1. Introduction

Crystalweb LLC respects privacy and is committed to protecting personal data processed through our website, billing portal, support channels and hosting infrastructure.

This Privacy Policy applies to crystalweb.net, the customer/billing portal, orders, support tickets, contact emails, web hosting, domain/DNS, email, SSL, databases, backups, Web TV/Web Radio hosting, streaming servers and related technical services.

Hosting providerWe process technical data needed to operate services: IPs, DNS, logs, server IDs, backups and service metadata.
Customer contentContent uploaded by customers remains the customer's responsibility. We host it as an infrastructure provider.
Security & abuseWe use logs and abuse reports to protect against spam, malware, phishing, DDoS, unauthorized access and illegal use.
TransparencyWe do not sell personal data. Sharing occurs only for operations, support, payments, security or legal compliance.

2. Crystalweb's Role in Hosting Services

In a web hosting environment, there are two main categories of data that should be clearly separated:

ControllerCustomer account, billing, support and website visitor data

For account details, billing, payments, communications, support tickets, security logs of our own website and cookies/analytics, Crystalweb determines the purposes and means of processing.

Processor / Hosting ProviderData hosted by customers

For personal data inside customer websites, databases, emails, media files, backups or applications, the customer is usually the controller and Crystalweb provides hosting infrastructure.

In practice: if a user wants access to or deletion of data stored inside a customer website or application, they should first contact the owner/operator of that website. Crystalweb may assist the customer technically but does not decide the customer's content or legal basis for processing.

3. Company and Contact Details

For data related to customer accounts, billing, support, website analytics, communications and service management, the data controller is:

CRYSTALWEB LLC
1209 Mountain Road PL NE, Ste N
Albuquerque, New Mexico 87110
Bernalillo County, USA

[email protected][email protected]Contact Form

For abuse reports, malware, phishing, spam, copyright/security complaints or illegal use of services, contact [email protected].

4. Data We Collect

Depending on the service, we may process the following categories of data:

Account & billingName, company name, address, country, phone, email, billing details, orders, invoices, payments, renewals, cancellations and support/billing history.
Technical service dataDomains, DNS records, IP addresses, server identifiers, hostnames, control panel usernames, service IDs, SSL status, package limits, configuration metadata and activation details.
Server & access logsIP addresses, timestamps, user agents, HTTP requests, error logs, authentication attempts, FTP/SFTP/SSH/control panel logs, mail logs/headers and security events where applicable.
Support dataTicket messages, emails, attachments, screenshots, technical descriptions, troubleshooting notes and information the customer provides to resolve an issue.
Website visitorsIP address, browser/device information, referrer, approximate location, pages visited, cookies/identifiers and conversion data from tags where used.
Abuse & complianceReports related to spam, malware, phishing, copyright/security complaints, headers, URLs, logs, IP evidence, provider communications and investigation actions.

5. Customer-Hosted Data and Content

Web hosting services allow customers to upload or store content such as websites, files, images, videos, databases, emails, scripts, backups and applications. This content may include personal data of third parties, such as visitors, users, customers or subscribers of the customer.

  • Crystalweb does not determine why the customer collects or publishes this data.
  • We do not proactively inspect all hosted content and do not use it for advertising purposes.
  • We may access hosted content only when necessary for technical support, migration, backup/restore, security, abuse investigation, legal compliance or infrastructure protection.
  • The customer is responsible for maintaining their own privacy policy, cookie policy, legal basis for processing and appropriate security settings for their website or application.

6. Domains, DNS, SSL and Email Hosting

Domain registrations and DNS

When we provide or manage domain/DNS services, we may process domain names, DNS records, nameservers, registrant/admin/technical contact data and related order details. Depending on the registrar, registry and domain extension, some data may be shared with domain registrars, registry operators, escrow providers or displayed in WHOIS/RDDS according to applicable rules.

SSL certificates

For issuing or managing SSL/TLS certificates, domain details, validation records, email contacts or technical information may be submitted to certificate authorities or related providers.

Email hosting

If you use email hosting, mailboxes, aliases, mail logs, authentication logs, headers, spam filtering results and delivery status may be processed for email delivery, troubleshooting, anti-spam, security and abuse handling. We do not systematically read email content, but access may occur when requested by the customer for support or when required for security, abuse or legal compliance.

7. Logs, Network Security and Abuse Prevention

As a hosting provider, we keep technical logs for operation, security and reliability. Logs help identify downtime, errors, brute-force attacks, spam, malware, phishing, DDoS events, unauthorized access and other abuse.

Security-related logs may be used to protect Crystalweb LLC, customers, third-party networks and the public internet. In serious abuse cases, relevant evidence may be shared with datacenters, network providers, registrars, payment providers, law enforcement or affected third parties where legally appropriate.

8. Billing, Payments and Support

Billing data is processed to create accounts, issue invoices, process renewals, handle cancellations, prevent fraud and comply with accounting or legal obligations. Payment details may be processed by third-party payment processors; Crystalweb does not need to store full card details when a payment processor handles the transaction.

Support tickets and emails may include technical information, credentials shared by the customer, screenshots or logs. Customers should avoid sending unnecessary sensitive data and should rotate temporary credentials after support work is complete.

9. Website Cookies, Analytics and Google Tags

Our website and billing-related pages may use cookies, security tokens, analytics tools and advertising/conversion tags to operate the website, maintain sessions, measure performance, understand traffic and improve services.

Where Google tags, analytics or advertising/conversion tools are used, data such as page visits, device/browser information and conversion events may be sent to Google services according to the applicable Google terms and privacy settings.

10. Sharing and Subprocessors

We may share data with trusted providers where needed to deliver services, including datacenters, network providers, DDoS/security providers, billing systems, payment processors, support tools, domain registrars, certificate authorities, email/anti-spam providers and professional/legal/accounting advisors.

We do not sell personal data. Data may also be disclosed when required by law, court order, valid legal process, abuse investigation or to protect the rights, safety and infrastructure of Crystalweb LLC, customers or third parties.

11. Retention and Deletion

We retain data only for as long as needed for service operation, billing, support, security, abuse prevention, legal compliance and legitimate business purposes. Backups may remain for a limited period according to backup rotation schedules even after customer deletion or service cancellation.

When a service is terminated, hosted data may be deleted according to operational schedules. Customers should always keep their own backups before cancelling or migrating services.

12. Privacy Rights

Depending on applicable law, individuals may have rights to access, correct, delete, restrict or object to processing of their personal data, and to request data portability. Requests related to Crystalweb account, billing or support data can be sent to [email protected].

For data hosted inside a customer website, application, mailbox or database, requests should usually be directed to the customer who controls that website or service.

13. Customer Obligations

Customers using Crystalweb hosting services must maintain appropriate privacy notices, cookie notices, consent mechanisms, security settings, access controls and legal bases for their own websites, applications, mailing lists and hosted content.

Customers must not use the services to collect or process personal data unlawfully, send spam, host malware/phishing or violate the rights of others.

14. Changes to This Policy

Crystalweb LLC may update this Privacy Policy to reflect changes in services, laws, infrastructure, security practices or business operations. The latest version will be published on this page.