Legal

Privacy Policy

Draft — review with counsel before launch.

Last updated: July 7, 2026

Who we are

Belov Cloud is AI-native managed WordPress hosting, operated by Belov Digital Agency. We host and look after WordPress sites on managed infrastructure, with self-healing AI operations and visual monitoring built in. You can reach us any time at info@belov.cloud.

For the purposes of data protection law, the data controller responsible for your account and the personal data described in this policy is Belov Digital Agency, Inc., a company incorporated in the State of Delaware, United States, with its registered address at 651 N Broad Street, Suite 206, Middletown, DE 19709, USA.

This policy explains what personal data we collect, why we collect it, who helps us process it, and the rights you have over it. It applies to the Belov Cloud website at belov.cloud and to the hosting service we provide to you.

What data we collect

We try to collect only what we genuinely need to run the service. In practice, that falls into a few categories.

Account information. When you sign up, we collect your name, email address, and the details you give us to set up and manage your account. If you contact us about migrating from another host, we may also hold the technical details you share so we can plan and carry out the move.

Billing information. Payments are handled by Stripe, our payment processor. We do not see or store your full card number. Stripe processes your card details directly and shares with us the limited information we need to manage billing — such as your billing name, the last four digits of your card, your billing country, and your subscription and invoice history. Stripe's own handling of your payment data is governed by Stripe's privacy policy.

The site data we host for you. To provide hosting, we store and process the content of the WordPress sites you run with us. This includes your site files, your databases, and the backups we keep of them. That data can contain personal data about your visitors, customers, or users — for example, names, email addresses, comments, or order details held inside your WordPress installation. For this site content, you are the controller and we act as your processor: we process it on your instructions to deliver, secure, and back up your hosting. The detailed terms of that relationship are set out in our data processing terms, which are available on request at info@belov.cloud.

Server logs and technical data. Like any hosting provider, our systems automatically record technical information needed to run and secure the service. This includes IP addresses, request logs, timestamps, error and performance data, and similar diagnostic information from our servers, CDN, and monitoring systems. We use this to keep your sites online, investigate problems, and defend against abuse and attacks.

Support communications. When you email us or otherwise get in touch, we keep a record of that correspondence — your messages, our replies, and any details you share so we can help.

Cookies and analytics. Our service uses an essential session cookie so that signed-in areas work and stay secure. We also keep first-party visitor analytics — a random identifier in a cookie set and read only by belov.cloud (never shared with third parties, and no IP addresses are stored) that helps us see, in aggregate, which pages visitors view and for how long; opting out of analytics in the cookie notice disables this too. In addition we use Google Analytics 4 to understand, in aggregate, which pages and features are useful — page views, clicks on key buttons, and anonymised purchase-funnel steps. We configure it conservatively: no advertising or personalization signals are sent anywhere, we never put names, emails, or site addresses into analytics events, and Google Consent Mode applies — analytics cookies are off by default for visitors in the EEA, UK, and Switzerland, and every visitor can opt out with one click in the cookie notice on any page. Google processes this data as described in Google's own privacy policy. Beyond that, we do not use advertising cookies, cross-site tracking, or marketing trackers on the service.

How and why we use your data

We use your data only for clear, limited purposes:

To provide the hosting. Running your WordPress sites, serving your content, storing your files and databases, and keeping backups so your data can be restored.
To secure and stabilise the service. Monitoring availability and performance, our self-healing AI operations and visual monitoring, blocking abuse and attacks, and investigating incidents.
To handle billing. Setting up and charging your subscription, applying our flat pricing, issuing invoices, and managing renewals, upgrades, and cancellations.
To support you. Answering your questions, helping with migrations, and resolving technical issues.
To run and improve the service responsibly. Maintaining our infrastructure, diagnosing problems, and making the platform more reliable.
To meet legal and accounting obligations and to establish, exercise, or defend legal claims where necessary.

Where the law requires a legal basis, we rely on: performing our contract with you (to deliver the hosting and billing you signed up for); our legitimate interests (to secure, monitor, and improve the service, and to prevent abuse); and compliance with legal obligations (such as tax and accounting rules). We do not sell your personal data, and we do not use it for advertising.

Sub-processors

To run the service we rely on a small set of trusted infrastructure and service providers. These sub-processors may process personal data — including, where relevant, the site data we host for you — strictly to perform their part of the service:

DigitalOcean — hosting compute and storage (US data node).
Hetzner — control-plane infrastructure (Germany).
Cloudflare — CDN, proxy, and SSL/TLS, which routes and protects traffic to your sites.
Cloudflare R2 — object storage, used for some backups.
Stripe — payment processing and billing.
Migadu — email delivery for service and account communications.
Google (Google Analytics 4) — aggregate website usage analytics, configured without advertising features and subject to the consent controls described above.

Each provider acts under its own contractual and data-protection commitments, and we only share the data they need to do their job. We may update this list as our infrastructure evolves; significant changes will be reflected here. A current list of sub-processors is available on request at info@belov.cloud, and we will give reasonable notice of any new sub-processor that will process the site data we host for you.

Where your data is stored

Belov Cloud runs across infrastructure in the United States (our DigitalOcean data node) and Germany (our Hetzner control plane). Cloudflare, as a global CDN, may cache and route content through data centres in multiple regions to deliver your sites quickly and securely. Backups may be stored in Cloudflare R2, whose storage location is managed by Cloudflare's global object-storage network.

International transfers

Because our infrastructure and providers operate in more than one country, your personal data — and the site data we host for you — may be transferred to and processed in countries outside your own, including the United States. Where we transfer personal data out of the European Economic Area or the UK, we rely on appropriate safeguards recognised under data protection law, such as the European Commission's Standard Contractual Clauses and, where a provider participates, the EU–US Data Privacy Framework, to ensure your data remains protected. You can contact us at info@belov.cloud for more detail on the safeguards in place.

Security

We take the security of your data seriously. We use encryption in transit (SSL/TLS via Cloudflare), access controls and least-privilege practices for our systems, continuous monitoring, and self-healing AI operations designed to detect and recover from problems quickly. Backups are kept so your data can be restored after a failure or incident.

No system can be guaranteed perfectly secure, but we work to protect your data with measures appropriate to the risk, and we keep our practices under review. If a personal data breach occurs that is likely to affect you, we will notify you and, where required, the relevant authorities, in line with our legal obligations.

Data retention and deletion

We keep your personal data only for as long as we need it for the purposes described in this policy.

Account and site data is retained for as long as your account is active.
Backups are kept on a rolling schedule: we retain roughly the most recent 14 daily backups per site, and older backups are overwritten or deleted as part of normal rotation.
Billing and invoice records are kept for as long as required to meet our tax, accounting, and legal obligations (generally up to seven years).
Server logs are retained for a limited period for security and diagnostics (typically up to 30 days).
Support correspondence is kept for the life of your account and a reasonable period afterwards to maintain service history.

When you close your account, we delete or anonymise your site files, databases, and account data within 30 days, after which remaining copies age out of our backups on the rotation schedule above. Some data may be retained longer where the law requires it, or to resolve disputes and enforce our agreements. You can ask us to delete your data at any time — see Your rights below.

Your rights

If you are in the European Economic Area, the UK, or another region with comparable data protection laws, you have rights over your personal data, including the right to:

Access the personal data we hold about you.
Rectify data that is inaccurate or incomplete.
Erase your data ("right to be forgotten"), where applicable.
Port your data — to receive it in a structured, commonly used, machine-readable format, or have it transferred to another provider where technically feasible.
Restrict or object to certain processing, including processing based on our legitimate interests.
Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email us at info@belov.cloud. We will respond within the timeframe required by law. You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data properly (in the EU/EEA, the authority in your country of residence — for example, in Portugal, the Comissão Nacional de Proteção de Dados (CNPD)).

Where the data in question is the site content we host on your behalf, you act as the controller for your own visitors and users; we will assist you in responding to their requests as your processor, in line with our data processing terms.

Children

Belov Cloud is a hosting service for businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at info@belov.cloud and we will take appropriate steps to delete it. You are responsible for the content of the sites you host with us, including any data relating to children that you choose to collect through them.

Changes to this policy

We may update this policy from time to time as our service, infrastructure, or legal obligations change. When we make material changes, we will update the date at the top of this page and, where appropriate, let you know by email or through the service. We encourage you to review this page periodically. The current version always lives at belov.cloud/privacy.

Contact us

If you have any questions about this policy or about how we handle your data, we are glad to help.

Email: info@belov.cloud
Privacy policy: belov.cloud/privacy
Terms: belov.cloud/terms
Contact: belov.cloud/contact
Postal address: 651 N Broad Street, Suite 206, Middletown, DE 19709, USA
Privacy contact: We have not appointed a dedicated Data Protection Officer; privacy enquiries are handled by our team at info@belov.cloud.