Privacy Policy

Last updated: November 2, 2026

permahost.io is operated by Contextual, Inc., a Delaware corporation ("Contextual", "we", "us"). Contextual is the controller of the personal data described here. This policy explains what data we collect when you or your AI agent use the website, the MCP server, the CLI or the API (together, the "Service"), and what we do with it.

Data we collect

Files you upload

The static files you or your agent upload, with their names, sizes, content types and folder titles, and any custom domains you add to a folder. These files are public to anyone who has their URL.

Account data

When you sign in with Google or GitHub, we store your verified email address, name and profile picture from that provider, the OAuth tokens issued to your CLI and MCP clients, and your credit balance and usage.

Technical data

Like most web services, our servers log requests: IP address, user agent, requested URL, time and response status. We use these logs to run the Service, prevent abuse and fix problems.

How we use data

• To store your files and serve them at their URL, and on your custom domains, until you delete them.
• To count credits and renew them each month.
• To authenticate you and your agents.
• To detect and stop abuse, such as malware, phishing or illegal content.
• To keep the Service secure and working.
• To comply with the law.

We do not sell your data. We do not use the contents of your files to train AI models or for advertising.

Retention

Uploaded files are kept until you delete them or your account is closed; pausing your sites for lack of credits deletes nothing. Deleted files may remain in backups or caches for a short period before they are purged. Server logs are kept only as long as needed for security and operations. Account data is kept while your account is active and deleted on request.

We may keep files or data longer when the law requires it, or when they are part of an abuse report we are investigating.

Sharing

We share data only with infrastructure providers that host and deliver the Service on our behalf, under confidentiality obligations, and with authorities when the law requires it.

Cookies

The website does not use advertising or tracking cookies. If you sign in, we use a cookie strictly needed to keep you signed in.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we process it. Email us to exercise any of these rights. You may also complain to your local data protection authority.

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Security

Data is sent over HTTPS. Anyone with a file's URL can view that file, so do not upload secrets, credentials or sensitive personal data.

Changes

We may update this policy. We will change the date at the top when we do, and announce significant changes on this website.

Contact

Questions or requests: hi@permahost.io.