KmerHosting - Best Cloud Provider in Cameroon

1. Introduction

At KmerHosting (kmerhosting.com), we are deeply committed to protecting the privacy and security of our users' personal data. This Privacy Policy explains, in clear and transparent terms, exactly what data we collect, why we collect it, how we store and process it, with whom we share it, and what rights you have over it.

This policy applies to all services offered at kmerhosting.com, including our hosting platform, client portal, AI tools, support systems, and any associated subdomains or applications. By using our services, you acknowledge and consent to the practices described in this policy.

2. Data We Collect

We collect data in the following categories:

Identity Data: Full name, date of birth (for student verification), and national ID when required by KYC procedures.
Contact Data: Email address, phone number, and billing address.
Account Data: Username, encrypted password, account preferences, and security settings.
Financial Data: Payment method details (processed securely via third-party providers), transaction history, and invoice records.
Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, and session cookies.
Usage Data: Pages visited, features used, API call logs, server resource consumption, and interaction history with our AI tools.
AI Conversation Data: Messages and responses exchanged with KmerHosting AI, unless you are on a Pro or Enterprise plan with data privacy enabled.
Support Data: Tickets submitted, chat transcripts, and issue logs.
KYC / Verification Data: Documents submitted for student verification or identity verification, stored in our secure kyc-submissions directory.

3. Purpose & Legal Basis for Processing

We process your personal data only where we have a valid legal basis, including:

Contract performance: To deliver the services you have subscribed to.
Legal obligation: To comply with Cameroonian and applicable international laws.
Legitimate interests: To improve our services, prevent fraud, and ensure system security.
Consent: For marketing communications and non-essential cookies, where your explicit consent has been given.

Specifically, we use your data to:

Provision, maintain, and improve our services.
Authenticate users and prevent unauthorized access.
Issue invoices and process payments.
Respond to support requests and diagnose technical issues.
Send transactional emails (billing notices, service alerts, security updates).
Send marketing communications if you have opted in.
Improve and train our AI models (for Free plan users only, unless opted out).
Comply with legal and regulatory requirements.

4. Data Sharing & Third Parties

We do not sell your personal data to third parties. We may share data with:

Payment processors: To securely process transactions (e.g., MTN Mobile Money, Orange Money, stripe-equivalent providers).
Email delivery providers: To send transactional and marketing emails on our behalf.
AI model providers: Messages to our AI chat may be processed by underlying LLM providers (Groq/Meta). Refer to their respective privacy policies.
Legal authorities: If required by law, court order, or to protect the rights and safety of our users.
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

5. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected:

Account data is retained for the duration of the contract plus 2 years after termination.
Financial/billing records are retained for 7 years for tax compliance.
Support tickets and AI conversations are retained for 12 months by default.
KYC documents are deleted within 90 days of successful verification.
Inactive accounts with no outstanding invoices may be purged after 2 years.

6. Data Security

KmerHosting implements industry-standard security measures to protect your personal data:

All data transmitted over the network is encrypted using TLS 1.2 or higher.
Passwords are hashed and salted using bcrypt — never stored in plaintext.
Access to personal data is restricted to authorized personnel on a need-to-know basis.
Our infrastructure is protected by firewalls, intrusion detection systems, and regular audits.
We perform regular vulnerability scans and security patches on all servers.

Despite our best efforts, no method of electronic storage or internet transmission is 100% secure. We will notify affected users promptly in the event of a data breach, as required by applicable law.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for full details. You can manage your cookie preferences at any time through our cookie banner or browser settings.

8. Your Rights

Depending on your location, you may have the following rights over your personal data:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Correct inaccurate or incomplete data.
Right to erasure: Request deletion of your personal data ("right to be forgotten").
Right to restriction: Request that we limit how we process your data.
Right to portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 14 business days.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal information, we will delete it promptly. If you believe a minor has submitted data, please contact us immediately.

10. International Data Transfers

Your data may be processed and stored in servers located in Cameroon and potentially in other countries (e.g., via cloud providers or AI model APIs). We ensure appropriate safeguards are in place for any international transfers, in accordance with applicable data protection laws.

11. Policy Updates

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we will notify you via email or a prominent notice on our website. We encourage you to review this policy periodically.

12. Contact

For any privacy-related questions, requests, or concerns, please contact our Data Protection Officer:

Email: [email protected]
WhatsApp: +237 694 193 493
Address: Yaoundé, Cameroon