Privacy Policy

Who this applies to

Cloudmesh Systems Private Limited ("we") operates n8nhosting.cloud. We are the data controller for your account and billing data. For the personal data contained inside your n8n instance, we act as a data processor on your instructions — see the Data Processing Agreement.

Data we collect

• Account data — your name, work email, company or agency name, a hashed password, and your plan.
• Billing data — handled through our billing system and payment processor. We store invoices and the card brand and last four digits, not full card numbers.
• Support data — the contents of messages you send us.
• Website analytics — only if privacy-friendly, aggregate analytics is enabled (currently not enabled). No cross-site tracking, and no analytics is collected while it is disabled.
• Instance data — the workflows, credentials and execution data inside your n8n instance are yours. We process them only to run, back up and support the service. See the DPA.

Cookies

This marketing website uses only strictly necessary cookies. If analytics is enabled it uses a single privacy-friendly measurement that does not track you across other sites. The client area and your n8n instance set their own functional cookies that are needed to log you in.

How we use data

• To provide and operate the hosting service
• To take payment and prevent fraud
• To provide support
• To send service and security notices
• To meet legal, tax and accounting obligations

We do not sell personal data.

Legal bases

Where the GDPR applies, we rely on: performance of a contract (providing the service and billing you); our legitimate interests (security, fraud prevention and service communications); your consent (optional analytics and marketing email); and legal obligation (tax and accounting records).

Sub-processors

We use a small number of infrastructure and business providers to run the service. We require each to provide adequate protection for personal data, and we will give notice of material changes so you can object.

A current list is available on request.

Data location and transfers

You choose the US or EU region for your instance when it is provisioned, and its backups are stored in the same region. Some sub-processors, such as Cloudflare, operate globally by design. Where personal data moves outside your chosen region — for example support or payment processing — we rely on appropriate safeguards such as Standard Contractual Clauses.

Retention

Account and billing records are kept while your account is active and for the period required by tax and accounting law afterwards. Support messages are kept for a limited period. Instance data and backups follow the deletion policy below.

Data-deletion policy

When you cancel, you can request a full export — the database plus your workflow JSON. We then retain your instance data and its backups for a defined recovery window, after which they are permanently deleted from primary storage and removed from backups on the normal backup-rotation schedule.

You can ask us to delete specific data sooner, subject to any legal retention requirement. Requests go to privacy@n8nhosting.cloud.

Your rights

Under the GDPR and similar laws you can request access to your data, correction, deletion, restriction of processing, and portability, and you can object to processing based on our legitimate interests. Email privacy@n8nhosting.cloud to exercise a right. You also have the right to complain to your local data-protection authority.

Security

Our security measures are described on the Security page: single-tenant isolation, encryption at rest for backups, Cloudflare edge protection, monitoring, and restores tested monthly.

Changes

We will post changes on this page and, for material changes, notify you by email or in the client area.

Contact

privacy@n8nhosting.cloud
Cloudmesh Systems Private Limited, 4th Floor, Tower B, Prestige Tech Park, Marathahalli–Sarjapur Outer Ring Road, Bengaluru, Karnataka 560103, India