Privacy, in plain terms.

Published September 9, 2026 · Last updated October 1, 2026 · Version 2.4 · Effective October 1, 2026

1. Who is responsible

iHosting LLC, a Georgia company and wholly owned subsidiary of Vibewright Labs LLC, operates this website and provides managed WordPress hosting and care. Contact us at hello@ihosting.biz, (888) 592-7772, or iHosting LLC, 1870 The Exchange SE, Ste 220 #103873, Atlanta, GA 30339.

This notice covers website visitors, enquiries, customer contacts, billing and support. We decide how that information is used for our business. When we host a customer's website, migrate its database or keep its backups, we also handle information on that customer's instructions. The customer is responsible for its own visitors' notice and choices; our Data Processing Addendum describes our commitments for that work when incorporated into the service agreement.

2. Information we handle and why

Quotes and correspondence

The quote form collects your email and any optional name, website address or message you provide. It records your IP address, country, submission time and a spam-detection flag. We use these details to respond, prepare a quote and prevent abuse. Name, website and message are optional; we need an email address to respond through this form.

When you email, call or use our advertised Discord support channel, we handle the contact details and information you share in that conversation. Support may include website addresses, screenshots, diagnostics and instructions. Please do not send passwords, card details or sensitive records through the quote form or a public support channel. We agree the access needed for your site separately.

Calls and chats with Niko

Our phone number, (888) 592-7772, is the Vibewright Labs main line, shared by the Vibewright companies. Niko, an AI receptionist, answers it and says at the start of each call that it is an AI and that the call is recorded. We receive the number you call from, the time and length of the call, a recording and transcript, and what you tell Niko, such as your name, callback number, website address and message. Where chat with Niko is offered, the chat transcript and the contact details you give are saved the same way. We use calls and chats to answer you, pass on your message, follow up, and check and improve Niko's answers. If you prefer not to be recorded, end the call and email us instead.

After each call of about 10 seconds or longer and after each chat, an automated summary goes to the Vibewright team in a private Discord channel: the business you asked about, your name and callback details, the reason and any message, its urgency, and an automated assessment of how the conversation went. Please do not give Niko passwords, one-time codes or card details.

Customers, billing and site care

We handle customer and authorized-contact details, quotes, agreed scope, invoices, payment status and correspondence to provide services and keep business records. Care plans are invoiced through Zoho Books, and customers view and pay invoices in our Billing Portal. Card payments are processed by Stripe, which handles the card details entered under its own notice.

For hosting, migration, maintenance and recovery, we access the site files, database, configuration, administrative accounts and diagnostics needed for the agreed work. A customer site can contain its visitors', members' or purchasers' names, contact details, account records, orders and content. The customer determines what its website collects. We use its hosted data to carry out the agreed service and its instructions, including backups and security work. Providing hosting does not make us the operator of the customer's business.

Delivery, security and performance measurement

Bunny delivers this website, serves its static files and runs its edge functions. Bunny receives connection and request information, including IP addresses, requested URLs, browser headers and timing, to route and secure traffic. We and Bunny may use operational and error records to diagnose problems. Cloudflare remains the authoritative DNS provider for this domain and provides Turnstile for the quote form; it does not proxy this website's HTTP traffic. Earlier quote records submitted before this move may remain in Cloudflare Workers KV until their original expiration. The form loads Turnstile as you approach or focus it; Turnstile processes browser and network signals to check for automated abuse.

We may review Bunny delivery statistics and request logs to understand traffic, performance and errors. This website does not include a separate real-user monitoring beacon. Optional PostHog analytics is described below and remains off until you allow it.

Fonts are served from this website. Turnstile and necessary security functions may use browser storage or cookies, depending on the challenge. A browser Do Not Track signal does not change necessary delivery or security functions. You can control cookies and block optional requests in your browser; blocking security checks may prevent the form from working, in which case you can email or call us.

Optional website analytics

Optional PostHog analytics is off until you choose Allow analytics. If allowed, we count public page visits and declared signup or enquiry actions, including successful form responses. We send a public page path, a broad traffic-source category, event time, and random identifiers that last only for the current page. We do not send form contents, email addresses, private links, raw campaign tags, recordings or advertising identifiers. We use PostHog's US service with IP storage and location enrichment disabled; ordinary network requests still reach its infrastructure.

The Analytics choices button lets you withdraw permission at any time. We save only your allow/off choice in this site's local storage until you clear or change it. Global Privacy Control and Do Not Track keep this optional analytics off. Withdrawal stops future measurement and clears the in-memory identifiers; it cannot retract events already received. These choices do not stop essential hosting, security or a submission you request. Analytics events are retained according to our PostHog project retention setting and reviewed for continued usefulness; the identifiers are not reused across page loads or connected to your account.

PostHog processes these optional measurements for us; see PostHog's privacy notice. Permission to analytics is separate from requesting email updates or a service.

These counts include quote-form starts, accepted quote submissions and clicks to email or call. A click or submitted form does not prove a qualified lead, completed call or sale. Your quote and customer records are handled separately as described above.

3. Providers and other disclosures

• Bunny: website delivery, static file storage, edge functions, delivery statistics and logs, and the relay that passes call and chat summaries from Retell to Discord.
• Bunny Storage and Database: two private Storage Zones hold quote submissions, including spam-flagged records; Bunny Database holds short-lived per-IP form abuse counters.
• Cloudflare: authoritative DNS for this domain, Turnstile checks on the quote form, and earlier quote records in Workers KV until their original expiration.
• Mailgun: quote notifications to our team containing the submitted details, country and submission time. A notification is separate from the form record.
• Zoho Books: invoices, billing contacts, payment status and the Billing Portal for care plans.
• Stripe: processing card payments made in the Billing Portal, including the transaction information needed for that purpose.
• Retell AI: provides Niko, the AI receptionist on our phone line and in any chat with Niko. Retell records and transcribes calls, saves chats and writes the summaries, relying on speech-recognition, voice and AI-model providers to do so. Recordings and transcripts are deleted automatically after 14 days. The Vibewright team also keeps a short written summary of calls and chats, including any message left.
• Backblaze B2 and hosting infrastructure: offsite backups and the systems that run customer websites. Customer-specific infrastructure and processing arrangements belong in the service order and processing schedule.
• Communication providers: email, phone and Discord handle the correspondence you choose to send through those services. Discord support is separate from the quote form. Discord also holds the call and chat summaries in a private Vibewright team channel.

Our authorized personnel, including group personnel or contractors assigned to the work, may access information needed for their duties under confidentiality obligations. We may disclose information when required by law, to respond to a valid legal request, or when reasonably necessary to investigate abuse or protect rights and security. A business transfer may require disclosure to advisers or a successor subject to appropriate confidentiality and notice obligations; it does not erase existing privacy commitments.

Providers have their own notices: Bunny, Cloudflare, Mailgun, Zoho, Stripe, Retell AI, Backblaze and Discord. A link to a provider's policy does not replace our responsibility for processing we control.

4. How long information is kept

• Stored quote submissions: Our hourly process is configured to remove active copies from both private Bunny Storage Zones before their original 180-day expiration and verify each removal through the Storage API. Earlier Cloudflare KV records retain their original 180-day expiration. Bunny replicas or backups may retain residual copies after active deletion; we do not have a verified fixed physical-erasure period for those residual copies. Short-lived per-IP form abuse counters stop being used after about 61 minutes, and the hourly process removes expired database rows.
• Emails, enquiries and support: form expiry does not delete notification emails or later correspondence. Their retention depends on whether an enquiry is still active, becomes a customer relationship, is needed to resolve a support issue or dispute, or forms part of a business record. Contact us to request removal of an enquiry that is no longer needed.
• Calls and chats: Retell deletes call recordings, transcripts, chat transcripts and related logs automatically after 14 days; it keeps basic call and chat metadata internally. The written summaries in our private Discord channel are not deleted automatically. We keep them while needed to respond, follow up, or keep a record of an enquiry or customer matter, and remove them when no longer needed. Contact us to request removal sooner.
• Customer and billing records: retained for the service relationship and afterwards as needed for accounting, tax, resolving disputes and enforcing the agreement. The applicable record type and legal period determine the duration; the form's 180-day expiry does not apply to invoices.
• Customer sites and backups: live content is held to provide hosting. Our care schedule describes current backup frequency and snapshot retention. Return, removal and any residual backup period on exit are agreed in the customer processing schedule. Deleting a live record does not instantly remove an existing backup.
• Operational, security and performance records: retained according to the provider's product retention and the need to diagnose failures, investigate abuse and meet legal obligations. An investigation or legal preservation requirement can extend retention for the affected records.

Where we retain information after a removal request for a legal obligation or unresolved matter, we will explain the reason and applicable criteria. Customer-site requests may need the customer's instructions; backup restoration must respect previously agreed deletions. Ask us for the retention information relevant to your enquiry, account or hosted site.

5. Location and legal bases

iHosting operates in the United States. Our providers may process information in the United States and other countries, and Bunny delivers this website through a global edge network. Cloudflare processes DNS queries and Turnstile checks. The country in which you visit this site need not be the country of processing. For customer hosting, any required location restrictions and transfer safeguards must be established in the processing schedule before the affected processing begins. Using this website is not treated as consent to waive data-protection safeguards.

Where EU or UK data-protection law applies to processing we control, we rely on taking steps at your request or performing a contract for an individual's quote and services; legitimate interests for business-contact communication, answering and recording calls and chats, security, support and proportionate service improvement, balanced against your rights; and legal obligations for required business records and lawful disclosures. If a particular activity requires consent, we will seek it for that activity and it can be withdrawn. For customer-site data processed on instructions, the customer establishes the applicable legal basis.

6. Your choices and requests

Email hello@ihosting.biz to ask what we hold about you or request access, correction, deletion or a copy. Depending on applicable law, you may also have rights to portability, restriction, objection to legitimate-interest processing, consent withdrawal and complaint to your data-protection regulator. These rights can have legal exceptions; we will explain a refusal or limit and respond within the period required by the law that applies.

Provide enough context to locate the information without sending unnecessary identity documents or a password. We may verify your identity or your authority to act for a customer. If the information belongs to a website we host for someone else, contact that website's operator; we will assist the customer with requests within our role. You do not need to buy a service to make a privacy request.

Our business enquiries and customer agreements are intended for people able to act for themselves or a business. This website is not directed to children under 13. If you believe a child has supplied information through our enquiry channels, contact us so we can investigate and remove it where appropriate. The audiences of customer websites are determined by their operators.

7. Changes to this notice

We will update the date and version when this notice changes. For a material change affecting existing customer information, we will provide notice through the contact details we hold or another appropriate direct channel before the change takes effect, where practicable and as required by law. Where an activity requires consent, a policy update alone does not provide that consent. This notice does not replace an agreed service contract or processing addendum.