Privacy policy

Updated 25 October 2026.

Data Hall LLC operates datahall.cloud and is responsible for the account, billing and operational information described here. For a privacy request, contact support@datahall.cloud and put “Privacy” in the subject. This policy covers our website, console, API and communications.

You can also write to Data Hall LLC, Privacy, 30 N Gould St, Ste 68565, Sheridan, WY 82801, United States.

1. Information we handle

• Account information: name, email address, verification state, organization membership and security settings. If you choose social sign-in, we receive the account identifiers and profile information that service shares for authentication, such as your name, email and profile image.
• Service records: selected plans and regions, operating systems, server names, tags, IP addresses, public SSH keys, configuration, usage measurements and lifecycle events.
• Billing information: orders, subscriptions, invoice amounts, payment status, billing contact, payment references and limited payment-method details such as card brand and last four digits. Our payment processor collects full card details through its payment forms; we do not store full card numbers or security codes.
• Security and technical records: session identifiers, IP addresses, browser or device information, authentication events, request logs, rate-limit records and an audit trail of account and operational actions.
• Communications: support and abuse reports, contact requests, attachments you choose to send, status subscriptions and delivery records for service emails. Business verification information is collected if needed to review an order.
• Hosted content: the applications and data you place on your servers, and backups you enable. Do not put sensitive information in hostnames or tags, which are operational labels.

2. Why we use it

We use this information to authenticate users, provision and operate services, process payments, send receipts and readiness notices, answer requests, troubleshoot failures, prevent fraud and abuse, maintain security, and meet legal obligations. We use operational measurements to understand and improve reliability.

Where a legal basis is required, we rely on performing our agreement with you, legitimate interests in operating a secure and reliable business, compliance with legal obligations, or consent where required. You may withdraw consent without changing the lawfulness of earlier processing. Essential account, billing and security messages are part of providing the service.

3. Cookies and sign-in

The console uses cookies or similar browser storage for authentication, session protection and preferences such as theme. Blocking necessary storage can prevent sign-in or other console functions. Optional social sign-in and hosted payment pages are also subject to those services’ own privacy practices. We do not use advertising cookies or sell access to your account information for targeted advertising.

With your permission, we use PostHog in the United States for optional website analytics. Selected page paths, campaign labels, signup and checkout events, and confirmed purchase amounts and currency are associated with a random browser identifier. We keep the link to your account within Data Hall to honor your choice and exclude staff activity. We do not send PostHog your name, email, server addresses, credentials, payment references, form contents or full URLs with query parameters. Session recordings and automatic interaction capture are disabled. This collection helps us understand which visits lead to purchases.

Analytics are off until you opt in. Manage or withdraw permission on our cookies and preferences page. Your choice does not affect your services. We respect browser Global Privacy Control and Do Not Track signals. Consent identifiers expire after 180 days; withdrawing permission stops new collection and removes queued analytics during routine cleanup. Previously delivered events are subject to our analytics provider’s retention and our privacy-request process.

4. Who receives information

Access is limited to people and service providers who need it for the purposes above. Our service providers handle payments, website hosting, application data storage, transactional email and support communications, as well as server, backup and network operations. A deployment can require sharing configuration, IP addresses, public SSH keys and hosted content with infrastructure partners. We remain your service contact.

Your organization’s authorized members can see information made available by their role, including shared server and billing records. If you configure a webhook, we send the selected events to the endpoint you specify. We may disclose relevant information to comply with a valid legal requirement, investigate abuse or fraud, protect rights and safety, or complete a business transfer with appropriate protections. We do not sell personal information or share it for cross-context behavioral advertising.

5. Hosting regions and international processing

The selected server region describes the location of the compute resource. It is not a promise that all account, billing, support, backup or operational information stays in that region. Our staff and service providers may process information in the United States and other countries. Where applicable law requires transfer safeguards, the relevant safeguards must be in place for that processing. Contact us for information about the service providers and arrangements relevant to your use.

If your organization needs a data processing agreement, particular transfer terms or regulated-data commitments, contact us before placing that data on the service. This policy does not itself provide a data processing agreement, a compliance certification or a commitment to host regulated information.

6. Retention and deletion

We keep information while needed to provide the service and for accounting, security, dispute handling and legal requirements. Retention depends on the type of record and the purpose. Routine cleanup removes expired authentication records and aged operational delivery records. Some financial, order, service and audit records are retained after account closure; closure does not instantly erase every record or anonymize every historic invoice or message.

Deleting a server can permanently remove its disks and backups. We do not promise a recovery window after removal. Copies in service-provider backups may remain until their normal deletion cycle, and legal holds can require longer preservation. Contact us for a deletion request covering information beyond the account-closure function; we will explain any information we must retain.

7. Security

We use encrypted connections, access controls and audit records to protect the service. Stored server access credentials are encrypted and the console limits their initial reveal. These measures reduce risk but do not guarantee that loss or unauthorized access can never occur. Use a unique password, enable two-factor authentication where available, restrict access and keep an independent backup of important data. We will make notifications required by applicable breach-notification law.

8. Your choices and rights

You can update account details, review sessions and download an account-data export from the console. The export covers the information exposed in your account; it is not necessarily a complete response to a legal access request. You can close your sign-in account after resolving live services, open orders and team ownership. Status-email subscriptions have an unsubscribe link.

Depending on the law that applies to you, you may request access, correction, deletion, portability, restriction of processing, or an objection to certain processing. You may also withdraw consent, use an authorized agent where permitted, appeal a request decision or complain to a relevant data protection authority. Send requests to the contact above. We may verify identity and authority, and will respond within applicable legal deadlines. We do not retaliate for exercising privacy rights.

9. Customer-hosted information

You decide what information to put in your workloads and are responsible for its lawful collection and use, your users’ notices, and responding to requests about it. When we process hosted content on your behalf, we do so to provide the service or meet legal obligations. If your request concerns a website hosted by one of our customers, contact that website’s operator; use our abuse form to report misuse.

10. Children and policy updates

Our service is intended for adults and organizations, not children under 18. Contact us if you believe a child has provided account information. We will update the effective date when this policy changes and notify account holders of material changes where required. An updated notice will not retroactively authorize an unrelated use of previously collected information.