This Privacy Policy explains how Pyxsoft Computing Ltd. (London, United Kingdom) — operating CentralHost at www.centralhost.sh — collects, uses, shares and protects personal data. It applies to our website, web application and related services (the "Service"). We act as the data controller for the personal data described here.
1. Data we collect
Information you provide
- Account data: name, email address, password (stored hashed) and company details.
- Billing data: subscription and purchase records. Card payments are handled by Paddle; we do not store full card numbers.
- Communications: messages you send us for support or enquiries.
Operational data from your servers
- Inventory and metrics: server health, resource usage, services and configuration reported by the agent you install.
- Logs and AI interactions: data the AI assistant reads during investigations and the actions you approve. This may include technical data from your systems.
Information collected automatically
- Usage and device data: IP address, browser type, pages visited and similar diagnostics, collected to operate and secure the Service.
- Cookies: we use strictly necessary cookies to keep you signed in and to operate the application. We do not use advertising cookies.
2. How we use data
- To provide, maintain and improve the Service.
- To authenticate you and secure your account.
- To process payments and manage subscriptions.
- To operate the AI assistant and carry out the actions you approve.
- To provide support and respond to your enquiries.
- To detect, prevent and address security incidents, fraud and abuse.
- To comply with legal obligations.
3. Legal bases (where applicable)
Where data protection law such as the UK GDPR applies, we process personal data on the basis of: the performance of our contract with you; our legitimate interests in operating and securing the Service; your consent (where requested); and compliance with legal obligations.
4. Sharing your data
We do not sell your personal data. We share data only with service providers that help us operate the Service, under appropriate confidentiality and data-protection obligations, including:
- Paddle — payment processing and merchant of record.
- Cloud and infrastructure providers — hosting of the Service.
- AI/LLM providers — to power the AI assistant when you use it.
We may also disclose data where required by law, to protect our rights, or in connection with a business transfer.
5. International transfers
We are based in the United Kingdom and may process data in other countries through our service providers. Where we transfer personal data internationally, we use appropriate safeguards as required by applicable law.
6. Data retention
We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes and enforce our agreements. You can request deletion of your account, after which we will delete or anonymize personal data unless we are required to retain it.
7. Security
We implement technical and organizational measures to protect personal data, including encryption in transit, least-privilege access and audit logging. No method of transmission or storage is completely secure, but we work to protect your data and to notify you of incidents where required by law.
8. Your rights
Depending on your location, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact legal@centralhost.sh. You may also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).
9. Children
The Service is not directed to children under 18 and we do not knowingly collect personal data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, provide additional notice.
11. Contact
Pyxsoft Computing Ltd., London, United Kingdom. For privacy questions or to exercise your rights, contact legal@centralhost.sh.
Questions about this policy? Contact us at legal@centralhost.sh.