Privacy policy

MikaHosting ("we", "us") sells web hosting and cloud servers from our own facility in Dallas, Texas. This policy explains what data we collect, why we collect it, and how long we keep it. We wrote it in plain language on purpose — if any part is unclear, open a support ticket and we will explain it.

1. What we collect

Account data. When you sign up we store your email address, name (if you give it) and a one-way hash of your password. Your email address is your login and the address we send service notifications to.

Billing data. We keep records of your orders, invoices, payment methods and refunds. Card details are handled by our payment processor; we store only the last four digits, the expiry and the processor's token — never the full number.

Service data. To operate your plans and servers we store your account status, active subscriptions, provisioning records (IP addresses and credentials for the servers you ordered) and support tickets. Support tickets are visible to you and to the engineers working them.

Technical data. We log authentication events and service-level activity (logins, provisioning actions, email delivery status) to secure accounts and diagnose problems.

2. What we use it for

• Operating your account, provisioning your servers and delivering the service you paid for.
• Transactional emails: welcome, verification, order confirmation, provisioning status, payment failure. These are service messages, not marketing.
• Billing, invoicing, prorated upgrades and refunds.
• Support tickets — which are the only way to reach support, so the full history stays in your account.
• Abuse prevention and network security, including the email verification step required before provisioning.

3. What we never do

• We do not sell, rent or trade your personal data. Ever.
• We do not send marketing email from your account data. There is no advertising list to opt out of.
• We do not read the contents of your website files, databases or VM disks except to respond to a support ticket you opened or a legally valid request.

4. Sharing

We share the minimum necessary data with a small set of processors: our payment processor (billing), our transactional email provider (service notifications) and our infrastructure suppliers (network and hardware at our Dallas facility). We disclose data to law enforcement only on a valid legal request, and we notify you unless we are legally prohibited from doing so.

5. Retention

Account and billing records are kept while your account is active and for seven years after closure, as required for financial records. Support tickets are kept for two years after closure. Server credentials shown in your dashboard are yours to rotate; we never store them in plaintext beyond the initial provisioning display.

6. Your rights

You can access and correct your data from your dashboard at any time. You can request a full export or deletion of your account by opening a support ticket from the account in question — we verify identity through the account itself, not by email reply. Requests are completed within 30 days.

7. Security

All traffic is encrypted in transit with TLS. Passwords are stored as one-way hashes. Access to customer data is limited to engineers on duty, and every administrative action is logged. Failed payment handling and service suspension are automated so no human reads your billing data by default.

8. Changes

If we change this policy materially we will email the address on your account and update the date at the top of this page. Continued use of the service after the effective date means you accept the updated policy.