Privacy policy
What we collect to run, bill and protect your services, who we share it with, and how long we keep it.
Last updated 7 October 2026
Rogue Wave Hosting LLC collects only the information needed to run, bill, and protect your services. We never sell personal information, and we do not inspect the content stored on your services except when investigating abuse or a legal request.
1. Who we are
Rogue Wave Hosting LLC, a limited liability company organized in the State of Texas, United States, is responsible for the personal information described in this policy. Under the EU and UK General Data Protection Regulation (GDPR), we are the data controller. Contact us about privacy at privacy@roguewavehosting.com.
2. Information we collect
- Account details: name, email, phone, billing address, company name, and support ticket history.
- Access data: IP addresses, browser details, and timestamps when you use our website or client area.
- Service records: which services and IP addresses are assigned to you, provisioning history, and actions taken in our control panels.
- Payment records: invoices and transaction IDs from our payment processors. We do not store full card numbers.
- Cookies: our client area uses cookies to keep you signed in and remember your preferences. They are needed for the client area to work, so we do not ask for consent to them.
3. How we use it and why
We use personal information only for the purposes below. Where the GDPR applies, each purpose relies on the legal basis shown.
| Purpose | Legal basis |
|---|---|
| Providing, billing, and supporting your services, and sending account notices | Performance of our contract with you |
| Tax, accounting, and record-keeping, responding to valid legal process, and reporting child sexual abuse material | Legal obligation |
| Preventing fraud and abuse, protecting our network and IP reputation, keeping IP assignment history, and contesting chargebacks | Legitimate interests: keeping our services secure and usable, and establishing or defending legal claims |
| Anything we ask your permission for | Consent, which you can withdraw at any time |
4. Who we share it with
We share personal information only as needed:
- Payment processors, such as Stripe and PayPal, to complete payments. Their privacy policies apply.
- Infrastructure providers, including datacenters, IP address lenders, and upstream networks, when needed to handle abuse, legal requests, or IP reputation issues.
- Payment disputes, where we may send relevant account and usage records to a processor to contest a chargeback.
- Discord, if you contact us there. Discord's privacy policy applies to anything you post on its platform.
- Legal compliance, as described in section 6.
- With your consent, or when needed to carry out your request.
5. International transfers
We are based in the United States and process account information there. Data on your services is stored in Canada. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information will be transferred outside it.
Canada is recognized by the European Commission as providing adequate protection for personal information. For transfers to the United States, we rely on safeguards recognized by applicable law, such as the European Commission's Standard Contractual Clauses, where they are required. Contact us for more information about these safeguards.
6. Law enforcement and legal requests
We disclose information when required by a valid subpoena, court order, or other legal process. We generally respond to US authorities and to authorities in the country where the relevant service is hosted. Unless legally prohibited, we notify the affected customer before disclosure. Send legal requests to legal@roguewavehosting.com.
We may act without legal process where we believe there is an imminent risk of death or serious injury, or to report child sexual abuse material as the law requires.
7. How long we keep it
| Data | Retention |
|---|---|
| Account, billing, and ticket records | 7 years after account closure, for tax and fraud purposes |
| IPv4 assignment history | Kept permanently for abuse handling |
| Network flow data (remote IPs and traffic volume, no content) | Up to 14 days |
| Website and client area access logs | 30 days |
| Data on a terminated service | Deleted when the storage is reclaimed |
We do not capture packet contents.
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and get a copy of it
- Correct information that is inaccurate or incomplete
- Have your information deleted
- Restrict or object to how we use it, including use based on our legitimate interests
- Receive your information in a portable, machine-readable format
- Withdraw consent at any time, without affecting use before you withdrew it
You can view and update most account details in the client area. For anything else, open a ticket or email privacy@roguewavehosting.com. We may need to verify your identity first. We respond within one month, or tell you within that time if we need longer as the law allows.
When you ask us to delete your data, we delete what we can within 30 days and tell you what we must keep and why, such as billing records and IP assignment history.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you may also lodge a complaint with the data protection authority where you live or work, or where you believe a breach of your rights occurred. We would appreciate the chance to resolve your concern first.
9. Data you host on our services
When you store other people's personal information on your services, such as your own users or customers, you decide what is collected and how it is used, and you are responsible for it as the data controller. We process that data only to provide the services under our Terms of Service, access it only as described in this policy, and do not use it for our own purposes.
10. Security
We use reasonable safeguards to protect personal information, but no system is completely secure. On unmanaged VPS services, securing the data on your server is your responsibility. We do not hold your disk encryption keys.
11. Children
Our services are for adults 18 and older. We do not knowingly collect information from children under 13.
12. Changes
We may update this policy at any time. We will email notice of material changes.
13. Contact
Privacy questions: privacy@roguewavehosting.com
Related pages: terms of service, acceptable use policy and service level.