Effective Date: August 31, 2026
Last Updated: August 31, 2026
This Privacy Policy explains how HostFlow Network LLC (“HostFlow,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information through:
-
HostFlow game-server hosting
-
HostFlow Discord bot hosting
-
HostFlow website hosting
-
HostFlow support and related services
1. Information We Collect
Account information
We may collect:
-
Full name
-
Email address
-
Telephone number
-
Billing and mailing address
-
Company or organization name
-
Account username and identifiers
-
Communication preferences
Billing and transaction information
We may collect:
-
Products ordered
-
Invoice and transaction records
-
Billing frequency
-
Payment status
-
Payment-provider identifiers
-
Limited payment-method details, such as card type and last four digits
-
Tax-related information where required
Payment credentials are generally processed by payment providers such as Stripe or PayPal. HostFlow may receive limited transaction information but does not need to receive your complete payment-card number when the provider handles it directly.
Technical information
We may automatically collect:
-
IP address
-
Browser and device information
-
Operating system
-
Login dates and times
-
Pages visited
-
Referring URLs
-
Session and cookie identifiers
-
Security and fraud signals
-
Control-panel and service activity
Hosting and service information
Providing hosting may require processing:
-
Server names and identifiers
-
Game-server configurations
-
Website files and databases
-
Discord bot files, tokens, or application identifiers
-
Server logs
-
Resource usage
-
Network traffic metadata
-
Backup metadata
-
Installed software, plugins, and mods
-
Technical diagnostic information
HostFlow does not claim ownership of customer-hosted content.
Discord information
If you connect Discord or use Discord-related features, we may receive information authorized through Discord, such as:
-
Discord user ID
-
Username and display name
-
Avatar
-
Server or role information
-
Authentication tokens or authorization records
-
Information required to operate an authorized Discord bot
Communications
We collect information you provide through:
-
Support tickets
-
Emails
-
Contact forms
-
Account notes
-
Sales inquiries
-
Abuse reports
-
Surveys or feedback
2. How We Use Information
HostFlow may use personal information to:
-
Create and manage accounts
-
Process orders, invoices, payments, refunds, and renewals
-
Provision and maintain hosting services
-
Authenticate users
-
Provide support
-
Send service, billing, renewal, and security notices
-
Detect fraud, abuse, attacks, and unauthorized access
-
Monitor performance and resource usage
-
Enforce our Terms and policies
-
Improve our services and website
-
Comply with legal, tax, accounting, and regulatory obligations
-
Establish, exercise, or defend legal claims
-
Send marketing messages where permitted
Where applicable, our legal bases may include performing a contract, complying with legal obligations, protecting legitimate business and security interests, and obtaining consent.
3. How We Share Information
HostFlow may disclose information to service providers that help us operate our business.
These may include:
-
WHMCS: Account, ordering, billing, invoice, and support management
-
Stripe and PayPal: Payment processing, fraud prevention, refunds, and disputes
-
Cloudflare: Website delivery, network security, traffic filtering, and performance
-
Discord: Authentication, bot operation, and authorized Discord integrations
-
Pterodactyl: Server management and control-panel functions
-
Infrastructure providers: Servers, data centers, networks, storage, and backups
-
Email and support providers: Transactional messages and customer support
-
Security and fraud providers: Order screening and abuse prevention
-
Professional advisers: Legal, accounting, insurance, and compliance services
We may also disclose information:
-
With your direction or consent
-
To comply with valid legal requirements
-
To investigate fraud, abuse, security incidents, or policy violations
-
To protect HostFlow, customers, providers, or the public
-
In connection with a merger, financing, acquisition, reorganization, or sale of business assets
Pterodactyl may operate within HostFlow’s own infrastructure rather than receiving information as an independent company. It is listed here because it forms part of the systems used to manage hosting services.
4. Customer-Hosted Personal Information
Customers may upload or process personal information through their hosted servers, websites, databases, or bots.
For that information, the customer generally determines why and how the information is processed. The customer is responsible for providing required notices, obtaining consent, responding to user requests, and complying with applicable privacy laws.
To the extent required by applicable law, HostFlow acts as a service provider or data processor for that customer-hosted information and processes it to provide and secure the service.
5. Cookies and Similar Technologies
HostFlow uses essential cookies and similar technologies for:
-
Login sessions
-
Shopping-cart functions
-
Account security
-
Fraud prevention
-
Customer preferences
-
Website operation
We may use analytics technologies to understand website performance and usage. Where required, nonessential analytics or advertising technologies will only be used after appropriate consent.
You can control cookies through your browser and any cookie controls displayed on our website. Blocking essential cookies may prevent account, checkout, or Client Area features from working.
Because there is not a uniform industry standard for browser “Do Not Track” signals, our website does not currently respond to them. Where legally required, we honor supported opt-out signals such as Global Privacy Control.
6. Selling or Sharing Personal Information
HostFlow does not sell personal information for money.
HostFlow does not use or share personal information for cross-context behavioral advertising unless this policy and the applicable website controls are updated to disclose that practice.
7. Data Retention
We retain information only for as long as reasonably necessary to:
-
Provide the services
-
Maintain business and transaction records
-
Meet tax, accounting, and legal requirements
-
Resolve disputes
-
Prevent fraud and abuse
-
Enforce our agreements
-
Protect our systems
Retention periods depend on the type of information, the service involved, legal requirements, security needs, and whether an account or dispute remains active.
Hosted content may be deleted after a trial expires or a service is canceled or terminated. Backup copies may remain temporarily until overwritten through normal backup cycles.
You should export all required data before terminating a service.
8. Data Security
HostFlow uses reasonable administrative, technical, and organizational safeguards designed to protect personal information.
However, no internet transmission, hosting platform, or storage system can be guaranteed completely secure. Customers are responsible for securing their credentials, software, bots, websites, plugins, and hosted applications.
If HostFlow identifies a qualifying personal-data breach, we will provide notices required by applicable law.
9. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
-
Request access to personal information
-
Request correction of inaccurate information
-
Request deletion
-
Obtain a portable copy
-
Object to or restrict certain processing
-
Withdraw consent where processing relies on consent
-
Opt out of marketing messages
-
Appeal the denial of an eligible privacy request
-
Receive information about categories of data and disclosures
These rights may be subject to legal exceptions. For example, HostFlow may retain information needed for invoices, taxes, fraud prevention, security, disputes, or legal compliance.
Submit a privacy request through the HostFlow Client Area by opening a support ticket.
We may verify your identity before completing a request. Authorized agents may be required to provide proof of their authority.
HostFlow will not unlawfully discriminate against you for exercising applicable privacy rights.
10. Marketing Communications
You may unsubscribe from promotional emails using the link included in the message or by contacting HostFlow.
Even after opting out of marketing, you may continue receiving necessary transactional messages concerning invoices, renewals, security, support, or active services.
11. Children’s Privacy
HostFlow services are not directed to children under 13.
Children under 13 may not create accounts or provide personal information to HostFlow. If we learn that we collected personal information from a child under 13 without legally valid authorization, we will take reasonable steps to delete it.
Customers between 13 and 17 must use HostFlow through an account created or authorized by a parent or legal guardian.
12. International Data Transfers
HostFlow operates from the United States. Information may be processed in the United States or other locations where our service providers operate.
Where required, HostFlow will use appropriate safeguards for international transfers of personal information.
13. External Websites and Services
HostFlow may link to third-party websites, games, plugins, payment providers, or platforms. Their privacy practices are governed by their own policies.
HostFlow is not responsible for third-party privacy practices outside our control.
14. Changes to This Policy
HostFlow may update this Privacy Policy to reflect legal, technical, or business changes.
The updated policy will be posted with a revised “Last Updated” date. We will provide reasonable notice when a material change significantly affects how existing customer information is used.
15. Contact
Privacy questions and requests can be submitted through the HostFlow Client Area.
HostFlow Network LLC
Website: https://hostflow.cloud
Client Area: https://billing.hostflow.cloud
