Legal

Privacy Policy

Last updated: August 24, 2026

This Privacy Policy explains how 237 Host collects, uses, and protects your personal data. We are committed to transparency and compliance with applicable data protection laws, including the Cameroon Data Protection Act and the GDPR where applicable to EU users.

1. Data We Collect

Account Data

  • Name, email address, and password (hashed)
  • Phone number (for Mobile Money payment verification)
  • Account creation date and activity logs

Payment Data

  • Mobile Money transaction IDs and payment confirmations
  • We do not store full payment credentials — transactions are processed by MTN MoMo, Orange Money, or our payment gateway partners

Deployment Data

  • Website files you upload or deploy from GitHub
  • Deployment logs, environment variables, and configuration
  • Domain and DNS records you configure

Technical Data

  • IP address, browser type, and access timestamps
  • Cookies and session data (see our Cookie Policy)

2. How We Use Your Data

  • To provide hosting, deployment, and domain services
  • To process payments and issue invoices
  • To send service notifications (deployment status, SSL provisioning, domain expiration)
  • To provide technical support and respond to inquiries
  • To detect and prevent abuse, fraud, and security threats
  • To improve our platform and develop new features

3. Legal Basis (GDPR)

For users in the European Economic Area, we process personal data based on:

  • Contract — to deliver the services you signed up for
  • Legal obligation — to comply with tax and regulatory requirements
  • Legitimate interest — to secure our platform and prevent abuse
  • Consent — for optional communications like marketing emails

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Payment processors (MTN MoMo, Orange Money) to complete transactions
  • Domain registrars (OpenProvider) to register and manage domains
  • Cloud infrastructure providers to host your websites
  • Legal authorities when required by law or court order

5. Data Retention

We retain your data for as long as your account is active. After account termination, we delete personal data within 30 days, except where retention is required by law (e.g., financial records). Deployment files and snapshots are deleted when you delete a website or deployment.

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Export your data in a portable format
  • Object to certain processing activities
  • Withdraw consent for optional processing

To exercise these rights, contact us at admin@237host.com.

7. Data Security

We implement industry-standard security measures including TLS encryption, hashed passwords, CSRF protection, and regular security scans. However, no system is 100% secure, and we cannot guarantee absolute security.

8. International Transfers

Your data may be processed on servers located outside Cameroon. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

9. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us for deletion.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or dashboard notification.

11. Contact

For privacy questions or data requests, contact admin@237host.com.