Privacy Policy

This Privacy Policy (the “Policy”) explains what personal data LLC “Easyweb360” (identification No. 412767180), operating under the trade name RE:HOST (“RE:HOST”, “we”) collects, processes, shares with third parties and for how long it retains it when you use our website (rehost.ge), client dashboard (my.rehost.ge) and related services. The Policy applies to site visitors as well as registered clients. Please read it carefully before using the services.

Data Controller

The processor (data controller) of your personal data is LLC “Easyweb360” (identification No. 412767180; trade name — RE:HOST), a company registered in Georgia. For questions or requests, contact us at info@rehost.ge.

Scope

The Policy applies to the public website rehost.ge, the my.rehost.ge client and administrative panel, and the automation API used by clients. It does not apply to the third-party sites to which links may be published on our platform — see “Third-Party Links” below.

What We Collect

We collect only the data necessary to provide the service, for billing, for support, and to fulfil obligations under the law. In detail, the categories of data are as follows:

Account and registration data

First and last name, email address, password (in hashed form), phone number, company name and identification number (if applicable), billing address (address, city, country, postal code), language and currency preference, account type (site owner, agency, other), how you heard about us, referral code and — if provided — sex and date of birth.

Signing in with Google, GitHub, QuickPay and Website.ge accounts

If you choose to sign in via Google, GitHub, QuickPay or Website.ge, we receive your name, email address and a unique identifier from that provider in order to create or link your account. We never see or store your password on those services.

Payment and billing data

Invoice, payment history and account balance data. We never store card data (card number, CVC) and have no access to it — all card payments are processed by our payment system QuickPay.ge, in accordance with the PCI DSS standard. We retain only the payment status, amount, transaction identification number and, for recurring billing, an encrypted token that QuickPay returns to us.

Service, order and domain data

Details of the services you purchased (hosting plan, VPS configuration, domain name), provisioning data (e.g. cPanel username, server IP), domain registrant data for WHOIS (when WHOIS Privacy is turned off), DNS records, nameservers, and the data of team members to whom you have granted access to a service.

მხარდაჭერის ტიკეტები, ჩატი და უკუკავშირი

თქვენ მიერ support ტიკეტში, ცოცხალ ჩატში ან feedback ფორმაში მოწოდებული ტექსტი, დანართები და სკრინშოტები. ჩატის შემთხვევაში ვინახავთ სრულ მიმოწერას, ავტომატიზებული პასუხების ჩათვლით. Feedback-ის (შეცდომის შეტყობინება ან წინადადება) გაგზავნისას დამატებით ავტომატურად აგროვდება გვერდის მისამართი, ბრაუზერის ტიპი, IP მისამართი, დროის სარტყელი და ეკრანის/ბრაუზერის ზომა — ანგარიშის ტექნიკური კონტექსტის გასაგებად.

Technical and usage data

IP address, browser type and version, device and operating system type, time of visit and pages visited, as well as preferences stored through cookies (see “Cookies” below). Collected automatically, for the purposes of security and improving the service.

Legal Basis for Processing

We process your data on the following bases: (a) performance of a contract — to provide the service and for billing; (b) a legal obligation — e.g. for tax and accounting records; (c) our legitimate interest — fraud prevention, system security and improving the service, with proportionality observed; (d) consent — for example, for marketing messages, which you can withdraw at any time.

How We Use It

We use your personal data: to create your account and to provide and provision services (hosting, VPS, domains, WordPress care); to generate invoices, process payments and carry out recurring billing; to respond to support requests and live chat; to send service, billing and security notifications; to calculate affiliate/partner commission; for improving the site and panel and for analytics; to detect and prevent fraud, abuse and security threats; and to fulfil obligations under the law. We never sell your personal data and do not share it with third parties for marketing purposes.

Cookies

We use cookies and similar technologies for four categories: (1) essential — to maintain your sign-in session and for security (e.g. CSRF protection), without which the site cannot work; (2) functional — to remember your language and dark/light mode preference; (3) affiliate/referral tracking — if you arrived at the site through a referral link (?ref=), we store a cookie about this for a set period (30 days by default), so that partner commission is calculated correctly; (4) advertising/marketing — if enabled by the administration, we use the Meta (Facebook/Instagram) Pixel to measure ad effectiveness, which sets `_fbp`/`_fbc` cookies and passes page-view data to Meta. Cookies can be managed and disabled in your browser settings, although disabling essential cookies may disrupt the operation of the site.

Automated Decisions and AI

ჩვენი ჩატ-ბოტი თავდაპირველად პასუხობს საკვანძო სიტყვებზე დაფუძნებული წესებით, ხოლო არშესატყვისი შეტყობინებისთვის — მხოლოდ საჭიროების შემთხვევაში — გამოიყენება AI ენობრივი მოდელი, რომელიც შეტყობინებას მხოლოდ კლასიფიცირებს (მაგ. „ტიკეტის გახსნა", „ინვოისის შემოწმება"); ის არასდროს წერს ან გიგზავნით ტექსტს — პასუხი ყოველთვის წინასწარ მომზადებული და ადამიანის მიერ დამტკიცებულია. ჩვენი თაღლითობის საწინააღმდეგო სისტემები იყენებს ავტომატურ წესებს საეჭვო აქტივობის აღმოსაჩენად, თუმცა საბოლოო გადაწყვეტილებას (მაგ. ანგარიშის შეჩერება) იღებს ჩვენი გუნდი, არა მხოლოდ ავტომატური სისტემა.

Sharing With Third Parties

We share your data only with providers that are necessary to deliver the service, and only to the extent they need it to perform that function: for payment processing and, if chosen, signing in with an account — QuickPay.ge; for signing in with an account, additionally — Google, GitHub and Website.ge; for domain registration and transfer — international registrars and the Georgian domain registry; for domain DNS management — Cloudflare; for live chat and AI assistance — our chat partner (Chattr) and the AI language model provider (Anthropic), only for the purpose described in the “Automated Decisions and AI” section; for measuring ad effectiveness, if this feature is enabled by the administration — Meta (Facebook/Instagram), with which we share visit and purchase events, a hashed email and IP address, from both the browser and the server side at the same time (Meta Pixel and Conversions API); for email delivery — our SMTP provider; and, if phone verification is enabled, an SMS provider. Your hosting and VPS services run on our own server infrastructure; backup and security software (including JetBackup and Imunify360) runs locally on those same servers and does not send your data to an outside company. In cases provided for by law, data may also be transferred to authorized state bodies.

International Data Transfers

Our hosting infrastructure is located in Germany, and some providers (e.g. payment, chat or infrastructure services) may process data outside Georgia, including in European Union member states. In such cases we make sure that the provider ensures an appropriate level of protection.

Data Retention

მონაცემებს ვინახავთ მხოლოდ იმ ვადით, რომელიც აუცილებელია მიზნის მისაღწევად: ანგარიშისა და საბილინგო მონაცემები — ანგარიშის აქტიურობის პერიოდში და მისი დახურვის შემდეგ საქართველოს საგადასახადო/საბუღალტრო კანონმდებლობით მოთხოვნილი ვადით; support ტიკეტები და ჩატის ისტორია — ანგარიშის დახურვიდან გონივრული ვადით, სერვისის ხარისხის ანალიზისთვის; ტექნიკური/ჟურნალის მონაცემები (მაგ. IP მისამართი) — მოკლევადიანად, უსაფრთხოებისა და თაღლითობის პრევენციის მიზნით; feedback-ის სკრინშოტები — შეტყობინების გადაწყვეტამდე და გონივრული პერიოდით შემდეგ. ვადის გასვლის შემდეგ მონაცემებს ვშლით ან ანონიმიზაციას ვუკეთებთ, კანონმდებლობით პირდაპირ მოთხოვნილი შემთხვევების გარდა. ანგარიშის წაშლის მოთხოვნა შესაძლებელია პანელის Account Settings > Danger Zone-დან.

Your Rights

Under Georgian law (the Law on Personal Data Protection) and, where applicable, the EU GDPR, you have the right to: (1) obtain information about what data we process about you; (2) request correction of incorrect data; (3) request deletion of data, where the law does not require it to be retained; (4) restrict or object to processing; (5) receive your data in a structured, machine-readable form; (6) withdraw consent at any time, where processing is based on consent; and (7) lodge a complaint with the Personal Data Protection Service of Georgia (www.personaldata.ge) or the supervisory authority in your jurisdiction. To exercise these rights, contact us at info@rehost.ge or from your account settings.

Children’s Privacy

Our services are not intended for persons under 18, and we do not knowingly collect personal data of minors. If we suspect that a minor has provided us with personal data, we will delete it immediately. At the request of a parent or guardian, contact us at info@rehost.ge.

Security

We protect your data with industry-standard measures: stored API keys and sensitive settings are encrypted, passwords are stored only in hashed form, all connections to the site and panel are encrypted with HTTPS, access to personal data is limited to employees who need it for their work, and our systems are monitored for suspicious activity. There is no absolutely secure method of data transmission or storage, but we continuously work to improve these measures.

Data Breach Notification

If we identify a personal data security breach that may pose a high risk to your rights and freedoms, we will notify you and, where necessary, the competent supervisory authority — within a reasonable time, in the manner established by law.

Marketing Messages

We send service-related messages (e.g. invoices, provisioning status, security alerts) within your account, without additional consent. At registration you may additionally agree to receive marketing messages; you can withdraw this consent, or ask about the data stored about you, at any time by contacting info@rehost.ge.

Third-Party Links

Our site may contain links to third-party sites. We are not responsible for the privacy practices of such sites and recommend that you review their own policies before handing over your personal data to them.

Changes to This Policy

We may update this Policy from time to time — for example, when adding a new service or when legislation changes. The “last updated” date above reflects the latest version. We will notify you of material changes through a panel notification or by email.

Contact

For any question about this Policy, your personal data or the exercise of your rights, contact us at info@rehost.ge or through the contact form. If you believe your data has been processed improperly, you also have the right to apply to the Personal Data Protection Service of Georgia (www.personaldata.ge). Contact Us