Account data (name, email, organization), authentication and security logs (hashed IP, user agent summary), billing and invoice data, support tickets, domain registration contacts when you use domain services, and technical usage metering for billable resources. We do not use your data for advertising, we do not sell it, and we make no automated decisions with legal effect about you.
Privacy policy
How Hostport processes personal data (GDPR).
Hostport, Stortorp 624, 705 95 Örebro, is the controller for the personal data described on this page. We process personal data to provide accounts, billing, support, and the infrastructure services you request — nothing else. Contact: privacy@hostport.net.
Data we process
Your workloads and your users
Content you deploy, data in your databases, and end users in your login pools belong to you. For that data you are the controller and Hostport is a processor acting on your instructions — the data processing terms in the terms of service (section 5) govern that processing. This page covers only the data where Hostport itself is the controller.
Legal bases
Contract performance (Art. 6(1)(b)) for service delivery; legitimate interest (Art. 6(1)(f)) for security monitoring and fraud prevention; legal obligation (Art. 6(1)(c)) for invoicing and accounting retention.
Where data lives
The platform runs on infrastructure in Sweden and data is processed within the EU/EEA. A few optional integrations involve transfers outside the EU/EEA (for example GitHub for git deploys and Stripe for card payments, where enabled) — these are listed on the sub-processor page and rely on appropriate safeguards such as EU standard contractual clauses.
Security
Secrets and database credentials are encrypted at rest, traffic is encrypted in transit (TLS), access is role-based and audited, and authentication supports MFA. If a personal data breach affects you, we notify you and IMY as GDPR requires.
Retention
Auth audit events: 90 days. Operator audit logs: 365 days. Closed support tickets: 730 days. Issued invoices: retained per Swedish accounting law (7 years). You may delete your account in Hostport settings; we orchestrate erasure across platform services, keeping only what law requires us to keep.
Your rights
Access, rectification, erasure, restriction, portability, and objection under GDPR. Use data export and account deletion in the portal, or contact privacy@hostport.net. You may lodge a complaint with IMY (Integritetsskyddsmyndigheten, imy.se).
Cookies and terms
Cookies in the portal are described on the cookie page (the marketing site hostport.net sets none at all). Use of the platform is governed by our terms of service. Sub-processors are listed on the sub-processor page.
Changes
If we change this policy in a way that matters, we tell you in the portal or by email before the change takes effect.