Who is the controller
iPlusHost is the data controller for account and billing data. The contracting entity depends on your region: iPlusHost LLC (Ashburn, VA), iPlusHost GmbH (Frankfurt) or iPlusHost India Pvt Ltd (Bengaluru).
What we collect
Account details you give us (name, company, address, email, phone, tax number); billing records and payment references, never full card numbers; technical data needed to run the service (IP addresses, access and error logs); and support correspondence.
Why we hold it
To provide and bill for the service you ordered, to meet legal and tax obligations, to detect abuse and secure the platform, and — only with consent — to send product news.
Where your data lives
Account and billing data is stored in the region that invoices you. Hosting data stays in the datacenter region you select and is not moved without your instruction. EU customer data does not leave the EU; Indian customer data stays in India.
Processors we use
Payment processing (Stripe, PayPal, Razorpay), transactional email, error monitoring and our ticketing system. Each is bound by a data processing agreement and a list is available on request.
How long we keep it
Account and invoice records are retained for the period required by tax law in the contracting jurisdiction — typically 7 years. Access logs are kept 90 days. Deleted service data is purged within 30 days of termination.
Your rights
Access, correction, export, deletion, restriction and objection. Under GDPR you may also lodge a complaint with your supervisory authority; under India’s DPDP Act you may nominate a representative. Email privacy [at] iplushost [dot] com and we respond within 30 days.
Security
Encryption in transit, encryption at rest for backups, 2FA on the client area, least-privilege staff access with audit logging, and annual penetration testing.