Privacy & Data Protection Policy

Effective Date: Immediate • Governing: Data Processing, Security Telemetry, Storage & Customer Rights

1. Commitment to Data Privacy

Altivora Hosting("Company", "we", "us", or "our") is firmly dedicated to safeguarding the privacy, confidentiality, and security of our users ("Customer", "you", or "your").

This Privacy Policy details the types of personal data and technical telemetry we collect when you visit our website (altivorahosting.com), access our client portal, or purchase hosting services, and how that information is securely processed in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act, India), the Information Technology Act, 2000, and international data standards including the General Data Protection Regulation (GDPR).

2. Categories of Information We Collect

👤 Account Identification

Legal full name, registered email address, physical postal address, contact phone number, and tax/GST identification numbers.

💳 Payment Telemetry

Transaction IDs, invoice numbers, and payment tokens. (Raw card numbers and CVVs are handled exclusively by PCI-DSS Level 1 certified gateways such as Razorpay and PayPal; Altivora never stores raw payment card data).

🌐 Network & Security Telemetry

Origin IP addresses, browser user-agents, connection timestamps, kernel flow statistics, and DDoS attack signatures required to protect infrastructure.

💬 Customer Correspondence

Support ticket histories, Discord customer support logs, verification emails, and service configuration requests.

3. Lawful Basis & Purposes of Data Processing

We process your data strictly under the following lawful grounds:

Contractual Performance: Provisioning your VPS, game servers, bare-metal hardware, and routing your traffic.
Billing & Invoicing: Generating compliant GST invoices, processing recurring subscriptions, and managing refunds.
Infrastructure Security: Preventing fraud, mitigating volumetric DDoS attacks, detecting compromised credentials, and enforcing our AUP.
Statutory Compliance: Retaining mandatory accounting and tax records as required by Indian tax authorities and global statutory laws.

4. Zero Data Brokering & Non-Disclosure Guarantee

Altivora Hosting operates on a strict zero-data-monetization policy.

We do NOT sell, rent, lease, trade, or monetize customer personal data, contact information, or server telemetry to any third-party advertisers, data brokers, or marketing syndicates. Your data is utilized exclusively for provisioning and securing your hosting services.

5. Data Retention & Erasure Protocols

We retain personal data only for as long as strictly necessary to fulfill the purposes for which it was collected:

Active Account Data: Retained for the duration of your active subscription and service lifecycle.
Security & Access Logs: Retained for 90 to 180 days for forensic analysis and security auditing, after which logs are permanently rotated and deleted.
Financial & Tax Invoices: Retained for seven (7) years to comply with mandatory statutory audits under Indian tax and corporate law.
Terminated Server Storage: Disk images and virtual volumes are permanently purged immediately upon service termination.

6. Your Data Rights & Grievance Redressal

Under applicable data protection legislation (including DPDP Act 2023 and GDPR), you possess the right to:

Request a copy of the personal information Altivora maintains regarding your account.
Request correction or updating of inaccurate personal or billing records.
Request account closure and erasure of personal data (subject to mandatory statutory tax retention obligations).

Data Protection & Grievance Officer:

For Data Subject Access Requests (DSAR), privacy questions, or grievances, contact our Data Protection Officer directly at:[email protected]

For questions or assistance regarding data privacy, contact [email protected].