Privacy Policy

Last updated: October 26, 2026

This policy explains what personal information X4D Hosting collects, why, and the choices you have. We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

1. What we collect

• Account details: your name, email address, and your password (stored only as a one-way hash, never in readable form).
• Service details: your subdomains, hosting account status, DNS records, SSL certificates, support tickets, and notifications.
• Payment details: amount, payment method (GCash, Maya or bank), the reference number you enter, and the receipt image if you upload one. We never receive your card, GCash PIN or bank password.
• Security records: IP address, browser details, sign-in times and an activity log, used to protect accounts and investigate abuse.
• Cookies: one essential session cookie that keeps you signed in. We don't use advertising or tracking cookies.

2. How we use it

To create and run your account and hosting, verify your email, process and check payments, answer support requests, send service and security emails, prevent fraud and abuse, and meet legal obligations. We send announcements only if you allow them (you can switch them off in Account settings or with the link in any announcement).

3. Who we share it with

Only with the services needed to run the platform:

• our hosting infrastructure, which receives your email address and domain to create your hosting account;
• Cloudflare, which serves DNS and SSL for our subdomains;
• our email provider, to deliver messages to you;
• certificate authorities (Let's Encrypt or ZeroSSL) when you request a certificate for your own domain (they see the domain name only);
• authorities, when the law requires it.

We do not sell or rent personal information. Some of these providers process data outside the Philippines; we use providers that protect it appropriately.

4. How long we keep it

We keep account data while your account exists. When you delete your account we remove your name and email and close your hosting; payment records are kept as long as accounting and tax rules require, and security logs for up to 12 months.

5. Security

Passwords are hashed, sensitive secrets are encrypted, receipts are stored outside the public website, and staff access is limited and logged. No system is perfectly secure, so please use a strong, unique password.

6. Your rights

You can access and correct your details in Account settings, download what you need from your dashboard, object to announcements, and delete your account. You can also ask us what data we hold about you, or file a complaint with the National Privacy Commission (privacy.gov.ph).

7. Changes

If we change this policy in an important way we will notify you in the dashboard or by email. The date at the top shows the latest version.

8. Contact

For privacy questions or requests, open a support ticket or email [email protected].