Privacy Policy

Last updated: October 2026

PhyllHost ("we", "us") respects your privacy. This policy explains what personal data we collect, how we use it, and the rights you have. It applies to our website, customer dashboard and hosting services.

1. Data we collect

• Account data: your name, email address and password (stored as a one-way hash — we cannot read it).
• Billing data: plan, invoices and payment references. Card and mobile-money details are processed by our payment provider (Paystack); we never see or store full payment credentials.
• Service data: websites you deploy, domains you connect, deployment logs and support tickets.
• Technical data: IP addresses, browser type and basic usage logs, collected for security and service operation.
• Cookies: we use a strictly necessary session cookie to keep you logged in. We do not use advertising trackers.

2. How we use your data

• To create and manage your account and provide hosting services.
• To bill you, process refunds and prevent fraud.
• To provide customer support and respond to your tickets.
• To send service-related emails (verification codes, invoices, security notices). We do not send marketing email without your consent.
• To keep the platform secure, detect abuse and comply with legal obligations.

3. Who we share data with

We share data only with the providers needed to run the Service:

• Cloudflare — content delivery, DNS and security for hosted sites.
• Paystack — payment processing.
• Email delivery provider — transactional emails such as verification codes.

We do not sell your personal data. We disclose data to authorities only where required by law.

4. Data retention

We keep account and billing records while your account is active and for up to 6 years afterwards where tax or accounting law requires it. Support tickets are retained for 2 years. You may request earlier deletion as described below, subject to legal retention duties.

5. Security

We protect data with encrypted connections (TLS), hashed passwords, access controls and infrastructure monitoring. No system is perfectly secure; we will notify you of any breach likely to affect you, as required by law.

6. Your rights

Under Ghana's Data Protection Act, 2012 (Act 843) and applicable law, you may request access to, correction of, or deletion of your personal data, and object to certain processing. Email support@phyllhost.com with "Privacy request" in the subject and we will respond within 30 days.

7. Children's privacy

The Service is not directed at children under 18, and we do not knowingly collect their data.

8. Changes to this policy

We may update this policy; material changes will be announced by email or dashboard notice at least 14 days before taking effect.

9. Contact

Privacy questions: support@phyllhost.com.