Privacy Policy | HIRO Host

Last Updated: March 29, 2026

Introduction

Welcome to Hiro.host ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our file hosting and website publishing platform, including the HIRO host website (hiro.host), the HIRO host add-in for Microsoft Office, and any related applications or integrations (collectively, the "Service").

Information We Collect

Information You Provide to Us

Account Information: Name, email address, and password when you create an account
Payment Information: Billing address and payment details (processed securely through Stripe)
Content: Files, documents, images, and other content you upload to the Service
Project Settings: Subdomain choices, custom domain configurations, and password protection settings
Communications: Messages and support requests you send to us

Information We Collect Automatically

Usage Data: Information about how you interact with our Service, including projects created, files uploaded, and features used
Device Information: IP address, browser type, operating system, and device identifiers
Log Data: Server logs that record requests made to our Service
Cookies: Essential cookies for authentication and session management

Information Collected by the Microsoft Office Add-in

When you use the HIRO host add-in for Microsoft Office, we may additionally collect:

Document Metadata: File name, file type, and file size of documents you choose to upload through the add-in
Microsoft Account Information: Your Microsoft account identifier used to authenticate with the add-in, if applicable
Add-in Usage Data: Interactions within the add-in such as uploads initiated and projects selected

The add-in does not access or read the contents of your documents beyond what you explicitly choose to upload. The add-in does not access other files, emails, calendar data, or contacts in your Microsoft account.

Information from Third Parties

Authentication Services: Information from Google or Microsoft if you choose to sign in with a third-party account
Payment Processor: Transaction confirmations from Stripe

How We Use Your Information

We use your information to:

Provide, maintain, and improve our Service
Host and serve your uploaded content to visitors
Process payments and manage subscriptions
Create and manage your account
Communicate with you about your account and service updates
Respond to your support requests
Monitor for abuse, security threats, and terms violations
Comply with legal obligations
Generate aggregated, anonymized analytics to improve the Service
Display advertisements on free tier projects, which may involve sharing limited data (such as device information and IP address) with advertising partners

Service Providers

We share information with third-party vendors who perform services on our behalf:

Cloudflare: CDN and DNS services
Stripe: Payment processing
Cloud hosting providers: Infrastructure and file storage

Public Content

When you publish content through our Service, that content is publicly accessible at your chosen subdomain or custom domain. If you enable password protection, access is restricted to those with the password.

Legal Requirements

We may disclose your information when required by law or to:

Comply with legal processes or government requests
Enforce our Terms of Service
Protect our rights, privacy, safety, or property
Protect against legal liability

Business Transfers

In connection with any merger, sale of company assets, or acquisition, your information may be transferred as part of that transaction.

We do not sell your personal information to third parties. However, free tier projects may display advertisements served by third-party advertising networks, which may collect data as described in their own privacy policies.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account:

Your account information is deleted within 30 days
Your uploaded content and projects are deleted immediately
Backup copies may persist for up to 90 days

We may retain certain information as required by law or for legitimate business purposes.

Data Security

We implement appropriate security measures to protect your data:

Encryption of data in transit (HTTPS/TLS)
Encryption of stored files
Secure authentication mechanisms
Regular security assessments
Access controls and monitoring

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

Depending on your location, you may have the following rights:

Access and Portability

Request access to your personal data and download your uploaded content at any time through your account dashboard.

Correction

Update your account information through your account settings.

Deletion

Delete your account and all associated data through your account settings, or by contacting us.

Opt-Out

Opt out of marketing communications by following the unsubscribe link in our emails.

To exercise additional rights, please contact us at [email protected].

Cookies

We use essential cookies for:

Authentication and session management
Security and fraud prevention
Remembering your preferences

We do not use tracking cookies on paid plans. Free tier projects may include third-party advertising cookies if advertisements are displayed. You can remove advertising cookies by upgrading to a paid plan.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of material changes by:

Posting the updated policy on our website
Sending you an email notification

Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

Contact Us

If you have questions, concerns, or requests regarding this privacy policy, please contact us:

Hiro.host Email: [email protected]

For EU residents, you have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data unlawfully.

Microsoft Office Add-in

The HIRO host add-in for Microsoft Office allows you to upload documents directly from Microsoft Word, Excel, and PowerPoint to your HIRO host account. The add-in:

Only accesses documents you explicitly choose to upload
Communicates with HIRO host servers over encrypted HTTPS connections
Does not store document content locally beyond the upload session
Does not access other Microsoft 365 data (emails, calendar, contacts, OneDrive files) unless you explicitly initiate an action
Follows all data handling practices described in this privacy policy

You can remove the add-in at any time through Microsoft Office settings. Removing the add-in does not delete content you have already uploaded to HIRO host.

Additional Information for Specific Regions

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to request deletion.

EU and UK residents have rights under the General Data Protection Regulation, including rights to access, rectification, erasure, restriction of processing, data portability, and objection. Our legal bases for processing include contract performance, legitimate interests, and consent.