Kinsta Privacy Policy

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. Information Sharing and Disclosure
4. Data Security
5. Data Retention
6. Your Rights
7. Cookies and Tracking
8. International Data Transfers
9. Changes to This Policy
10. Contact Us

This Privacy Policy describes how Kinsta Inc. ("we," "us," or "our") collects, uses, and shares your personal information when you use our managed WordPress hosting and cloud hosting services, visit our website, or otherwise interact with us.

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy applies to all users of Kinsta services, regardless of location, and complies with applicable data protection laws including GDPR and CCPA.

1. Information We Collect

Personal Information You Provide

We collect personal information you directly provide to us, including:

• Account Information: Name, email address, billing address, phone number, and payment information when you create a Kinsta account
• Support Communications: Information you provide when contacting our support team, including chat logs, support tickets, and feedback
• Website Content: Files, databases, and other content you upload to your Kinsta hosting account
• Marketing Communications: Information you provide when subscribing to our newsletters or marketing communications

Information We Collect Automatically

When you use our services or visit our website, we automatically collect:

• Usage Information: How you use our services, including features accessed, pages visited, and actions taken
• Device Information: IP address, browser type, operating system, device type, and unique device identifiers
• Performance Data: Server response times, error rates, and other performance metrics for your hosted sites
• Log Information: Server logs, access logs, and security logs related to your use of our services

Information from Third Parties

We may receive information about you from:

• Payment Processors: Payment status and transaction information from payment providers
• Partners: Information from partners who refer customers to us or integrate with our services
• Public Sources: Publicly available information to verify account details or prevent fraud

2. How We Use Your Information

We use your personal information for the following purposes:

Service Provision

• Providing, maintaining, and improving our hosting services
• Processing payments and managing billing
• Creating and managing your account
• Providing technical support and customer service

Communication

• Responding to your inquiries and support requests
• Sending service-related notifications and updates
• Providing information about new features or services (with your consent)
• Sending marketing communications (where permitted by law)

Security and Compliance

• Monitoring and maintaining the security of our services
• Detecting and preventing fraud, abuse, and security incidents
• Complying with legal obligations and law enforcement requests
• Enforcing our terms of service and policies

Business Operations

• Analyzing usage patterns to improve our services
• Conducting research and development
• Managing business relationships and partnerships
• Processing business transactions

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We share information with third-party service providers who help us operate our business, including:

• Cloud infrastructure providers (Google Cloud Platform)
• Payment processors and billing services
• Customer support platforms
• Security and monitoring services

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal process, subpoenas, or court orders
• Respond to law enforcement requests
• Protect our rights, property, or safety
• Prevent fraud or security threats

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: Data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Strict access controls limit who can access your personal information
• Monitoring: Continuous monitoring for security threats and vulnerabilities
• Compliance: Regular security audits and compliance certifications
• Incident Response: Established procedures for responding to security incidents

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using reasonable and appropriate measures.

5. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Account Information: Retained while your account is active and for up to 7 years after closure for legal and tax purposes
• Website Content: Retained according to your hosting plan's backup retention policy
• Support Communications: Retained for 3 years for quality assurance and training purposes
• Marketing Information: Retained until you unsubscribe or request deletion
• Log Data: Typically retained for 90 days for security and performance analysis

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

GDPR Rights (EU Residents)

• Access: Request access to your personal information
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal information
• Portability: Request transfer of your information to another service
• Restriction: Request restriction of processing
• Objection: Object to processing for certain purposes

CCPA Rights (California Residents)

• Know: Request disclosure of categories and specific pieces of personal information
• Delete: Request deletion of personal information
• Opt-Out: Opt-out of the sale of personal information (we don't sell information)
• Non-Discrimination: Not be discriminated against for exercising your rights

To exercise your rights, please contact us at [email protected].

7. Cookies and Tracking

We use cookies and similar technologies to improve your experience on our website:

Types of Cookies We Use

• Essential Cookies: Required for the website to function properly
• Performance Cookies: Help us understand how visitors use our website
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our services. For more information, see our Cookie Policy.

8. International Data Transfers

Your information may be processed and stored in countries other than your own, including the United States. When we transfer data internationally, we use appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Other legally recognized transfer mechanisms

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Providing notice through our services

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: