Last updated: June 5, 2026
This Privacy Policy explains how Hostly (“we,” “us,” or “our”), operated by Ubaid as a sole proprietor based in Rawalpindi, Pakistan, collects, uses, and protects information when you visit our website hostlybot.com or purchase the Hostly WordPress plugin.
We believe in privacy by design: we collect the minimum information needed to operate the business, and we are transparent about what happens to your data.
1. Information we collect
1.1 When you visit hostlybot.com
When you visit our website, we may collect:
• Standard server logs — IP address, browser type, pages visited, timestamps (for security and analytics)
• Cookies — only essential cookies needed for the site to function; we do not use advertising or tracking cookies on hostlybot.com
1.2 When you purchase Hostly
Purchases are processed by Paddle.com Market Limited, our merchant of record. Paddle collects:
• Your name
• Your email address
• Your billing address
• Your payment method details (Paddle handles all card data; we never see your card)
• Your IP address and basic device info (for fraud prevention)
We receive from Paddle only the information necessary to fulfill your order: your name, email, and country of residence. We do not receive or store your payment card information.
1.3 When you contact support
When you email us at support@hostlybot.com, we collect:
• Your email address
• The content of your message
• Any information you voluntarily provide
2. Information we do NOT collect
This is the important section. Hostly the plugin runs entirely on your WordPress installation. We do not collect, store, or have access to:
• Your website visitors’ chat transcripts
• Leads captured by the plugin (names, emails, phone numbers of your customers)
• Your business description, knowledge base, or admin settings
• Your AI conversations
• Your ElevenLabs voice generations
• Any analytics or usage data from your WordPress site
All of that data stays on your WordPress server and your accounts with Anthropic and ElevenLabs. You are the data controller for that information.
3. How we use information
We use the information we collect to:
• Process your purchase and deliver the plugin download + license key
• Provide customer support
• Send transactional emails (purchase receipt, license activation, security updates)
• Send occasional product update notifications (you can unsubscribe at any time)
• Comply with legal obligations (tax records, fraud prevention)
• Improve our website and products in aggregate, non-identifying ways
We do not:
• Sell your personal information to anyone, ever
• Share your information with advertisers
• Use your information for targeted advertising
• Send marketing emails without a clear unsubscribe option
4. Third-party services we use
We use these third-party services. Each has their own privacy policy:
Service
Purpose
Privacy Policy
**Paddle**
Payment processing, tax compliance, merchant of record
[paddle.com/legal/privacy](https://www.paddle.com/legal/privacy)
**Cloudflare**
Website security, CDN
[cloudflare.com/privacypolicy](https://www.cloudflare.com/privacypolicy/)
**Email provider** (Google Workspace)
Sending and receiving support emails
[policies.google.com/privacy](https://policies.google.com/privacy)
**Web hosting** (Namecheap)
Running hostlybot.com
[namecheap.com/legal/general/privacy-policy](https://www.namecheap.com/legal/general/privacy-policy/)
When you install Hostly and connect your own API keys, you separately become a customer of Anthropic (for the Claude API) and ElevenLabs (for voice). Those services have their own privacy policies that govern data sent from your WordPress site to them. We are not party to those relationships.
5. Data retention
• Purchase records: Retained for 7 years for tax and accounting purposes (required by law)
• Support emails: Retained for 2 years, then deleted
• License activation logs: Retained as long as your license is active, plus 1 year
• Server logs: Retained for 30 days
You can request earlier deletion of your support emails by contacting support@hostlybot.com.
6. Your rights
Depending on your country, you may have the following rights regarding your personal information:
• Access: Request a copy of the information we hold about you
• Correction: Ask us to correct inaccurate information
• Deletion: Ask us to delete your information (except where we must keep it for legal reasons, e.g. tax records)
• Portability: Receive your information in a portable format
• Objection: Object to certain uses of your information
• Withdrawal of consent: Withdraw consent for marketing emails at any time
To exercise any of these rights, email support@hostlybot.com. We respond to verified requests within 30 days.
For EU residents (GDPR): Our lawful bases for processing are (a) contract performance (to fulfill your purchase), (b) legitimate interests (security, fraud prevention, product improvement), and (c) legal obligations (tax records).
For California residents (CCPA): We do not sell personal information. You have the right to know what we collect and to request deletion.
7. Security
We take reasonable steps to protect your information:
• HTTPS encryption on all pages of hostlybot.com
• API keys and credentials stored in encrypted form
• Limited access to customer data (only the founder, Ubaid, has access)
• Regular security updates to our website infrastructure
However, no system is 100% secure. If we discover a data breach affecting your personal information, we will notify you within 72 hours as required by applicable law.
8. Children’s privacy
Hostly is a business-to-business product. We do not knowingly collect information from anyone under 18. If you believe a child has provided us with information, contact us and we will delete it.
9. International data transfers
We operate from Pakistan. Our service providers (Paddle, Cloudflare, Google) are located in the United States, the European Union, and other jurisdictions. By using our service, you consent to your information being processed in these regions, which may have different data protection laws than your home country.
For EU residents: we rely on Standard Contractual Clauses or equivalent safeguards where required for transfers outside the EEA.
10. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. For material changes, we will notify customers via email.
11. Contact
Questions about privacy or this policy? Email us at:
support@hostlybot.com
Ubaid (Sole Proprietor)
Rawalpindi, Pakistan