Privacy Policy

"BJG Hosting" is an owner-operated business providing web hosting, web application development, and AI automation services. This policy explains what personal information we collect, why, and what we do with it.

What we collect

• Account information — your name, email address, and password (stored only as an Argon2id hash, never in readable form).
• Google sign-in — if you sign in with Google, we receive your email address, name, and profile picture URL from Google. We request only the openid, email, and profile scopes. We do not receive your Google password and cannot access your Gmail, Drive, Contacts, or any other Google service.
• Billing information — subscription and payment records. Card details are handled entirely by Stripe and never touch our servers.
• Service data — the content of sites and applications we host for you.
• Operational logs — IP addresses, request paths, and timestamps, kept for security and troubleshooting.

How we use it

To provide and bill for the services you have asked for, to authenticate you, to contact you about your account, and to keep the systems secure. That is the complete list.

What we never do

• We do not sell, rent, or trade personal information.
• We do not use your data to train machine-learning models.
• We do not serve advertising or run third-party advertising trackers.
• We do not share information with anyone except the processors listed below.

Processors we rely on

• Stripe — payment processing and subscription billing.
• Resend — transactional email (receipts, password resets, notifications).
• Cloudflare — DNS.
• Google — only if you choose to sign in with Google.

Servers are owned and operated by us in California. Data is not transferred to third countries beyond the processors above.

Retention

Account and billing records are kept while your account is active and afterwards only as long as tax and accounting law requires. Operational logs are kept for a short period and then discarded. Hosted service data is deleted on request or after account closure.

Your rights

You may request a copy of your personal information, ask for corrections, or ask us to delete your account and its data. Email [email protected] and we will respond within 30 days. California residents have these rights under the CCPA; we do not sell personal information, so there is nothing to opt out of.

Cookies

We set a session cookie when you sign in and a CSRF token cookie to protect forms. Both are strictly necessary for the site to work. We use no analytics or advertising cookies.

Security

Passwords are hashed with Argon2id. Sessions are stored server-side and can be revoked. All traffic is served over TLS. Administrative interfaces are additionally restricted to a private network.

Contact

Questions about this policy: [email protected]