Privacy Policy

This Privacy Policy describes how GeHost collects, uses, stores, and protects personal information when you access the website, the control panel, or services such as hosting, VPS, domains, professional email, MailGe, Cortex, and other digital solutions from the company. Processing is limited to the stated purposes, service delivery, support, security, and compliance with legal obligations.

We use your information to create and manage accounts, deliver hosting, VPS, email, MailGe, Cortex, and other contracted services, process charges, authenticate access, operate features and integrations chosen by the user, provide support, prevent abuse and incidents, send essential communications, improve the experience, and comply with legal obligations.

We do not sell or rent personal information. We may share only the necessary data with providers that support the operation, such as payment processing, infrastructure, service delivery, and support; with integrations that the user chooses to enable; when required by law; or to protect users, GeHost, and third parties. Each sharing arrangement must observe the purpose of the service and the applicable protection measures.

We adopt technical and organizational measures proportional to the risk to protect data against unauthorized access, loss, alteration, disclosure, or destruction. Applicable measures include encrypted connections, access controls, security logs, permission segmentation, and operational monitoring. No environment connected to the internet is risk-free, so the user must also protect their credentials and devices.

We retain personal information for as long as necessary to deliver the service, preserve security and continuity, comply with legal or regulatory obligations, and exercise rights. Retention periods may vary according to the type of data, the contracted plan, the retention configuration, and tax requirements. Data may be deleted or anonymized when there is no longer a purpose or basis for keeping it.

To operate MailGe and professional accounts, we may process authentication credentials, mailbox settings, messages, attachments, contacts, calendar, technical logs, and user preferences. Contacts, calendars, and external services are connected only when the user enables the corresponding integration. Content is processed to deliver the requested features, ensure security, provide support, and comply with the retention rules applicable to the service.

When using Cortex, we may process account data, usage logs, instructions, conversations, files, and permissions necessary to generate responses, maintain the history chosen by the user, provide continuity, and operate the contracted features. Processing may vary depending on the surface used, the plan, and the configured integrations. Users should avoid entering personal or confidential data that is not necessary for the intended purpose.

We use cookies to improve your experience, personalize content, and analyze site traffic. You can manage your cookie preferences through your browser settings.

We may update this Privacy Policy periodically. Changes will be communicated through our website and/or by email. Continued use of our services after the changes constitutes acceptance of the new policy.

To exercise your rights or clarify any questions about this policy, please contact our Data Protection Officer by email: contato@gehost.com.br or through chat.

To speed up and improve support, GeHost uses Artificial Intelligence (AI) in its service channels (chat, WhatsApp, and tickets), without giving up human contact. When you reach out, you may be assisted by an AI, which accesses and records only the data necessary for your request. AI assistance complies with the Consumer Protection Code and the General Data Protection Law (LGPD – Law No. 13.709/2018). You can request human assistance at any time, and decisions requiring human review are not made exclusively by AI.

When you install and open the GeHost app, even before you sign in, the app registers the device on our server. We store: on Android, the notification token issued by Firebase Cloud Messaging (a Google service), used only to deliver notifications to this device; the device ID, a random identifier and a secret code created by our server and sent by the app with every request (X-Aparelho header), which is not the serial number, the IMEI or the advertising ID of the phone; and the operating system (Android or iOS), the notification preferences, the dates of registration and last use, the account signed in on the device and the notification center. On iPhone, for now, notifications are shown only in the in-app notification center, with no notification token.

This data is used to send the notifications you chose (invoice due, payment confirmed, support reply, service suspended or reactivated and, for staff, tickets and payments) and to protect the session: the ID and the secret code ensure that only the device itself can read its notification center and that one account's notifications are not shown to someone who later signs in on the same phone. It is not used for advertising or behavioral analytics, and it is not sold. Google (Firebase) receives the token and the notification text only to deliver it, as a service provider.

How long it is kept: the record exists while the app is installed. When you sign out, the device is no longer linked to the account. When you request closing of the account, the records of the devices linked to it are deleted immediately, together with the notification center; if the app stays installed, it creates a new record with no account. If the app is uninstalled, the token stops working: we erase it as soon as a delivery is rejected, and the record is deleted after 90 days without the app being opened. Each item in the notification center is deleted after 90 days. You can turn notifications off in the app (Conta › Notificações) or in the phone settings.