Privacy Policy

1. Commitment to Privacy & Transparency

WinWinHost Inc. ("WinWinHost", "we", "us", or "our") respects the privacy of our customers, website visitors, and hosting tenants. We are committed to safeguarding personal information with industry-leading data security standards and adhering strictly to global data protection regulations, including the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR).

This Privacy Policy governs the collection, use, and protection of information obtained through winwinhost.com, our client billing portals, server telemetry streams, and customer support channels. We do not sell, rent, or lease personal information to any third party.

2. Information We Collect

We collect only the information necessary to fulfill contractual obligations, securely provision hosting environments, prevent fraud, and deliver technical support. The categories of information we process include:

• Account & Billing Identification: Name, business entity name, physical billing address, email address, phone number, and tax/identification details required for formal service contracts and invoicing.
• Technical & Telemetry Data: Server access logs, IP addresses, browser user-agent strings, request timestamps, referring URLs, and resource consumption metrics (bandwidth, CPU, memory usage) generated during network interactions.
• Support & Communications: Transcripts of emails, helpdesk tickets, and inquiry forms submitted through our platform to facilitate continuous customer care.
• Domain Registration Data: WHOIS contact information provided during domain name registrations in accordance with ICANN accreditation rules.

Payment transactions are conducted directly through PCI-certified processors (such as the PayPal Web SDK). WinWinHost servers do not store complete credit card or banking numbers.

3. How We Use Collected Data

All personal information collected by WinWinHost is processed exclusively for explicit, legitimate, and specified purposes:

• Provisioning, maintaining, and configuring your web hosting accounts, virtual hosts, and DNS zones.
• Processing subscription renewals, issuing invoices, and maintaining accounting records.
• Detecting, preventing, and mitigating security threats, brute-force attacks, DDoS events, and spam distribution.
• Transmitting critical service alerts, scheduled maintenance notices, and security advisories.
• Providing technical assistance, server troubleshooting, and debugging services requested by the customer.

Access to client data is strictly restricted to authorized engineering and billing personnel bound by strict non-disclosure obligations.

4. Your Data Protection Rights

As the rightful owner of your personal data, you maintain comprehensive rights regarding the processing and storage of information:

• Right of Access: You may request free written confirmation and copies of personal data processed by WinWinHost.
• Right of Rectification: You may require the immediate correction or completion of inaccurate or outdated information in your account profile.
• Right of Erasure ("Right to be Forgotten"): Following termination of hosting services, you may request permanent deletion of your account records, subject to legal accounting retention obligations.
• Right to Object & Restrict Processing: You may object at any time to data processing for direct marketing or promotional communications without charge or justification.
• Right to Data Portability: You may request an export of your account configuration and database files in standard, machine-readable formats.
• Right to Non-Discrimination: We do not deny services, charge differentiated prices, or alter service levels when you exercise statutory privacy rights.

5. Cookies, Analytics & Web Telemetry

WinWinHost uses essential and analytical cookies to ensure platform reliability, preserve active session security, and evaluate user navigation patterns:

• Essential Session Cookies: Required to maintain secure client logins, CSRF token validation, and form security verifications.
• Performance & Telemetry Analytics: We utilize aggregated telemetry tools (such as Microsoft Clarity and Google Analytics 4) to monitor Core Web Vitals, page load speeds, and browser compatibility. These analytics do not capture sensitive passwords or payment details.

You may configure your browser to block or delete cookies at any time; however, disabling essential cookies may impact certain account dashboard features.

6. Security Safeguards & Encryption Standards

WinWinHost implements defense-in-depth infrastructure safeguards to protect customer data from unauthorized access, accidental alteration, disclosure, or destruction. Our security controls include:

• End-to-end 256-bit SSL/TLS encryption across all public web endpoints and administrative interfaces.
• Hardware and software firewall perimeter inspection, rate limiting, and automated brute-force IP throttling.
• Argon2 / bcrypt password hashing with unique per-user cryptographic salts.
• Isolated containerized process execution ensuring strict multi-tenant separation across shared hosting servers.

7. Third-Party Disclosures & Legal Exceptions

WinWinHost does not sell, trade, or transfer personal data to third parties for independent commercial marketing. Information is disclosed solely under the following defined circumstances:

• Vetted Infrastructure Providers: Certified cloud data centers, upstream transit carriers, and payment processors who assist in operating our hosting network under strict confidentiality agreements.
• Legal & Law Enforcement Compliance: When compelled by valid subpoena, court order, or binding legal process issued by competent public authorities for the prevention or investigation of criminal conduct.
• Protection of Rights: When disclosure is necessary to investigate severe violations of our Acceptable Use Policy, combat systemic fraud, or protect the vital safety of our cluster and clients.

8. Privacy Inquiries & Data Protection Contact

If you have questions regarding this Privacy Policy, wish to exercise any statutory data protection rights, or need to report a privacy concern, please contact our Data Protection Office:

We respond to verified privacy and access requests within thirty (30) days in accordance with statutory requirements.