KovaTech / Kova Hosting — Privacy Policy

PRELAUNCH DRAFT — October 1, 2026. Owner review and the TODO items below are required before paid launch.

KovaTech, LLC operates KovaTech / Kova Hosting. Business address: 1523 Scarborough Ct #203, West Chester, PA 19380, US. Initial support/reply contact: support@kova.tech; phone: +1 484-224-3400. Privacy requests may also be submitted through authenticated portal tickets. TODO OWNER: applicable jurisdictions, effective date and privacy contact designation.

We use account/contact details, requested service and domain information, billing records, support messages, and security/access logs to administer accounts, provide hosting, respond to support requests, and protect the service. Customer website content and databases reside on the hosting platform and may appear in protected backups. Do not upload secrets into public files or send passwords/private keys through support tickets.

Billing and hosting panel accounts are separate. Authentication/session cookies support account login and service operation. TODO OPERATOR: complete cookie, analytics, logging and retained legacy WordPress/plugin inventory before asserting that only essential cookies are used.

Access to hosting data should be restricted to authorized operators and service components that need it. Transactional email is currently disabled. The intended mail architecture is Mailcow with Amazon SES outbound relay; it is not yet accepted for FOSSBilling delivery. Stripe remains disabled and no real payment collection is authorized in prelaunch. TODO OWNER: approve and identify actual subprocessors, data locations, contractual safeguards and cross-border transfer basis before enabling them for customer data.

Current platform backup automation retains seven daily generations on a local off-host system. Full restore and off-site disaster recovery remain pending. Account, support, access-log and invoice retention periods are TODO OWNER; do not treat backup rotation as the retention policy for all records. Following offboarding, live content should be deleted according to the confirmed export/deletion schedule while existing backups expire through normal rotation, subject to documented lawful exceptions.

Request access, correction, export, or deletion through an authenticated client-portal ticket. We must verify authority before releasing or deleting data. TODO OWNER: monitored privacy email, applicable rights, response time, lawful processing bases, complaint/regulator contact, and incident-notification procedure. No sale or advertising use of customer data is proposed by this draft; verify actual deployed processors and tracking before final publication.