices described in this policy.

1. Information We Collect

• Account and Contact Information: name, company name, billing and physical address, email address, phone number.
• Billing Information: payment method details provided to our payment processors (we do not store full card numbers).
• Service Data: domain registrations, hosting configurations, server logs, support tickets, and communications.
• Usage Data: IP address, browser type, device identifiers, pages visited, and timestamps.
• Verification Data: identity documentation where required by law or to prevent fraud/abuse.

2. How We Use Your Information

• Provide, activate, and manage services you order.
• Process payments, invoices, refunds, and renewals.
• Communicate about service changes, incidents, support, and marketing (you can opt out of marketing at any time).
• Maintain security, prevent fraud/abuse, comply with legal obligations, and enforce our agreements.
• Improve our website, products, and customer experience.

3. Legal Bases (EEA/UK)

Where applicable, we process personal data under the following legal bases: performance of a contract, legitimate interests (such as network and account security), compliance with legal obligations, and consent (for certain marketing or non-essential cookies).

4. Sharing and Disclosure

• Vendors/Processors: infrastructure, billing, fraud prevention, and support partners who process data on our behalf under contracts.
• Domain Registries/ICANN: for domain registrations and WHOIS/RDAP requirements, per registry policies and applicable law.
• Legal and Compliance: to comply with laws, lawful requests, and to protect rights, property, or safety.
• Business Transfers: in connection with a merger, acquisition, or sale of assets, with protections in place.

5. International Transfers

Your information may be transferred to and processed in countries other than your own. Where required, we implement appropriate safeguards such as Standard Contractual Clauses.

6. Data Retention

We retain personal data for as long as needed to provide services, meet legal, tax, and accounting obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and context.

7. Security

We use administrative, technical, and physical security measures designed to protect your information, including encryption in transit, access controls, logging, and regular reviews. No method of transmission or storage is 100% secure.

8. Your Rights and Choices

• Access, Rectification, Deletion: request access to, correction of, or deletion of your personal data, subject to legal limits.
• Restriction and Objection: object to or request restriction of certain processing.
• Portability: request a copy of your data in a portable format.
• Marketing: opt out of marketing communications via the unsubscribe link or client area preferences.
• Cookies: manage non-essential cookies as described below.

9. Cookies and Similar Technologies

We use cookies and similar technologies to operate our site and services, remember preferences, analyze traffic, and personalize content.

• Strictly Necessary: required for login, shopping cart, and security.
• Performance/Analytics: help us understand usage (e.g., pages visited, time on site).
• Functionality: remember preferences such as language and region.
• Advertising: used, where applicable, to measure and deliver relevant ads.

You can control cookies via your browser settings and, where available, our cookie banner or preferences center. Disabling certain cookies may affect site functionality.

10. Children’s Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us to delete it.

11. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices. Review their policies before providing personal data.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes indicates acceptance.

13. Contact Us

If you have questions or requests regarding this policy or your data, contact us:

Tupoa Hosting
Website: localhost/tupoahosting
Email: privacy@localhost/tupoahosting
Support: Client Area

GENERAL POLICIES

These General Policies govern your use of Tupoa Hosting services, including hosting, domains, email, security, and add-ons. By using our services, you agree to comply with these policies in addition to our Terms of Service and any service-specific agreements.

1. Acceptable Use

• Services must not be used for illegal activity, spam, malware distribution, phishing, intellectual property infringement, or abusive behavior.
• Resource-heavy processes that negatively impact server stability may be limited or terminated.
• Bulk email is prohibited except through approved and compliant email services with proper consent and unsubscribe mechanisms.

2. Account Security and Access

• You are responsible for maintaining the confidentiality of your credentials and for all activity under your account.
• Use strong, unique passwords and multi-factor authentication where available.
• Immediately notify us of suspected unauthorized access or security incidents.

3. Server Resources and Fair Use

• Shared hosting is a pooled environment; excessive CPU, RAM, I/O, or entry processes may be throttled.
• Unmetered/bandwidth terms are subject to fair-use and reasonable utilization.
• Background tasks, daemons, or persistent processes require prior approval.

4. Content and Compliance

• You must ensure your content complies with applicable laws and rights of others.
• High-risk content (e.g., financial data, health data) may require dedicated or compliant solutions.
• We may remove or disable content that violates these policies or the law.

5. Backups and Data

• Our backups (if provided) are for disaster recovery and not guaranteed; maintain your own independent backups.
• You are responsible for your data integrity, export, and retention.

6. Availability and Maintenance

• We strive for high availability; planned maintenance will be communicated when possible.
• Emergency maintenance may occur without prior notice to protect the platform.

7. Domains and DNS

• Domain registrations, transfers, and renewals are subject to registry and ICANN rules.
• Keep WHOIS/RDAP contact information accurate to avoid suspension.
• Expired domains may enter redemption with additional fees per registry policy.

8. Billing, Renewals, and Cancellation

• Services renew automatically unless cancelled before the renewal date in the client area.
• Invoices are due upon receipt; late or unpaid accounts may be suspended or terminated.
• Some fees (e.g., setup, domain, SSL) are non-refundable once processed.

9. Suspension and Termination

• We may suspend/terminate services for non-payment, abuse, policy violations, or legal requests.
• We will attempt to notify you when practical, but serious violations may result in immediate action.

10. Changes to Services and Policies

• We may update services, pricing, and these policies; material changes will be posted in the client area or website.
• Continued use after changes constitutes acceptance of the updated policies.

11. Governing Law

These policies are governed by the laws of Kenya, without regard to conflict of laws. Venue for disputes shall be as provided in our Terms of Service.

12. Contact

Questions about these policies? Contact support@localhost/tupoahosting or visit our Client Area.