Skip to content
Zenith Hosting
Back to home

Privacy Policy

Last updated October 27, 2026

This policy explains what information we collect, how we use and share it, and the choices and rights you have. In short: we use your information to run and secure the Service, we do not sell it for money, and we do not train AI models on the private content of the data you host with us. We use Reddit’s advertising tools to measure how our Reddit ads perform. Some US state laws treat this as “sharing” for advertising, and you can turn it off at any time.

1. Overview

This Privacy Policy explains how Zenith Hosting (“Zenith”, “we”, “us”, or “our”) collects, uses, shares, and protects information when you use the Zenith website at zenith.hosting and our hosting, deployment, migration, and intelligence services (together, the “Service”). It should be read together with our Terms of Service.

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Who we are and how to contact us

Zenith Hosting Pty Ltd, an Australian proprietary limited company, operates the Service for customers worldwide, including in the United States and Europe. For any privacy question or request, or to exercise your rights, contact us at [email protected]. We act as the controller of the personal data we process about you for our own purposes, and as a processor for the data you host within the apps you deploy on the Service. Where the law requires us to appoint a representative for a region such as the European Union or the United Kingdom, we will do so and update this policy.

3. Information we collect

Information you provide

  • Account information: your name, email address, username, and a securely hashed password when you register.
  • Sign-in via Google or GitHub: if you choose to sign in with a third-party provider, we receive basic profile information from that provider, such as your name, email address, and account identifier, in accordance with your settings with them.
  • Billing information: your payments are processed by Stripe. We do not store full payment-card numbers. We receive limited details such as your billing country, the last digits and brand of your card, and your subscription and payment status.
  • Hosted content and business data: the data, files, and content within the apps you deploy, and any data you migrate to or from other services using the Service (“Your Content”).
  • Communications: the information you include when you contact us or request support.

Information we collect automatically

  • Usage and device data: such as your IP address, browser and device type, the pages and features you use, actions you take, referring pages, timestamps, and deployment and resource metrics.
  • Cookies and similar technologies: used to keep you signed in and to keep the Service secure and, depending on your location and choices, for product analytics (PostHog) and advertising measurement (Reddit). See “Cookies, analytics and advertising measurement” below.
  • Security and approximate location data: including information from anti-abuse checks (for example, our captcha provider) and an approximate location derived from your IP address.

4. How we use your information

We use the information we collect to:

  • provide, operate, maintain, and improve the Service, including deploying, hosting, scaling, networking, and securing your workloads;
  • create and manage your account and authenticate you;
  • process payments, billing, and usage metering;
  • send transactional and service messages, such as verification emails, payment confirmations, security alerts, and notices about changes to the Service or our terms;
  • provide intelligence and related features to you, as described in “Intelligence and AI features” below;
  • secure the Service, prevent fraud and abuse, enforce our Terms of Service, and protect the rights and safety of Zenith, our users, and the public;
  • understand how the Service is used and develop new features and improvements;
  • measure and optimise our advertising on Reddit, for example whether people who clicked one of our ads went on to visit our hosting pages or deploy an app;
  • respond to your enquiries and provide support;
  • comply with our legal obligations.

5. Intelligence and AI features

A core part of the Service is the ability to connect your deployed apps and business data to intelligence and agentic features. To provide these features, we may access, process, and aggregate Your Content and related usage data, so that the Service can surface insights, answer questions, and perform actions across the software you run with us.

We do not train our or any third party’s general-purpose AI models on the private content of Your Content. We may use aggregated or de-identified data that does not identify you or your business to operate, secure, evaluate, and improve the Service and its features. Where intelligence features use third-party AI providers, we share only the data needed to perform the requested task and select providers that do not use that data to train their models.

7. Cookies, analytics and advertising measurement

We use necessary cookies to keep you signed in and keep the Service secure and functional. Depending on your location and choices, we also use two optional tools:

  • Product analytics (PostHog): helps us understand how the website and Service are used, including the ad campaign (UTM parameters) that first brought you to us.
  • Advertising measurement (Reddit): we use the Reddit Pixel, provided by Reddit, Inc., in your browser on zenith.hosting and app.zenith.hosting, except checkout pages, to measure and optimise our Reddit ads. It reports page visits, viewing an app’s hosting page, creating an account, starting a deployment, and a deployment first going live. When it runs, your browser sends Reddit the page you viewed and when, your IP address, browser and device information, the Reddit click ID if available, and an identifier Reddit stores in a cookie on our site.

Our server-side Conversions API reports starting a deployment and that deployment first going live. It uses the same event IDs as the browser so Reddit can de-duplicate the reports. These reports include the Reddit click ID from the _rdt_cid cookie, the URL or a referring page; the Reddit cookie ID (_rdt_uuid); your IP address and user agent; the source page URL; and your Zenith account ID hashed with SHA-256. They may include your email address in hashed form if that option is enabled. A deployment going live is reported with a value of US$10 for ad measurement; this is not a payment or your deployment price.

When you are signed in and known when the browser pixel first loads, we may also include your email address and Zenith account ID, hashed with SHA-256 in your browser, during initialisation. We do not add your name to our pixel events or conversion reports. Hashing makes these identifiers harder to read, but Reddit uses them to match you to its users, so they remain personal information. Reddit’s automatic advanced matching is enabled: on pages where the pixel runs, its script can also pick up email addresses and phone numbers shown on the page or typed into forms, and hashes them before sending them. Reddit handles the data under its own Privacy Policy, and may use it to improve and target its ads.

In the EU/EEA, the UK and Switzerland, or when we cannot tell where you are, we ask first: the Reddit Pixel does not load, advertising cookies are not set and we do not send conversion reports until you choose Accept. Until then, or if you decline, PostHog can run in a cookieless mode: it stores nothing on your device and counts visits using an identifier derived on PostHog’s servers. Elsewhere, analytics cookies and Reddit measurement are on by default, and you can turn them off at any time through Cookie settings / Decline or the “Do Not Sell or Share My Personal Information” footer link. That link also opts you out of analytics cookies so our server stops conversion reports for subsequent requests from that browser.

A Global Privacy Control signal or an opt-out turns Reddit measurement off. We do not load the pixel when your browser exposes GPC, and our server does not send conversion reports on requests with the Sec-GPC signal. These choices apply to that browser, not to your account on other browsers or devices. Turning measurement off stops new pixel events from our site and subsequent conversion reports; it cannot retract requests or data already received by Reddit. A Reddit script that has already loaded may have begun automatic collection. You can change your choice in Cookie settings, or contact us using the details under “Your privacy rights”.

8. How we share information

We do not sell your personal information for money. Our use of Reddit’s advertising tools (see “Cookies, analytics and advertising measurement”) may count as “sharing” for cross-context behavioural advertising, or possibly a “sale”, under some US state privacy laws. See “Your privacy rights” for how to opt out. We share information only as described here:

  • Service providers (sub-processors): trusted vendors that process data on our behalf to run the Service, under contracts that require them to protect it. These currently include: Stripe (payments), Resend (transactional email), Cloudflare (anti-abuse and network security), Google and GitHub (sign-in, where you use them), PostHog (product analytics), our cloud and Kubernetes infrastructure providers (hosting and compute), and AI model providers used to power intelligence features. We may add or change sub-processors as the Service evolves.
  • Advertising partner (Reddit): Reddit, Inc., in the United States, receives the advertising-measurement data described above through the Reddit Pixel and our conversion reports. Reddit is not our sub-processor for this data: under Reddit’s advertising terms, Reddit decides for itself how it uses the data, as a separate (independent) controller under the GDPR, and handles it under its own privacy policy.
  • Legal and safety: where we reasonably believe it is necessary to comply with the law, a legal process, or a lawful request, to enforce our terms, or to protect the rights, property, or safety of Zenith, our users, or others.
  • Business transfers: in connection with a merger, acquisition, financing, reorganisation, or sale of assets, in which case your information may be transferred as part of that transaction.
  • With your direction or consent: including data you choose to send to a third-party service through the Service.

9. International data transfers

We operate globally, and your information may be stored and processed in Australia, the United States, the European Union, and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country. Where we transfer personal data across borders, we rely on appropriate safeguards where required, such as the European Commission’s Standard Contractual Clauses, to protect your information.

If you allow advertising measurement, data collected through the Reddit Pixel and our conversion reports is disclosed to Reddit, Inc. and processed in the United States. Because Reddit decides how it uses that data, we cannot control it in the same way we control data held by our service providers. For people in the EEA, the UK and Switzerland, this transfer happens only after you consent, and relies on the safeguards in Reddit’s advertising data processing terms (the EU–US Data Privacy Framework or Standard Contractual Clauses, as applicable). If you are in Australia, this is a disclosure to an overseas recipient for the purposes of Australian Privacy Principle 8. Reddit, Inc. is located in the United States. It handles the data under its own privacy policy, and you can opt out at any time.

10. Data retention

We keep your information for as long as your account is active and as needed to provide the Service, and afterwards for as long as necessary to comply with our legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements. After your account is closed, we may delete or de-identify your information, although copies may persist in routine backups for a limited period before being overwritten. For advertising measurement, our server sets the first-party _rdt_cid cookie for 28 days on zenith.hosting and its subdomains. Reddit controls the lifetime of its own _rdt_uuid identifier cookie. We delete both cookies in the current browser when you decline or use the Do Not Sell or Share link. We keep your advertising opt-out choice in a cookie for 400 days. Reddit keeps the data it receives in line with its own privacy policy.

11. Security

We use reasonable technical and organisational measures designed to protect your information, including encryption in transit, access controls, and isolation between customer workloads. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. The Service is offered as an open alpha; you are responsible for keeping your credentials confidential and for maintaining your own backups of data you consider important. If we become aware of a security incident affecting your personal data, we will notify you where required by law.

12. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal data. To exercise any of them, contact us at [email protected]. We will respond as required by applicable law and may need to verify your identity first.

European Economic Area and United Kingdom

You may have the right to access your personal data; to have it corrected or erased; to restrict or object to its processing; to data portability; and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data-protection supervisory authority.

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing without a lawful basis. If you believe such a decision has been made about you, contact us to request human review.

California and other US states

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), may give you the right to know what personal information we collect, use, and disclose; to access, delete, and correct it; to opt out of the “sale” or “sharing” of your personal information; and to be free from discrimination for exercising these rights. Residents of some other US states may have similar rights. You may use an authorised agent to make a request on your behalf.

Sharing for advertising. We do not sell personal information for money. Through the Reddit Pixel on zenith.hosting and app.zenith.hosting, except checkout pages, and our conversion reports, we make these categories of personal information available to Reddit, Inc. for advertising measurement, and Reddit may also use them for ad targeting: identifiers (such as IP address, Reddit’s cookie identifier, the Reddit click ID, and your email address and account ID in hashed form); internet or other electronic network activity information (such as pages viewed, the ad campaign that referred you, and browser and device information); and commercial information, namely that you signed up, started a deployment, or your app went live. Automatic advanced matching may also collect email addresses and phone numbers in hashed form. Under the CCPA this may be “sharing” for cross-context behavioural advertising and, possibly, a “sale”. We do not knowingly sell or share the personal information of consumers under 16. We keep this information for the periods described in “Data retention”.

Do Not Sell or Share My Personal Information. You can opt out at any time with the “Do Not Sell or Share My Personal Information” link in our site footer, through Cookie settings / Decline, or by emailing [email protected] with “Do Not Sell or Share” in the subject. The footer link and Decline turn off the pixel and analytics cookies in that browser, and stop server conversion reports for subsequent requests from it. We honour Global Privacy Control (GPC) signals for the browser and requests that send them. The opt-out and GPC are not synced to your account or other browsers or devices. In the EU/EEA, the UK and Switzerland, or when your location is unknown, Reddit measurement waits for Accept; elsewhere it is on by default and you can turn it off at any time.

Other regions

If you are elsewhere, including Australia, you may have similar rights under your local law, such as the right to access and correct your personal information. Contact us and we will help you exercise the rights available to you. You can opt out of advertising measurement at any time through Cookie settings in the site footer. We use Reddit’s advertising tools to measure and optimise our own advertising, and you can always ask us to stop.

13. Children’s privacy

The Service is not directed to children under 13, and you must be at least 13 (or older where your jurisdiction requires) to use it. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at [email protected] and we will take appropriate steps to delete it.

14. Third-party software and links

The Service lets you deploy and use software created by third parties, and may link to third-party sites and services. We do not control these and are not responsible for their privacy practices. Your use of third-party software and the data you process within it are governed by the terms and privacy policies of the relevant providers, which we encourage you to review.

15. Changes to this policy

We may update this Privacy Policy at any time. When we do, we will update the “Last updated” date at the top of this page, and the updated policy takes effect when posted. For material changes, we will make reasonable efforts to notify you by reasonable means, which may include email, a banner or notice in your dashboard, or an in-product notification. Your continued use of the Service after the changes take effect constitutes your acceptance of the updated policy.

16. Contact us

If you have any questions or requests about this Privacy Policy or how we handle your information, contact us at [email protected].