Net30Hosting
Get Started

Privacy Policy

Last updated: October 4, 2026

Net30Hosting (“we,” “us,” or “our”) provides web hosting, professional email, domain registration, and business-credit-building services through net30hosting.com (the “Services”). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. This policy describes necessary service processing and separately chosen optional features. Using the Services does not by itself opt you into marketing email, push notifications, or optional analytics.

1. Information We Collect

We collect the following categories of information:

  • Account information: your name, email address, phone number, and account credentials when you register, sign in, or manage your account.
  • Business information: business legal name, business address, Employer Identification Number (EIN), business type, and related details you provide to verify eligibility for Net30 credit reporting.
  • Payment information: billing name, billing address, and payment method details. Payments are processed by Stripe; we do not store full card numbers on our servers. Stripe collects and processes your payment details under its own privacy policy.
  • Support communications: the contents of support tickets, emails, and messages you send us, including attachments and troubleshooting details. For email-delivery investigations, this includes your signup email, affected mailbox, expected sender email or domain, message date and approximate time with time zone, issue details, and any optional subject or Message-ID you provide.
  • Hosting offers choices: the email address, explicit consent, notice version, and confirmation state for the email signup. We check syntax, domain mail-routing records (including Null MX), and disposable-address rules. Domain mail-routing checks are not proof that an individual mailbox exists; email subscription requires following a confirmation link. Turnstile checks for automated abuse. When you separately enable push notifications, we process the browser subscription endpoint, delivery keys, consent record, and a revocation token to manage that subscription.
  • Technical and usage data: IP address, browser type and version, and necessary security or request data. Optional analytics and activity notices are enabled only with cookie acceptance and remain off when Global Privacy Control is present. Abuse rate controls can use limited, hashed request identifiers.
  • Credit tradeline data: your account’s invoice dates, amounts, payment dates, and account status, used to report your Net30 tradeline to business credit bureaus.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Services, including hosting, email, and domain features
  • Verify your business identity and eligibility for Net30 credit reporting
  • Process payments and manage billing, invoices, and subscriptions
  • Report your payment history to business credit bureaus (see Section 3)
  • Respond to support tickets and customer inquiries, including locating missing messages and reviewing email-delivery and spam-filtering problems
  • Send service communications such as invoices, payment receipts, account notices, and security alerts
  • Send Net30Hosting promotional email only after your explicit Hosting offers signup and email confirmation. Separately requested push notifications require browser permission. You can unsubscribe from email or disable push independently.
  • Detect, prevent, and address fraud, abuse, and security incidents
  • Comply with legal obligations and enforce our Terms of Service
  • Improve our Services, website performance, and customer experience, subject to your optional tracking choice and GPC

3. Business Credit Reporting Disclosures

A core feature of our hosting plans is Net30 business-credit reporting. By subscribing, you authorize us to report the following tradeline information about your account to Equifax Business, CreditSafe, and PayNet:

  • Account open date and current account status
  • Monthly invoice amounts and credit limits associated with your plan
  • Payment history, including whether payments were made on time or late relative to your net-30 due date
  • Current balance and account standing

We report factual payment activity only. We do not guarantee any specific credit score, credit approval, or financing outcome. Bureaus apply their own scoring models and update schedules, and results vary based on factors outside our control, including your existing credit history. Reporting reflects your activity with Net30Hosting only.

If you believe reported information is inaccurate, contact us at support@net30hosting.com and we will investigate and correct verified errors, and notify the affected bureaus.

4. How We Store Your Data

Customer account, billing, hosting, and private support-request data remains in the customer application and Supabase (hosted PostgreSQL), with access controls for the signed-in customer and authorized staff. The public WordPress pages do not make these records public. Supabase uses TLS in transit and encryption at rest. Hosting offers email signups are managed in our restricted WordPress CRM; push subscriptions are held in a separate restricted service with encrypted storage. Administrative server access is restricted and uses key-based authentication.

5. How We Share Your Information

We do not sell your personal information. We share information only as follows:

  • Payment processing: Stripe processes your payments and handles payment credentials under Stripe’s privacy policy.
  • Business credit bureaus: Equifax Business, CreditSafe, and PayNet receive the tradeline reporting described in Section 3.
  • Infrastructure and service providers: providers that help operate the Services, including Supabase (customer application data), hosting infrastructure, Amazon AWS SES (email delivery), and the browser push service needed to deliver separately requested notifications. These providers receive information needed to perform services for us and must protect it.
  • Email delivery and spam monitoring: Ordinary outbound mailbox email and transactional messages use Amazon AWS SES.
  • Security and fraud screening: Cloudflare Turnstile analyzes necessary technical browser signals and validates a challenge token on the Hosting offers signup. See Cloudflare’s Turnstile privacy information.
  • Legal and compliance: when required by law, court order, or to protect our rights, property, safety, or that of others.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you where required by law.

6. Cookies and Tracking Technologies

Necessary storage supports sign-in, security, checkout, and your consent choice. Optional analytics and confirmed-event activity notices require a current cookie acceptance and are disabled by GPC. Public activity notices use generic wording and omit subscriber identity, location, and payment details. Email offers and push notifications require separate choices; accepting cookies does not subscribe you. Read our Cookie Policy or reopen preferences below to reject or withdraw optional tracking.

7. Data Retention

  • Account data: retained while your account is active, and for up to 3 years after cancellation to handle billing disputes, support history, and legal obligations.
  • Payment records: retained as required by tax and financial record-keeping laws (generally 7 years).
  • Credit reporting history: tradeline data reported to bureaus is retained as required by our bureau partnership agreements; bureaus retain reported history under their own policies.
  • Support tickets: retained for up to 3 years after resolution.
  • Marketing data: retained until you opt out or withdraw consent. Unconfirmed signups owned by the Hosting offers form expire after 7 days and are removed by daily cleanup; this cleanup does not delete unrelated contacts or suppression records. Separately chosen push subscription records expire after 90 days and are removed by daily cleanup; disabling push removes the subscription. Minimal consent or suppression evidence may be retained where needed to honor an opt-out or a legal obligation.

When retention periods expire and no legal basis remains, we delete or anonymize the data. Deletion requests (Section 9) are honored subject to these legal retention requirements.

8. Data Security

Abuse risk triggers an automatic account pause for review. You can host and use CRM software. All customer CRM sending must use the customer’s own outbound email provider, rather than Net30Hosting’s SES-backed mailbox service. We can help configure your own Amazon SES account or another outbound provider.

We use industry-standard safeguards, including TLS/SSL encryption in transit, encryption at rest via our storage providers, network threat monitoring (CrowdSec), intrusion prevention (Fail2ban), and restricted administrative access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a data breach affecting your personal information, we will notify you as required by law.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

  • Access: request a copy of the personal information we hold about you.
  • Correction: request correction of inaccurate or incomplete information.
  • Deletion: request deletion of your personal information, subject to legal retention exceptions.
  • Portability: receive your data in a portable format where technically feasible.
  • Opt out of marketing: unsubscribe from promotional emails at any time via the unsubscribe link or by contacting us.

Sign in to request access to or deletion of your data, or email privacy@net30hosting.com if you cannot use the form. Requests enter a private review queue; a receipt or closed ticket does not mean data has been exported or erased. We verify identity and scope and explain the outcome, including records that must be retained. Service cancellation is separate from a data request. We respond within the timeframes required by applicable law.

For correction or an authorized-agent request, contact privacy@net30hosting.com. Do not send passwords, full card numbers, or other unnecessary sensitive information. You can also unsubscribe from each marketing email and disable push through its controls or your browser notification settings.

10. California Privacy Rights (CCPA/CPRA)

California residents can exercise the following privacy rights. The California Consumer Privacy Act (CCPA), as amended by the CPRA, provides these rights where it applies:

  • Right to know: request the categories and specific pieces of personal information we collect, use, disclose, and share.
  • Right to delete: request deletion of your personal information, subject to exceptions (such as completing transactions or complying with legal obligations).
  • Right to correct: request correction of inaccurate personal information.
  • Right to opt out of sale/sharing: see “Do Not Sell or Share” below.
  • Right to limit use of sensitive personal information: we do not use or disclose sensitive personal information beyond what is necessary to provide the Services.
  • Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights.

Do Not Sell or Share My Personal Information: Net30Hosting does not sell personal information as defined by the CCPA, and does not share personal information for cross-context behavioral advertising. The disclosures we make to Stripe, Supabase, credit bureaus, and other service providers are for business purposes under written contracts, not sales.

How to submit a request: use your account privacy page for access or deletion requests, or email privacy@net30hosting.com with “CCPA Request” in the subject line. We will verify your identity (for example, by matching account details) before processing. You may designate an authorized agent to act on your behalf with your signed written permission. We will respond within 45 days, with a possible 45-day extension where permitted and with notice to you.

We recognize Global Privacy Control as an opt-out signal for applicable sale or sharing rights and disable optional analytics and activity notices when it is present. You can also change your choice through Cookie preferences.

In the preceding 12 months we have collected the categories listed in Section 1, disclosed them to the service providers listed in Section 5 for business purposes, and have not sold or shared personal information.

11. Children’s Privacy

Our Services are business services intended for adults 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced by email or a prominent notice on our website, and the “Last updated” date will be revised. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For privacy questions or requests: