Privacy policy

the company that runs Tanzahost (its details are not set up yet), (not set up yet), is responsible for your personal data when you use Tanzahost and our website. We follow Tanzania's Personal Data Protection Act, are registered with its Personal Data Protection Commission, and also follow Europe's GDPR and the UK's data protection law where they apply to you.

For the personal data your apps and sites hold about their own visitors and customers, you decide what happens to it and we only host it for you. The data processing agreement covers that.

Your account: your email, name, country, the wallet's currency, your time zone, and a phone number if you add one. Your password is kept only as a strong hash by our login system; with a passkey we keep only its public half.

Logging in: your logins and devices, with the address you connected from, your browser and the country worked out from the address. Failed logins are counted against the address and a hash of the email.

Payments: your top-ups, receipts and charges, and the card's brand, last four digits and country. The card number itself goes to our card payments company and never reaches us.

What you do in your account: an activity log of who did what and when, so you and we can see every change.

Your apps and sites: the code, files, databases, settings and logs you put on Tanzahost, and numbers about them (memory, processor, requests).

Domains: the owner details you give for each domain you register, which registries require.

Support: your conversations with Sali and our team.

Visitors of the sites we host: our protection at the door sees each visit's address and request to block attacks.

• To run your account and the services you ask for (our contract with you).
• To charge, issue receipts and keep the records tax law requires (a legal duty).
• To keep accounts, customers' sites and our platform safe: stopping password guessing, fraud, attacks and abuse (our legitimate interest, and a legal duty).
• To tell you about your account, your apps, your money and changes to our terms. News and offers only if you ask for them, and you can stop them at any time.

We never sell personal data, and never use your apps' data for anything but hosting it.

Sali is an AI that answers support questions and, when you pay for it, works on your code as Sali Pro. To answer, it reads what you ask and the parts of your account you could see yourself, such as an app's logs, settings and code.

Sali's answers come from an outside AI provider, whose servers may be in China. Passwords, keys, variables' values and other secrets are removed before anything is sent, and are never sent. The provider may not use what we send to train its models.

Sali never moves money, never suspends anyone and never changes security settings: it suggests, and a person decides. Every conversation is logged. You can always ask for a person instead.

We scan the public pages of the sites we host, and watch how apps behave, to find phishing, malware, mining and attacks. Suspicious findings go to a person, who decides. We also check public blocklists. We don't read private data in your databases or files for this.

Only the outside companies we need to run Tanzahost, each bound by a contract to protect your data and use it only for us: the companies whose servers we run on, our card payments company, the AI provider behind Sali, our email and text-message senders, the domain registrar and the certificate authorities. The list of outside companies says what each does, where, and what it receives.

We give data to an authority only when the law requires it, and tell you unless the law forbids it.

Your apps and their data stay in the location you choose for each project, and its backups in another location. If you turn on "Data stays in this country" for a project, its backups stay in the same country too.

Some of the companies above work in other countries, such as the European Union, the United Kingdom, the United States and China. We send data abroad only with the permits and protections the law asks, such as the Tanzanian Commission's transfer permit and Europe's standard contract clauses.

• Your account: while it's open. 30 days after you close it, your name, email, phone, devices and login are erased; the activity log keeps its entries without them.
• Logins: a session lasts 30 days. Failed logins are kept 24 hours, a record of your sessions 60 days, and a known device a year after it was last used.
• Apps: logs 7 days; minute numbers 24 hours, and 5-minute summaries 90 days.
• Visitors' addresses in our protection log: at most 8 days. Your apps' own logs don't keep visitors' addresses.
• Backups: made 5 days a week and each kept 7 days, 30 days while an account is suspended; a project copied to your own Google Drive is kept only there. A deleted project's backups are emptied 7 days later.
• A deleted project: 7 days, so you can change your mind. A stopped account's data: 30 days.
• Sali's conversations: 90 days, unless they're part of a support ticket, which is kept while your account is open.
• Receipts and payment records: as long as tax law requires, at least 5 years, even after you close your account.
• Exports and uploads: 24 hours. Deleted files and earlier versions in the file manager: 7 days.

Records of your payments are sensitive data under Tanzania's law. When you create your account, or accept updated terms, you agree that we keep them for the reasons above. Without them we can't take payments.

You can ask to see the personal data we hold about you, have it corrected, get a copy to take elsewhere, have it erased, or object to how we use it. Most of it you can see and change yourself in your profile and settings. Write to support@tanzahost.com: we answer within 30 days.

If you're unhappy with our answer, you can complain to Tanzania's Personal Data Protection Commission, or to the data protection authority where you live.

Every connection is encrypted, secrets are kept encrypted, logins need a strong password or a passkey, and staff reach customer data only when needed, with every look logged and shown to you. If a breach puts your data at risk, we tell you and the authorities as the law requires.

We use only the cookies Tanzahost needs to work, such as keeping you logged in. The cookie notice lists them. We use no advertising or tracking cookies.

Tanzahost is not for children. We don't knowingly collect children's data, and delete it if we find it.

When this policy changes, we email you at least 30 days before, and you accept it at your next login. Every version stays here with its date.