Privacy Policy

This policy explains how RITZSOFT TECH (OPC) PRIVATE LIMITED (“Ritzsoft”, “we”) processes personal data when you use Ritz Hosting. We are a data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) for the account data described below.

Registered office: 19, South Street, Malaiadivaram, Muthalagupatti, Dindigul – 624002, Tamil Nadu, India. Contact: info@ritzsoft.in, +91 90927 25149.

We collect only what we need to sell, provision, bill, and support hosting:

• Account details: name, email address, password hash, optional phone
• Billing: optional GSTIN, company name on invoices, Razorpay payment identifiers and status (not full card numbers)
• Service data: domain names, plan, VestaCP username we generate, SSH or access notes you send us for Managed VPS
• Support: messages you send via the contact form, email, or phone
• Technical logs: IP addresses, login times, and panel/API events needed to run and secure the platform

Payment card and UPI credentials are handled by Razorpay. We store order IDs, payment IDs, and amounts — not PAN/CVV or full card numbers.

• To create and authenticate your account, including email verification
• To take payment, issue GST invoices, and collect tax as required by Indian law
• To provision VestaCP accounts or manage the VPS you assign to us
• To send transactional mail: welcome credentials, invoices, renewal reminders, suspension notices
• To investigate abuse, security incidents, and support tickets
• To improve reliability of the platform (aggregated, non-marketing use of logs)

We do not sell personal data. We do not send third-party advertising newsletters unless you opt in later.

Websites, mailboxes, and databases you host are customer content. We access them only to provision, back up, restore, or debug as you request, or when required to investigate abuse or a legal demand. You are responsible for having a lawful basis for any personal data of your own visitors or mailbox users.

VestaCP passwords we generate are encrypted at rest and shown only in your client portal and welcome email. Panel API hashes never leave the server. We use session cookies to keep you signed in. You should use a unique password for Ritz Hosting.

We share data only with:

• Razorpay, to process payments
• Email delivery providers we use to send transactional mail
• Infrastructure providers that host our application, database, or (for SME) the dedicated VPS we provision for you
• Professional advisers or authorities when Indian law requires disclosure

For Managed VPS, your VPS vendor is your contractor, not ours. We do not receive your cloud-console password unless you choose to send credentials for management.

Account and service records are kept while the account is active. After closure we delete or anonymise operational data when it is no longer needed. Tax invoices and payment records are retained for the period Indian GST and company law require (typically up to eight years). Server snapshots follow the retention on your plan, then rotate.

You may request access, correction, or deletion of your account data by emailing info@ritzsoft.in. We will not delete invoices or records we must keep for tax, dispute, or abuse purposes. You may close the account from the client portal or by writing to us. Withdrawal of consent does not affect processing we must do to complete a paid term or to comply with law.

The Services are intended for adults and businesses. We do not knowingly create hosting accounts for children under 18.

Primary operations are in India. Processors (for example Razorpay or email delivery) may process limited data on infrastructure outside India. We choose vendors that provide a contractual level of protection consistent with this policy.

We will post updates on this page and change the “Last updated” date. For material changes we may also email the address on your account.