Legal

Privacy Policy

This Privacy Policy explains what information Vercaa collects when you use our hosting, domain registration and Market Connect services, why we collect it, and who we share it with — grounded in the real systems and vendors we actually use, not a generic template.

Last updated

On this page

1. Introduction

This Privacy Policy applies to information collected through the Vercaa website, client area, and any Service you order from us. It should be read alongside our Terms of Service, which governs your use of the Services generally.

By using our Services, you agree to the collection and use of information as described here. If you don't agree, please don't use our Services.

2. Information We Collect

We collect information in a few different ways, depending on how you interact with us:

  • Account & contact information — name, email address, and any other details you provide when you register or update your client-area profile.
  • Billing information — the billing details needed to process payment for the Services you order (see Section 4 for exactly what that means on this install).
  • Domain registrant (WHOIS) information — if you register a domain through us, the registrant, administrative, and technical contact details required by the domain registry (see Section 5).
  • Support communications — the content of any support ticket, message, or knowledgebase search you submit, so we can help you.
  • Technical & usage information — standard web request information (such as IP address and browser type) and account/service activity, used for security, troubleshooting, and operating the Services.
  • Cookies & local storage — see Section 6 for exactly what we set and why.

3. How We Use Your Information

We use the information above to: provision and operate the Services you order; process payments and send invoices/receipts; provide support when you contact us; secure our platform against fraud and abuse; comply with legal and registry obligations (particularly for domain registrations, see Section 5); and communicate with you about your account, such as billing notices or service updates.

We do not sell your personal information to third parties.

4. Payment Information

Payment for Services on this install is currently processed via bank transfer — we do not currently use a stored-card payment processor, so we do not collect or store credit or debit card numbers through our checkout. If we add a card-based payment gateway in the future, that gateway's own provider (not Vercaa) will handle and store the actual card details, and this policy will be updated to reflect it.

5. Domain WHOIS Data & ID Protection

Domain registration is a real, active service on our platform, handled through our accredited registrar partner, ConnectReseller. When you register a domain, ICANN and the relevant registry require that we collect and, for most extensions, publish a WHOIS record containing your registrant, administrative, and technical contact details. This requirement exists at the domain-system level and applies to every registrar, not just Vercaa.

Where WHOIS/ID protection is available, it lets you publish a privacy-service address in place of your own contact details in the public WHOIS record. As of today, ID protection — along with DNS management and email forwarding — is available on .com, .net, .ae, .biz, .info, .me, .org, .us, .blog, .io, .club, .icu, .mobi, .online, .site, .xyz, .actor, .art, .audio, .band, .events, .gallery, .movie, .news, .photography, .photos, .pictures, .show, .theater, .theatre, .video, .agency, .associates, .business, .careers, .center, .co.com, .company, .enterprises, .farm, .forum, .foundation, .gives, .gmbh, .inc, .industries, .limited, .llc, .ltd, .management, .marketing, .partners, .press, .pw, .sarl, .solutions, .studio, .trade, .trading, .bar, .boston, .city, .country, .desi, .frl, .global, .international, .london, .miami, .place, .saarland, .town, .world, .coach, .cricket, .fan, .fans, .football, .futbol, .golf, .hockey, .racing, .rodeo, .run, .ski, .soccer, .team, .tennis, .yoga, .app, with more extensions rolling out as we configure them on our registrar network. See our Domain Registration Policy for the complete, current list of which extensions support which features.

6. Cookies & Local Storage

We keep this deliberately short because we only set what's actually needed to run the site:

  • Session cookie — a standard session cookie that keeps you logged in and remembers the contents of your cart while you shop. It's deleted when your session ends.
  • Theme preference — a small vercaaTheme entry in your browser's local storage that remembers whether you last chose light or dark mode, so the site doesn't flash the wrong theme on your next visit. This never leaves your browser.

We do not currently run any analytics, advertising, or third-party tracking cookies on this site. If that changes, this section will be updated to name the specific provider and purpose before any such cookie is set.

7. How We Share Information

We share information only where it's necessary to provide the Service you ordered, or where the law requires it:

  • Domain registry & registrar — WHOIS-required contact details are shared with ConnectReseller and the relevant domain registry as part of registering or renewing a domain.
  • Market Connect service vendors — if you order a resold service (SSL certificates, NordVPN, SiteLock, CodeGuard, OpenXchange, or 360 Monitoring), we share the minimum account information that vendor needs to provision and support that specific service.
  • Legal & safety — we may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of Vercaa, our customers, or the public.
  • Business transfers — if Vercaa is involved in a merger, acquisition, or sale of assets, customer information may be transferred as part of that transaction, subject to this Policy.

We do not share your information with third parties for their own independent marketing purposes.

8. Data Retention

We retain account and billing information for as long as your account is active, and for a reasonable period afterward as needed to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Domain WHOIS data is retained for as long as required by the relevant registry's own policies, which can extend beyond the life of your Vercaa account.

9. Data Security

We use reasonable administrative and technical safeguards designed to protect your information, consistent with the infrastructure we already operate for the Services themselves — including Imunify360 malware and firewall protection on our hosting platform. That said, no method of transmission or storage is 100% secure, and we can't guarantee absolute security.

If you believe your account has been compromised, open a support ticket immediately so we can help secure it.

10. Your Rights & Choices

Depending on where you live and the law that applies to you, you may have rights to access, correct, export, or delete the personal information we hold about you, or to object to or restrict certain uses of it. You can update most account details directly from your client area at any time.

To make a request we can't self-serve in the client area — such as a full data-deletion request — open a support ticket and we'll handle it directly. Note that some information (for example, active domain WHOIS records, or billing records we're legally required to keep) may not be immediately deletable while a Service or legal obligation is still active.

11. Children's Privacy

Our Services are not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

12. International Data Transfers

Because we work with a registrar and third-party service vendors as described in Section 7, your information may be processed in a country other than the one you live in. Where that happens, we rely on the safeguards those vendors and registries already have in place as accredited/authorized parties in the domain and hosting industry.

13. Governing Law

This Privacy Policy is part of our agreement with you and is governed by the same law as our Terms of Service — see that document's "Governing Law & Disputes" section for the applicable jurisdiction.

14. Changes to This Policy

We may update this Privacy Policy as our Services, vendors, or legal obligations change. Material changes will be reflected by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.

15. Contact Us

Vercaa does not currently publish a dedicated privacy-request mailing address or email inbox — the fastest way to reach us about this Privacy Policy, or to exercise any of the rights in Section 10, is through our real, monitored support channels:

Questions about any of this?

These documents cover the real services Vercaa operates today. If anything here is unclear, or you think a specific situation isn't covered, our support team can help directly.

Open a Support Ticket Browse the Help Center