Privacy policy.

1. What this policy covers

This policy covers the data Tovahub processes when you visit, sign in, add funds, order or manage a server. Wallet software, RPC services, Contabo and other third parties have their own policies.

2. Information you provide

We process your email address, email verification status and password-authentication records, and linked Google or X account identifiers and profile details returned by those providers. This can include a Google name or an X username. We also process your chosen plan, region, operating system, server name, orders, renewal choice and server requests.

We store password credentials in hashed form, not as readable passwords. We do not receive or store Google or X passwords, wallet private keys or seed words.

3. Service and payment data

To run this site, we use order and payment status, provider server IDs, server status, IP address, port, operating system, end time, and usage details you ask to see for your own server.

Service records may include safety notes, checks, logs, provider tasks, and repair work. We shorten provider error details before showing them to customers or staff.

We use deposit payment hashes, wallet and contract addresses, tokens, amounts, server credit, and referral payment records. Blockchain transfers are public and cannot be removed by changing or deleting a site account.

4. Cookies and sessions

We use needed HttpOnly cookies for signed sessions, short login checks, and referral links. Your browser may save your language choice and pending deposit details so we can check them after a reload. These records have no private keys or seed words. The app does not use ad cookies or track your use.

5. How we use information

• check your login and keep your account session;
• set up, watch, renew, fix, or end a VPS you ask for;
• handle orders and payments;
• stop extra orders and payments, abuse, and server actions you did not ask for;
• show customer and staff pages, service checks, payment checks, and logs; and
• follow provider rules, safety rules, and laws.

6. Services we use

Contabo gets the details needed to run your VPS. MongoDB stores account, order, and log records. Google and X process sign-in requests under their own privacy policies. Wallet apps and network services receive the data needed to prepare or check blockchain deposit transactions. Each outside service has its own rules and privacy policy.

7. What we do not do

We do not sell account data for advertising. App secrets, supplier API keys, and passwords stay on the server. Customer pages do not show them. You can get your server login details after you log in. Only you can ask for them.

8. How long we keep data and keep it safe

We keep account, payment, service, safety, and log records while needed to run the service, handle problems, check payments, look into abuse, or follow the law and provider rules. Your login ends at its set time. Signing out does not erase account or payment records.

We use signed sessions and provider sign-in checks, limit server access, store account passwords in hashed form, and keep service secrets on the server. No internet service can promise full safety. Protect your sign-in details.

9. Your choices

You may sign out and choose among the sign-in methods available to your account. You can choose whether to link a Google or X account. We may not be able to change or remove site records if we need them for orders, to stop fraud, to check abuse reports, or to follow the law or provider rules. Tovahub cannot change public blockchain records.

10. Changes to this policy

We may update this policy when the service, providers, how we use data, or laws change. The version on this page starts on its update date.

11. Data sources and required information

We receive information directly from you, from the sign-in provider you choose, from your browser or device when it connects to the site, from the infrastructure provider when it handles a request, and from public blockchain networks when we check a deposit. Some account and order information is needed to provide a service you request. If you do not provide it, we may be unable to create the account, verify a payment, or fulfill the order.

12. Technical and security information

When you use the site, our systems may process connection details such as IP address, request time, browser or device information sent with a request, session identifiers, and error or security events. We use these details to keep sessions working, diagnose faults, prevent unauthorized access, and respond to abuse. We do not use them to build advertising profiles.

13. Legal grounds where required

Where privacy law requires a legal ground, we process information as needed to perform a contract or steps you request before a contract, meet legal obligations, protect people and systems against fraud or abuse, and pursue legitimate service and security interests. Where consent is required, we ask for it and you may withdraw it for future processing. The available grounds and your rights depend on the law that applies to you.

14. Sharing and recipients

We share only information needed for the task with the infrastructure provider, database and hosting operators, sign-in providers, payment or blockchain verification services, and professional advisers or authorities where required. Staff access is limited to operational needs. A recipient may process information under its own terms or as our service provider; its own privacy notice applies to its independent processing.

We do not sell personal information for advertising. We do not give an outside party permission to use account information to advertise unrelated products to you.

15. International processing

Our providers may process information in countries other than yours. Where a transfer protection is required, we will use a lawful transfer mechanism or another safeguard available under the applicable law. You may contact us to ask about safeguards relevant to your information.

16. Retention and deletion

We keep each category of information only for as long as reasonably needed for the purposes in this policy, including the active service term, account and payment reconciliation, dispute handling, security investigations, legal limitation periods, and recordkeeping duties. The exact period depends on the record and applicable law. When it is no longer needed, we delete it, de-identify it, or restrict access where deletion is not immediately practical.

Closing an account or signing out does not erase records needed to complete an order, resolve a dispute, prevent fraud, satisfy legal duties, or comply with provider requirements. Public blockchain records are maintained by the network and cannot be deleted by Tovahub.

17. Security and incident response

We use access controls, signed sessions, password hashing, server-side storage for service secrets, and operational checks designed to reduce risk. No networked service can guarantee that information will never be lost, accessed, or misused. If an incident affects your information, we will take reasonable steps to contain it, investigate it, and provide notices required by law.

18. Privacy rights and requests

Depending on your location, you may have the right to request access, correction, deletion, restriction, portability, or objection, or to complain to a privacy regulator. You may also withdraw consent where processing relies on consent. We may ask for information needed to verify your identity and may retain or withhold records where law allows or requires it. Use the Tovahub support channel and identify the account and request; we will respond within the period required by applicable law.

19. Children and third-party sites

The service is not designed for children who cannot legally enter the relevant agreement. If you believe a child has provided personal information in breach of applicable law, contact us so we can review the matter. Links to third-party websites are provided for convenience; this policy does not govern those sites.

20. Automated decisions and policy contact

We use automated checks to reconcile deposits, prevent duplicate operations, and identify security or abuse signals. These checks do not replace a review where applicable law gives you a right to challenge a decision with significant effects. Contact us through the support channel on Tovahub for a privacy question or request. This policy describes our processing; it does not reduce any right that privacy law gives you.