This Privacy Policy explains how On The Edge, Inc. collects, uses, shares, and protects personal information in connection with our website hosting, email hosting, domain registration, and related services.
1. Who we are and what this policy covers
On The Edge, Inc. ("On The Edge", "we", "us", or "our") is a Colorado corporation based in the United States, providing website hosting, email hosting, domain registration, and related professional services.
This policy applies to personal information we collect:
- From visitors to this website;
- From customers and prospective customers in the course of providing our services;
- Through our billing system at billing.pastormills.com.
This policy does not apply to the websites we host on behalf of our customers. Each of those websites is controlled by its own owner, who is responsible for its privacy practices. Where we process information on a customer's behalf, we act as a service provider (processor) under that customer's instructions.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Identity and contact information | Name, business or organization name, email address, postal address, telephone number | Provided by you |
| Billing information | Billing address, invoice history, payment status, card brand and last four digits | Provided by you; processed by Stripe |
| Customer content | Website files, databases, and email messages stored on our servers on your behalf | Uploaded or generated by you |
| Technical and log data | IP address, browser type, date and time of requests, pages requested, error and security logs | Collected automatically by our servers |
| Communications | Messages sent through our contact form or by email, and our replies | Provided by you |
We do not collect or store full payment card numbers. When you pay an invoice, you are transferred to Stripe, Inc., our payment processor, which collects and processes card details under its own privacy policy. We receive only confirmation of payment together with the card brand and its last four digits.
We do not knowingly collect sensitive personal information such as government identification numbers, health information, or biometric data, and we ask that you do not send such information to us.
3. How we use information
We use personal information only for the following purposes:
- To provide our services — hosting your website and email, registering and renewing domains, performing migrations, and maintaining backups;
- To bill and collect payment — issuing invoices, processing payments through Stripe, and maintaining financial records;
- To support you — responding to your questions and diagnosing problems you report;
- To operate and secure our systems — monitoring uptime, investigating errors, detecting and preventing fraud, abuse, and attacks;
- To communicate with you about your service — invoices, renewal reminders, outage notices, security advisories, and changes to our terms;
- To comply with law — meeting tax, accounting, and other legal obligations.
We do not use personal information for advertising, and we do not send unsolicited marketing email. Service-related messages (such as invoices and outage notices) are necessary to the service and are not marketing.
4. Cookies and tracking technologies
This website uses no advertising cookies, no third-party analytics, and no tracking scripts. No cookie is set when you browse these pages.
Our customer billing system at billing.pastormills.com sets a strictly necessary session cookie so that a signed-in user remains signed in. It is not used for tracking or advertising.
Because we do not track visitors across websites, we do not respond differently to "Do Not Track" browser signals.
5. How we share information
We do not sell, rent, or trade personal information, and we have not done so in the preceding twelve months. We share information only as described below.
5.1 Service providers
We use a small number of providers to deliver our services. Each receives only the information necessary for its function and is bound to protect it.
| Provider | Function | Information involved |
|---|---|---|
| Stripe, Inc. | Payment processing and invoicing | Name, email, billing address, card details |
| Vultr Holdings LLC | Server infrastructure | Customer content, technical logs |
| MXroute LLC | Email hosting and delivery | Email content and addresses |
| Cloudflare, Inc. | DNS, security filtering, encrypted backup storage | Technical logs, encrypted backups |
| Name.com, Inc. | Domain registration | Registrant contact details required by ICANN |
5.2 Legal and protective disclosures
We may disclose information where we believe in good faith that it is required by law — for example in response to a valid subpoena, court order, or lawful request — or where necessary to protect the rights, property, or safety of On The Edge, our customers, or the public. If we receive such a request and are legally permitted to notify you, we will.
5.3 Business transfers
If On The Edge is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected customers by email before their information becomes subject to a different privacy policy.
6. Data security
We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, including:
- Encryption in transit (HTTPS/TLS) for all our websites and our billing system;
- Encryption of backups before they leave the server, with off-site storage;
- Two-factor authentication and access controls on all administrative accounts;
- Regular security patching, continuous monitoring, and intrusion detection.
No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you promptly as required by applicable law.
7. Data retention
| Information | Retention period |
|---|---|
| Billing and financial records | Seven years after the transaction, as required by tax and accounting law |
| Account and contact records | For the duration of the customer relationship, then up to two years |
| Customer content (websites, databases, email) | Deleted within 60 days after service ends, or sooner on request |
| Backups | Retained on a rolling schedule of at least 30 days, then overwritten |
| Server and security logs | A limited period sufficient for troubleshooting and security review |
| Contact form messages | Retained as a record of our correspondence |
8. Your rights and choices
Subject to applicable law, you may request that we:
- Access — tell you what personal information we hold about you and how we use it;
- Correct — fix information that is inaccurate or incomplete;
- Delete — erase personal information we are not required to retain by law;
- Port — provide a copy of your website files, database, and email in a usable format;
- Opt out — stop non-essential communications at any time.
Residents of California and of other states with comprehensive privacy laws have these rights under those laws, including the right not to receive discriminatory treatment for exercising them. Because we do not sell or share personal information for cross-context behavioral advertising, no opt-out of sale or sharing is necessary.
To exercise any right, contact us using the contact form. We will verify your request by confirming your identity through the account email address on file, and will respond within 45 days. There is no charge for this.
9. Children's privacy
Our services are offered to businesses and organizations, not to individuals under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have done so, we will delete it. If you believe a child has provided us with personal information, please contact us.
10. Location of processing
We are located in Colorado, United States, and our servers and service providers store and process information in the United States. If you access our services from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
11. Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The effective date at the top of this page always identifies the current version. If a change materially affects how we handle your personal information, we will notify customers by email at least 30 days before it takes effect.
12. How to contact us
For questions about this policy, or to exercise any of the rights described in section 8, please contact On The Edge, Inc. through the contact form on our website. A person will respond, normally within one business day.