This policy explains how ODHOST, a unit of Nishita Solutions ("ODHOST", "we") collects and uses personal information when you visit our website, create an account or use our services. We follow India's Digital Personal Data Protection Act, 2023.
What we collect
Account details. Your name, email address, mobile number, state, and optionally your company name and GSTIN. You give us these when you register.
Sign in with Google. If you choose "Continue with Google", Google tells us your name, your email address, whether Google has verified that email, and a number that identifies your Google account. We use them only to sign you in and to create or find your account. We do not receive your Google password or any access to your Gmail, contacts or files, and we do not store your Google profile photo. You can disconnect Google in Settings, Security at any time.
Sign in and security.
- We do not use passwords. You sign in with one-time codes sent to your email. We store only a protected fingerprint of each code, and delete it after a day.
- We record each session's IP address, browser and approximate location, and keep your sign-in history, to protect your account.
- If you set up two-step verification, its secret is stored encrypted.
Billing.
- Your billing name and address, invoices, credit notes and payments.
- Card, UPI and bank details are entered directly with our payment partner. ODHOST does not see or store them. We keep only the payment reference.
Services.
- The domains you host, control panel usernames, and the settings of your services.
- Passwords that we create for your services are stored encrypted. They are shown only after you confirm it is you.
Support and enquiries. Tickets, and messages sent through the contact form or the "Contact us" pop-up (your name, email and mobile number are required), with the time, the IP address and the page they were sent from, and any campaign tags in that page's address.
Website visits. Basic visit statistics, such as which pages were viewed and where visitors came from. They are counted without cookies, using a code that changes every day and cannot be used to identify you.
Google Analytics. If you accept analytics cookies, we use Google Analytics to understand how people find and use our website and account area: pages viewed, buttons and links clicked, how far pages are scrolled, forms started and sent (never what you type in them), plans viewed and ordered, payments and refunds (amounts and invoice numbers only), errors, and your device, browser and approximate location. Google gives us these as statistics. We never send Google your name, email address, phone number, domains or any other contact details. When you are signed in we send a random code instead of your account details, so visits from your different devices can be counted together. Until you choose, Google only receives a count of the visit without cookies or any code that identifies your browser. If you decline, Google Analytics is not used at all and no analytics cookies are set. Your browser's Global Privacy Control or Do Not Track setting counts as declining.
Server logs. Your websites' access and error logs, used to show your traffic and errors in your account and to keep our servers secure.
Why we use it
- To create and run your account and services.
- To send invoices, receipts, reminders, service notices and security alerts.
- To answer support requests.
- To prevent fraud and abuse, and to keep accounts and servers secure.
- To meet legal duties, such as keeping tax records.
We send product news only if you ask for it, and you can stop it at any time in Settings.
Who we share it with
We share only what each provider needs to do its job:
- our payment partner;
- our email delivery provider;
- the companies that provide our servers and network security;
- Google, for the website statistics described above, only if you accept analytics cookies;
- government authorities, when the law requires it.
We do not sell personal information. We do not use advertising cookies.
Cookies
These are needed for the website to work:
- Session cookie: keeps you signed in.
- Trusted device cookie: set only if you choose it at sign in.
- Theme cookie: remembers light or dark mode.
- Cookie choice: remembers whether you accepted or declined analytics cookies.
These are set only if you accept analytics cookies:
- Google Analytics cookies (names starting with _ga): count visits and tell new visitors from returning ones. They last up to 2 years.
You can change your choice at any time with the Cookie settings link at the bottom of every page.
How long we keep it
| Information | Kept for |
|---|---|
| Sign-in codes | 1 day |
| Sign-in history | 1 year |
| Emails we sent you | 180 days |
| Website server logs | 7 days |
| Invoices and payment records | As long as Indian tax law requires |
| Everything else | Until you delete your account, or as long as needed for the purposes above |
Your rights
- Get a copy of your data: Settings, then Privacy and data, then Download my data.
- Correct your details: Settings, or Billing details.
- Delete your account: from Privacy and data. Deletion happens after 7 days, so you can change your mind. Invoices are kept, without your other personal information, because tax law requires it.
- Withdraw consent for optional emails at any time.
- Complain: contact our grievance contact below. If you are not satisfied, you can complain to the Data Protection Board of India.
Security
- Information is sent over encrypted connections.
- Secrets are stored encrypted.
- Staff access is limited by role, needs two-step verification, and is recorded.
Children
Our services are not meant for anyone under 18. We do not knowingly collect their information.
Changes
We will update this policy when our services change and show the date of the latest version at the top. We will tell you about important changes by email or in your account.
Grievance contact
For privacy questions or requests, use our contact page (topic: Privacy) or call +91 9114422066. Write to us at SB-18, near Durga Mandap, Dayanandnagar, Bomikhal, Rasulgarh, Bhubaneswar, Odisha 751010, India.