1. The short version
We sell hosting, not data. We collect the minimum we need to run the service, share it with as few processors as possible, and delete it on a published schedule. Privacy is a large part of why customers choose managed open-source apps, and we treat that as a design constraint, not a slogan.
2. Two kinds of data, two roles
Your account data: name, email, billing records, support tickets. For this, we are the data controller and this policy describes exactly how it is handled.
Your instance data: everything inside the apps we host for you, your files, your users, your customers' records. For this, you are the controller and we are a processor: we store and back it up as ciphertext-at-rest infrastructure, and we access it only to operate the service: backups, updates, diagnostics you request, or abuse investigation with cause. Routine monitoring covers resource metrics, not content.
3. What we collect and why
Account data (from you, at signup): name and email address, used to create and secure your account and to contact you about your services.
Billing data: processed by Stripe. Card details never touch our servers; we hold invoices and transaction records.
Support data: the content of your tickets and, where you ask us to help with an app, relevant instance logs. Our AI support agent processes ticket content and app logs to diagnose problems. This is disclosed here deliberately, and its access is fenced to your own services. To do this we use Anthropic's Claude models through Anthropic's commercial API (private inference): only the content needed to answer that ticket is sent, and under Anthropic's commercial terms it is not used to train their models. We use the same private inference for a number of other support initiatives, such as triaging requests, drafting replies and diagnosing failed updates.
Usage data (optional): website analytics run only after you accept analytics cookies, and are retained no longer than six months.
Partner links: if you arrive through a corehost.io/p/ link shared by an app's maintainer, we count the visit and keep a small record of which link you used, in your own browser and on our side, for 40 days. If you create a new account in that time, we tie it to that link so the maintainer's revenue share can be worked out. Maintainers see totals and, only when at least three paying customers are behind a figure, aggregated numbers. They never see your name, email address, IP address or what you run. We do not store your IP address or device identifiers for these links, and clearing your browser storage removes the copy kept in your browser.
4. Where data lives
Our control plane (accounts, billing records, tickets) runs in AWS Sydney (ap-southeast-2). Instances live in the region you chose when deploying: Sydney, the US or Poland. Encrypted backups of instances are stored in the EU, whichever region you chose.
We voluntarily apply the Australian Privacy Principles to how we handle personal information, and this policy is written to those standards.
6. Retention and deletion
Instance data: retained for 14 days after an app is terminated (a recovery safety net), then permanently deleted, backups included.
Account data: retained while your account exists and deleted within 30 days of account closure, except transaction records and basic contact details we must keep for legal and accounting purposes.
Analytics data: no more than six months.
7. Data breaches
If a data breach occurs that is likely to result in serious harm, we will notify affected customers and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme: promptly, plainly, and with what we know and what we are doing about it.
8. Your rights
You can request a copy of the personal information we hold about you, correction of it, or deletion of your account and its data at any time. For instance data, you can help yourself: SFTP and app-level exports are always available.
9. Changes
When we update this policy we will publish the new version here and email registered users about material changes.
10. Contact
Privacy questions or requests:
- By email: privacy@corehost.io
- By support ticket: submit a ticket from your control panel