Privacy Policy — Hostalot
Hostalot

Privacy Policy

Effective Date: April 27, 2026  •  Last Updated: August 10, 2026
This Privacy Policy explains how Hostalot LLC ("Hostalot," "we," "us," or "our") collects, uses, stores, and protects your personal information when you use our websites and services, including:
  • hostalot.com — web hosting and related services
  • hostalot.ai — AI-powered tools and services
  • designertalk.ai — the Designer Talk AI page builder plugin and SaaS platform
  • clientarea.hostalot.com — customer billing and account management
  • api.hostalot.com — the Designer Talk API service

By using any of our services, you agree to the collection and use of your information as described in this Privacy Policy.

1. Who We Are

Hostalot LLC is a web hosting and software company based in Texas, United States. We operate web hosting infrastructure and the Designer Talk AI page builder SaaS platform.

For privacy-related questions, contact us at:
Email: support@hostalot.com
Website: hostalot.com

2. Information We Collect

2.1 Information You Provide to Us

When you create an account or use our services, we collect:

2.2 Information We Collect Automatically

When you use our services, we automatically collect:

2.3 Information from Third Parties

3. How We Use Your Information

We use the information we collect to:

✓ We do not use your generated content to train AI models.
✓ Our AI providers (Anthropic, OpenAI, Google) do not use API-submitted content to train their models by default — they may retain API data for a limited period solely for safety and abuse monitoring (for example, OpenAI states up to 30 days).
✓ We do not sell your personal data to third parties.

We do use targeted advertising, which you can opt out of (see Sections 8 and 11).

4. Data Retention

We retain your data for as long as your account is active or as needed to provide services.

Data TypeRetention Period
Account informationUntil account deletion
Billing records and transaction history7 years (legal/tax requirement)
Conversation messages60 days from creation, then automatically deleted
AI-generated section HTMLUntil you delete the page or your account
AI-generated imagesNot stored on our servers. Generated images are returned to your WordPress site and saved in your own Media Library — we never retain a copy.
API usage logs90 days, then automatically deleted
Support communications3 years

When your account is deleted or terminated, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

5. How We Store and Protect Your Information

While we implement industry-standard security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

6. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

6.1 AI Providers

When you use Designer Talk to generate content, your messages and conversation context are transmitted to the applicable third-party AI provider:

We send only the minimum data necessary to fulfill your request (your message, recent conversation history, and any images you attach). Under their commercial API terms, these providers do not use content submitted via their APIs to train their models by default; they may retain API data for a limited period solely for trust-and-safety and abuse-monitoring purposes.

6.2 Payment Processors

We use Stripe to process payments. Stripe receives the information necessary to complete your transaction — we do not store raw payment card numbers on our servers. Stripe's privacy policy is available at stripe.com/privacy. Our billing platform (WHMCS) interfaces with Stripe on your behalf; we do not have access to your full card details at any point.

6.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, investigate fraud, or respond to a legal request.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of our assets, your information may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.

6.5 Advertising Partners

We advertise our services on social media and search platforms and use retargeting. To do this, our websites include advertising pixels and tags from:

These partners collect cookie identifiers, device information, and page-visit activity on our websites and may combine it with information they already hold about you to show you our ads on their platforms and to measure ad performance. The Designer Talk plugin and our API service (api.hostalot.com) contain no advertising pixels or trackers — advertising technologies run only on our websites. You can opt out of targeted advertising — see Sections 8.3 and 11.

6.6 Analytics Providers

We use Google Analytics 4 on our websites to understand how visitors find and use our content. Google Analytics sets cookies and collects pages visited, session duration, referring source, approximate location derived from your IP address, and device and browser characteristics. Google processes this data as described at policies.google.com/privacy.

Google Analytics runs only on our websites. The Designer Talk plugin and our API service (api.hostalot.com) contain no analytics tracking, and pages you build and publish with Designer Talk on your own WordPress site carry none of our analytics code.

You can opt out of Google Analytics on any website using Google's official browser add-on: tools.google.com/dlpage/gaoptout.

6.7 Server-Side Advertising Measurement (Meta Conversions API)

In addition to browser-based pixels, we send certain conversion events — such as creating an account and completing a purchase — from our servers directly to Meta using the Meta Conversions API. We use this to measure advertising performance and to attribute purchases to the ads that generated them.

For these events we transmit:

Server-side events are sent only for activity on our own websites and client area. The Designer Talk plugin and our API service transmit no advertising data of any kind, and pages you publish with Designer Talk on your own website are never included.

You can opt out of processing for targeted advertising as described in Sections 8.3 and 11.

7. Third-Party Services

Our services integrate with or link to third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of:

8. Cookies and Tracking

8.1 What We Use Cookies For

8.2 What We Do Not Do

✓ No advertising pixels or trackers inside the Designer Talk plugin or the API service itself — advertising technologies run only on our websites
✓ We never sell your personal data to advertising partners or anyone else

8.3 Managing Cookies and Opting Out of Ads

You can control cookies through your browser settings. Disabling cookies may affect your ability to log in or use certain features of our client area.

To opt out of targeted advertising specifically, you can also use:

9. Children's Privacy

Our services are intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us at support@hostalot.com and we will delete it promptly.

10. Your Rights and Choices

You may have the following rights regarding your personal data:

To exercise any of these rights, contact us at support@hostalot.com. We will respond within 30 days and may need to verify your identity before processing your request.

We do not discriminate against users who exercise their privacy rights.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, additional rights apply to you — see Section 12.

11. Texas Privacy

As a Texas-based company, we comply with applicable Texas privacy laws including the Texas Data Privacy and Security Act (TDPSA). Texas residents have the right to:

To exercise these rights, contact us at support@hostalot.com.

12. International Users and European Data Protection Rights

Our services are operated from the United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States. We take reasonable steps to ensure your data is treated in accordance with this Privacy Policy regardless of where it is processed.

12.1 Who This Section Applies To

This section applies if you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland. Where anything in this section conflicts with another part of this Privacy Policy, this section controls.

12.2 Controller

Hostalot LLC is the controller of the personal data described in this Privacy Policy. You can contact us about any matter in this section at support@hostalot.com.

12.3 Our Lawful Bases for Processing

We process personal data only where we have a lawful basis to do so:

PurposeLawful basis
Providing the service, managing your account, processing credits and generationsPerformance of a contract — Art. 6(1)(b)
Retaining billing records and transaction historyLegal obligation — Art. 6(1)(c)
Abuse prevention, rate limiting, and security loggingLegitimate interests — Art. 6(1)(f)
Diagnostics and service improvementLegitimate interests — Art. 6(1)(f)
Advertising, retargeting, and analytics cookiesConsent — Art. 6(1)(a)
Marketing emailConsent — Art. 6(1)(a)

Where we rely on legitimate interests, we have assessed that our interest in operating a secure and functional service is not overridden by your rights and freedoms. You may object to this processing as described below.

12.4 Your Rights

In addition to the rights described in Section 10, you have the right to:

You may contact your supervisory authority directly. A list of EEA authorities is available at edpb.europa.eu. In the United Kingdom, the relevant authority is the Information Commissioner's Office at ico.org.uk. In Switzerland, it is the Federal Data Protection and Information Commissioner at edoeb.admin.ch.

We will not charge you for exercising these rights and will not treat you differently for doing so.

12.5 International Data Transfers

Personal data you provide is transferred to and stored in the United States, and is transmitted to the AI providers and service partners described in Section 6. The United States has not received an adequacy decision from the European Commission covering these transfers generally.

Where required, we rely on the European Commission's Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914), together with the UK International Data Transfer Addendum and the Swiss addendum where applicable, as the legal mechanism for these transfers. Our AI providers, payment processor, and infrastructure partners are engaged under data processing terms that incorporate those clauses. The technical and organizational safeguards described in Section 5 apply to data transferred under them.

You may request further information about the transfer mechanisms we rely on by emailing support@hostalot.com.

12.6 Automated Decision-Making

We do not make decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing. The AI content generation features of Designer Talk operate on instructions you provide and produce content at your request — they do not evaluate, score, profile, or make decisions about you.

12.7 Representative in the Union

We do not currently offer goods or services to individuals in the European Union on a regular basis, and our processing of EEA personal data is occasional and does not involve special categories of data. If and when this changes, we will designate a representative in the Union in accordance with Article 27 GDPR and identify them in this Privacy Policy.

12.8 Data Retention

The retention periods set out in Section 4 apply to personal data processed under this section. We do not retain personal data for longer than is necessary for the purposes for which it was collected.

13. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you via email within a reasonable timeframe as required by applicable law. Our notification will describe the nature of the breach, the data affected, and steps we are taking to address it.

Where the GDPR or UK GDPR applies, we will notify the competent supervisory authority of a personal data breach without undue delay and, where feasible, within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and notify you via email or a notice in the client area where required by law. Your continued use of our services after changes are posted constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Hostalot LLC
Email: support@hostalot.com
Website: hostalot.com
Response time: within 30 days