Privacy Policy
Privacy Policy
Last Updated: July 29, 2026
This Privacy Policy describes how DigiTimber, a trade name of Twitch Inc. (“DigiTimber,” “we,” “our,” or “us”), collects, uses, discloses, retains, and protects personal information in connection with our websites, including www.digitimber.com, client portal, hosting services, managed IT services, Microsoft 365 administration, domain services, email services, consulting, support, and related applications and services collectively referred to as the “Services.”
DigiTimber provides Services primarily to businesses and organizations. In many cases, the information we process relates to a customer’s employees, contractors, users, devices, systems, accounts, or customers.
If you have questions about this Privacy Policy or our data practices, contact us at privacy@digitimber.com.
Our Role When Processing Information
Depending on the circumstances, DigiTimber may process personal information in different roles.
When we collect information for our own business purposes, such as creating a customer account, processing invoices, managing contracts, operating our website, or communicating with customers, DigiTimber determines how and why the information is processed.
When a customer provides information to us, or permits us to access information, so that we can provide hosting, managed IT, licensing, administration, migration, backup, security, support, or other technical Services, DigiTimber generally processes that information on the customer’s instructions.
This Privacy Policy describes DigiTimber’s privacy practices. It does not replace a customer’s own privacy notice or govern how a customer independently collects, uses, or discloses information.
Customers are responsible for ensuring that they have the authority and appropriate legal basis to provide personal information to DigiTimber for processing.
Information We Collect
We limit the personal information we collect to information reasonably necessary to establish and administer customer accounts, provide the requested Services, maintain security, process payments, comply with legal obligations, and support our customers.
Account and Business Contact Information
When an account is created or a customer requests Services, we may collect:
- Name
- Company or organization name
- Job title or business role
- Mailing or physical address
- Email address
- Telephone number
- Authorized account contacts
- Technical, administrative, and billing contacts
- Account usernames and identifiers
- Communication preferences
A customer may provide this information about its employees, contractors, or other authorized users.
Billing and Transaction Information
We may collect and retain information associated with billing and transactions, including:
- Billing contact information
- Billing address
- Invoice and payment history
- Payment status
- Transaction identifiers
- Products and Services purchased
- Refund, credit, and dispute information
- Tax-related information
Payment card and bank account information is submitted to and processed by Stripe or another disclosed payment processor. DigiTimber does not store complete payment card numbers or card security codes on its systems.
We may receive limited payment-related information from the payment processor, such as:
- Card type
- Card expiration date
- Last four digits of the payment card
- Transaction status
- Payment token
- Fraud or risk indicators
Stripe and other payment processors may independently collect and process payment and transaction information under their own privacy policies and legal obligations.
Employee, Contractor, User, and Licensing Information
When necessary to configure or administer Services for a customer, we may collect or receive information about the customer’s employees, contractors, users, or other authorized individuals, including:
- Name
- Business email address
- Business telephone number
- Job title or department
- Username or account identifier
- License assignment
- Group or permission membership
- Account status
- Device assignment
- Administrative role
- Service configuration
- Authentication and access information
We use this information only to provide, configure, license, secure, administer, or support the Services requested by the customer.
Managed IT and Technical Service Information
When providing managed IT, consulting, hosting, migration, security, backup, or support Services, we may collect or access:
- Device names and identifiers
- IP addresses
- Network and system configurations
- Operating system and software information
- Hardware information
- User and device activity logs
- Security events and alerts
- Account permissions and access records
- Domain and DNS information
- Backup status and configuration
- Support history
- Diagnostic information
- Credentials, access tokens, or authentication information when necessary to perform authorized work
- Information contained in customer systems when access is necessary to perform requested work
We access this information only as reasonably necessary to provide the requested Services, troubleshoot issues, maintain security, document work, or comply with a customer’s instructions.
Communications and Support Information
If you contact us, submit a support request, or otherwise communicate with us, we may collect:
- Your name and contact information
- The organization you represent
- The contents of your message
- Attachments, screenshots, or diagnostic files
- Support ticket history
- Telephone call notes
- Information necessary to investigate or resolve the request
Please avoid sending sensitive personal information that is not necessary for us to address your request.
Hosting and Service Usage Information
To operate and support hosting, email, domain, backup, and related Services, we may collect:
- Account activity
- Login records
- Disk usage
- Bandwidth consumption
- Resource utilization
- Service status
- Configuration changes
- Administrative actions
- Security and abuse reports
- System logs
- Mail logs
- Access logs
- Error logs
This information is used to operate, secure, troubleshoot, maintain, and support the Services.
Website and Automatically Collected Information
When you visit our website or client portal, our systems may automatically collect:
- IP address
- Browser type
- Device type
- Operating system
- Referring page or URL
- Pages visited
- Date and time of access
- Approximate geographic location derived from an IP address
- Cookie and session identifiers
- Website activity and interaction information
This information may be collected through server logs, security systems, cookies, and analytics technologies.
Information Received From Customers and Other Sources
Your employer, organization, account administrator, service provider, or another authorized person may provide information about you so that we can establish or administer an account, assign a license, provide technical support, or perform other requested Services.
We may also receive information from:
- Payment processors
- Domain registrars
- Registry operators
- Software and licensing providers
- Security platforms
- Monitoring systems
- Customer support platforms
- Other service providers involved in delivering the Services
We do not purchase personal information from data brokers.
Customer Data and Customer Content
In providing the Services, DigiTimber may host, transmit, back up, migrate, secure, troubleshoot, or otherwise process data that belongs to a customer or that a customer controls.
We do not use customer content for:
- Advertising
- Behavioral advertising
- Data brokerage
- Consumer profiling
- Training public artificial intelligence models
- Purposes unrelated to providing, supporting, and securing the Services
Access to customer content is limited to circumstances in which access is reasonably necessary to:
- Provide or support the Services
- Complete work authorized by the customer
- Troubleshoot a problem
- Maintain security or service availability
- Investigate suspected fraud or abuse
- Comply with applicable law
- Protect DigiTimber, our customers, or other users
How We Use Information
We may use personal information to:
- Establish and administer customer accounts
- Configure and provide hosting, email, domain, managed IT, Microsoft 365, backup, licensing, migration, security, and consulting Services
- Assign and administer software or service licenses
- Process payments, invoices, credits, and refunds
- Communicate about accounts, support requests, maintenance, outages, renewals, security events, and service changes
- Authenticate users and manage account access
- Monitor service availability, performance, usage, and security
- Diagnose and resolve technical problems
- Detect, investigate, and prevent fraud, abuse, unauthorized access, malware, and other security threats
- Maintain business, accounting, tax, support, and contractual records
- Enforce our agreements and acceptable use requirements
- Improve the reliability, performance, and operation of our Services
- Measure general website audiences and website usage
- Comply with legal, regulatory, tax, and contractual obligations
- Establish, exercise, or defend legal claims
- Protect the rights, property, systems, and safety of DigiTimber, our customers, and others
We do not use personal information for behavioral advertising.
We do not use personal information to make decisions that produce legal or similarly significant effects through automated decision-making.
Legal Bases for Processing
Where a legal basis is required, we generally process personal information under one or more of the following bases:
Performance of a Contract
Processing may be necessary to establish, administer, or provide Services under an agreement with a customer.
Legitimate Interests
Processing may be necessary to operate, secure, support, document, and improve our business and Services, provided those interests are not overridden by applicable privacy rights.
Legal Obligations
Processing may be necessary to comply with tax, accounting, legal, regulatory, or law-enforcement requirements.
Consent
Processing may be based on consent when consent is required or specifically requested.
Where we process information on behalf of a customer, the customer is responsible for identifying the appropriate legal basis for its collection and use of that information.
How We Disclose Information
We do not sell or rent personal information.
We disclose information only when reasonably necessary to operate our business, provide the requested Services, comply with legal obligations, or protect our customers and systems.
Payment Processors
We provide billing, transaction, and payment information to Stripe or another disclosed payment processor when necessary to:
- Process payments
- Prevent fraud
- Manage disputes and chargebacks
- Issue refunds or credits
- Maintain transaction records
- Comply with payment-network and financial requirements
Payment processors may independently collect and process payment information under their own privacy policies and legal obligations.
Infrastructure and Service Providers
We may disclose limited personal information to vendors that help us provide or operate the Services, including:
- Datacenter, cloud, and hosting providers
- Domain registrars and registry operators
- Internet and telecommunications providers
- Software and licensing providers
- Microsoft and other productivity-service providers
- Backup and disaster-recovery providers
- Security, monitoring, and endpoint-management providers
- Ticketing, documentation, and customer-support platforms
- Email and communications providers
- Accounting and payment platforms
- Website analytics providers
These providers receive only the information reasonably necessary to perform the applicable service.
Where required, we use contractual or other safeguards intended to restrict providers from using personal information for purposes unrelated to providing their services to DigiTimber or our customers.
Customers and Authorized Administrators
When Services are provided through an employer, organization, or customer account, information about users, licenses, devices, support requests, account access, or account activity may be available to the customer and its authorized administrators.
Professional Advisers
We may disclose information to attorneys, accountants, auditors, insurers, consultants, or other professional advisers when reasonably necessary to obtain professional services, comply with legal obligations, or protect our interests.
Legal and Safety Requirements
We may disclose information when we reasonably believe disclosure is necessary to:
- Comply with a law, subpoena, court order, warrant, or other valid legal process
- Respond to a lawful request from a governmental authority
- Investigate fraud, abuse, unauthorized access, or security incidents
- Enforce our agreements
- Protect the rights, property, systems, or safety of DigiTimber, our customers, or the public
When legally permitted and appropriate, we may notify the affected customer before disclosing customer-controlled information in response to legal process.
Business Transfers
If DigiTimber or Twitch Inc. is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be disclosed or transferred as part of that transaction.
Any recipient will remain subject to applicable privacy obligations regarding the transferred information.
With Your Direction or Consent
We may disclose information to another party when you or the applicable customer directs us to do so or provides valid consent.
Sale, Targeted Advertising, and Profiling
DigiTimber does not:
- Sell personal information
- Rent personal information
- Share personal information for cross-context behavioral advertising
- Process personal information for targeted advertising
- Operate as a data broker
- Offer financial incentives in exchange for personal information
- Profile individuals to make decisions producing legal or similarly significant effects
We do not knowingly sell or share the personal information of individuals under 18 years of age.
The term “share” in this section refers to sharing for cross-context behavioral advertising as defined by applicable privacy law. It does not include disclosures to service providers that are necessary to deliver, secure, administer, or support the Services.
Google Analytics
We use Google Analytics solely to measure website audiences, understand general website traffic, identify commonly visited pages, and improve website performance and usability.
Google Analytics may collect or process information such as:
- First-party cookie identifiers
- Browser and device information
- Operating system information
- Approximate geographic location
- Pages viewed
- Session and interaction information
- Referral information
- IP addresses used during the collection and processing of analytics data
We do not use Google Analytics for:
- Advertising
- Remarketing
- Personalized advertising
- Behavioral advertising
- Cross-site profiling
- Building advertising profiles about website visitors
We do not intentionally send names, email addresses, account information, payment information, or other directly identifying customer information to Google Analytics.
You may limit analytics collection by:
- Blocking or deleting cookies through your browser
- Using available website cookie controls
- Installing the Google Analytics Opt-out Browser Add-on
Where applicable law requires consent before analytics cookies are enabled, we will request that consent through appropriate website controls.
Cookies
We use cookies and similar technologies for purposes that may include:
- Maintaining secure sessions
- Authenticating users
- Remembering preferences
- Preventing fraud and abuse
- Operating the client portal
- Measuring website audiences, usage, and performance
Some cookies are necessary for the website or client portal to function. Other cookies, such as analytics cookies, may be optional depending on your location and applicable law.
You may configure your browser to block or delete cookies. Blocking essential cookies may prevent some website or client portal functions from operating correctly.
We do not use cookies for behavioral advertising or cross-site advertising.
Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:
- Maintain an active customer account
- Provide and support the Services
- Complete authorized projects
- Maintain billing, tax, and accounting records
- Document support and administrative activity
- Maintain security and prevent abuse
- Resolve disputes
- Enforce agreements
- Comply with legal and regulatory obligations
Retention periods depend on:
- The type of information
- The applicable Service
- Contractual requirements
- Legal and regulatory requirements
- Security considerations
- Whether the information is contained in an active system or backup
Upon cancellation or termination of hosting Services, hosting account data is generally retained for up to 15 days before permanent deletion, unless a different period is stated in an applicable agreement or retention is required by law.
Information may remain in restricted backups until those backups are overwritten or deleted through the normal backup cycle. Backup copies are not used for ordinary business purposes after the active information has been deleted.
Payment processors may retain payment and transaction information for longer periods when required by:
- Payment-network rules
- Fraud-prevention requirements
- Financial regulations
- Tax laws
- Other legal obligations
We may retain aggregated or de-identified information that can no longer reasonably be associated with an identifiable individual.
Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, disclosure, alteration, loss, and destruction.
Depending on the applicable system or Service, safeguards may include:
- Access controls
- Authentication requirements
- Encryption
- Logging and monitoring
- Network and endpoint security
- Backup and recovery systems
- Employee and contractor access restrictions
- Vendor security requirements
- Incident-response procedures
No transmission, storage system, or security control can guarantee absolute security.
If we identify a security incident involving personal information, we will investigate the incident and provide notifications as required by applicable law and contract.
Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- Confirm whether we process your personal information
- Access personal information we maintain about you
- Obtain a copy of certain personal information
- Correct inaccurate personal information
- Request deletion of personal information
- Request restriction of certain processing
- Object to certain processing
- Request data portability
- Withdraw consent where processing is based on consent
- Opt out of the sale of personal information
- Opt out of targeted advertising
- Opt out of qualifying profiling
- Limit certain uses of sensitive personal information
- Request information about third parties to whom personal information was disclosed
- Appeal a decision concerning a privacy request
- Receive equal service and pricing without discrimination for exercising a privacy right
Some rights are subject to exceptions. For example, we may need to retain information to:
- Complete a transaction
- Provide a requested Service
- Maintain security
- Comply with law
- Preserve legal claims
- Fulfill contractual obligations
Because DigiTimber does not sell personal information or process it for targeted advertising, there is no sale or targeted advertising activity from which to opt out.
Submitting a Privacy Request
To exercise an applicable privacy right, contact us at:
Please include:
- Your name
- Your organization, if applicable
- The email address associated with your account
- The right you wish to exercise
- Sufficient information for us to identify the applicable records
We may request additional information when reasonably necessary to verify your identity and authority.
Information submitted for verification will be used only to evaluate and respond to the request.
We will not require you to create a new account solely to submit a privacy request.
An authorized agent may submit a request where permitted by law. We may require evidence that the agent is authorized to act on your behalf and may contact you directly to verify the authorization.
When information is controlled by one of our customers, we may refer your request to that customer or ask you to submit the request directly to the customer.
We will respond within the period required by applicable law. If additional time is permitted and reasonably necessary, we will notify you of the extension and the reason for it.
Appeals
If we deny a privacy request and applicable law provides a right to appeal, you may appeal by replying to the denial or emailing privacy@digitimber.com with the subject line:
Privacy Request Appeal
Your appeal should explain why you believe the decision should be reconsidered.
Complaints
Residents of the European Economic Area or United Kingdom may have the right to submit a complaint to the data-protection authority responsible for their location.
You may also contact us at privacy@digitimber.com so that we have an opportunity to address your concern.
California Privacy Disclosures
This section supplements the remainder of this Privacy Policy and applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to DigiTimber.
DigiTimber operates exclusively online and accepts California privacy requests by email at privacy@digitimber.com.
We do not sell personal information.
We have not sold personal information during the preceding 12 months.
We do not share personal information for cross-context behavioral advertising.
We have not shared personal information for cross-context behavioral advertising during the preceding 12 months.
Categories of Personal Information
The following table describes the categories of personal information that DigiTimber may collect for its own business purposes.
Information contained in customer-controlled systems that DigiTimber processes solely to provide hosting, managed IT, migration, backup, support, or other contracted Services is generally processed under the customer’s instructions and applicable agreements.
| Category | Examples | Collected | Disclosed for a Business Purpose | Sold or Shared |
|---|---|---|---|---|
| Identifiers | Name, mailing address, email address, telephone number, IP address, account name, username, customer number, and similar identifiers | Yes | Yes | No |
| Personal information described by California Civil Code Section 1798.80 | Contact information, billing information, payment information submitted to Stripe, and transaction records | Yes | Yes | No |
| Protected classification characteristics | Race, religion, age, disability, sex, sexual orientation, marital status, citizenship status, and similar characteristics | No, except when incidentally included in communications or customer-controlled information | Limited | No |
| Commercial information | Services purchased, billing history, payment status, account activity, and transaction history | Yes | Yes | No |
| Biometric information | Fingerprints, facial-recognition templates, voiceprints, and similar biometric identifiers | No | No | No |
| Internet or electronic network activity | Website activity, browser information, login records, device information, hosting usage, administrative activity, and system or security logs | Yes | Yes | No |
| Geolocation information | Approximate location derived from an IP address for security, fraud prevention, service delivery, or website analytics | Yes | Yes | No |
| Sensory information | Screenshots, photographs, audio, video, or similar information voluntarily submitted in connection with a support request | Limited | Limited | No |
| Professional or employment-related information | Company name, job title, department, business contact information, employee or contractor account information, licensing assignments, device assignments, administrative roles, and job application information | Yes | Yes | No |
| Non-public education information | Student records or education records covered by applicable education privacy laws | No | No | No |
| Inferences drawn from personal information | Consumer profiles, behavioral predictions, preference modeling, or assessments of personal characteristics | No | No | No |
| Sensitive personal information | Account login information, credentials, security information, and financial or payment information processed when necessary to provide Services | Limited | Limited | No |
Sources of Personal Information
We may receive personal information from:
- You directly
- Customers and their authorized representatives
- Employers, account administrators, and licensing administrators
- Devices, browsers, servers, networks, and software systems
- Stripe and other payment processors
- Domain registrars and registry operators
- Software and licensing providers
- Security, monitoring, support, and management platforms
- Public records or publicly available sources when necessary for legitimate business purposes
We do not purchase personal information from data brokers.
Business and Commercial Purposes
We collect, use, and disclose personal information for purposes that include:
- Establishing and administering customer accounts
- Providing hosting, email, domain, managed IT, Microsoft 365, licensing, backup, security, migration, support, and consulting Services
- Assigning and administering software and service licenses
- Processing payments and maintaining transaction records
- Communicating about accounts, invoices, support requests, maintenance, security events, and service changes
- Authenticating users and managing access
- Monitoring system availability, performance, and security
- Detecting and preventing fraud, abuse, unauthorized access, malware, and other threats
- Diagnosing and repairing technical problems
- Maintaining accounting, tax, contractual, and support records
- Enforcing agreements and acceptable use requirements
- Complying with legal obligations
- Establishing, exercising, or defending legal claims
- Processing job applications when positions are available
- Measuring general website audiences and website performance
We do not use personal information for behavioral advertising, consumer profiling, or automated decisions that produce legal or similarly significant effects.
Categories of Recipients
We may disclose personal information for business purposes to:
- Payment processors
- Datacenter, cloud, and hosting providers
- Domain registrars and registry operators
- Software and licensing providers
- Microsoft and other productivity-service providers
- Backup and disaster-recovery providers
- Security, monitoring, and endpoint-management providers
- Ticketing, documentation, and customer-support platforms
- Email and communications providers
- Accounting and professional-service providers
- Website analytics providers
- Attorneys, accountants, auditors, insurers, and consultants
- Governmental authorities or other parties when legally required
- A successor organization in connection with a merger, acquisition, reorganization, or sale of assets
- Other parties when directed or authorized by the customer or individual
These recipients receive only the information reasonably necessary to perform the applicable service or fulfill the applicable legal or business purpose.
Sensitive Personal Information
DigiTimber may process limited sensitive personal information, including account credentials, security information, and payment information, when necessary to:
- Provide requested Services
- Protect accounts and systems
- Authenticate users
- Process payments
- Prevent fraud and abuse
- Comply with legal obligations
We do not use or disclose sensitive personal information to infer characteristics about individuals or for purposes unrelated to providing and securing the Services.
We do not use or disclose sensitive personal information for purposes that require a separate right-to-limit mechanism under California law.
California Privacy Rights
Subject to applicable exceptions, California residents may have the following rights.
Right to Know and Access
You may request information about:
- The categories of personal information we collected about you
- The specific pieces of personal information we collected about you
- The categories of sources from which the information was collected
- The purposes for collecting, using, or disclosing the information
- The categories of third parties to whom the information was disclosed
- The categories of information sold or shared, if any
Right to Delete
You may request deletion of personal information we collected from or about you, subject to exceptions permitted by law.
Right to Correct
You may request correction of inaccurate personal information we maintain about you.
Right to Opt Out of Sale or Sharing
You may direct a covered business not to sell personal information or share it for cross-context behavioral advertising.
DigiTimber does not sell personal information or share it for cross-context behavioral advertising. No opt-out is necessary.
Right to Limit Sensitive Personal Information
You may have the right to limit certain uses or disclosures of sensitive personal information.
DigiTimber uses sensitive personal information only for limited purposes associated with providing requested Services, maintaining security, authenticating users, processing payments, preventing fraud, and complying with law.
Right to Non-Discrimination
We will not deny Services, charge different prices, provide a different level of service, or otherwise discriminate against you because you exercised an applicable privacy right.
California “Shine the Light” Disclosure
We do not disclose personal information to non-affiliated third parties for their own direct-marketing purposes.
Financial Incentives
DigiTimber does not offer financial incentives, payments, discounts, or differences in service based on the collection, retention, sale, or sharing of personal information.
Submitting a California Privacy Request
DigiTimber operates exclusively online.
To submit a request to know, access, delete, or correct personal information, contact us at:
Please include:
- Your name
- Your organization, if applicable
- The email address associated with your account
- The right you wish to exercise
- Sufficient information for us to identify the applicable records
We may request additional information when reasonably necessary to verify your identity and authority.
Information provided for verification will be used only to evaluate and respond to the request.
You may authorize an agent to submit a request on your behalf. We may require documentation showing that the agent is authorized to act for you, and we may contact you directly to verify the authorization.
When the requested information is controlled by one of our customers, we may refer the request to that customer or instruct you to submit the request directly to the customer.
We will confirm receipt and respond within the timeframes required by applicable law.
If we cannot fulfill all or part of a request, we will explain the applicable reason or exception.
European Economic Area and United Kingdom
If you are located in the European Economic Area or United Kingdom, applicable data-protection law may provide rights to:
- Access your personal information
- Correct inaccurate or incomplete information
- Request deletion of your information
- Restrict processing
- Object to processing based on legitimate interests
- Receive certain information in a portable format
- Withdraw consent
- Submit a complaint to a supervisory authority
The lawful bases on which we rely are described in the “Legal Bases for Processing” section.
DigiTimber is based in the United States. Information collected from individuals outside the United States may be transferred to, stored in, or processed in the United States and other locations where our service providers operate.
Where required by applicable law, we will use appropriate contractual, organizational, or other safeguards for international transfers of personal information.
Customers requiring a data processing agreement or information about international transfer safeguards may contact privacy@digitimber.com.
Children’s Privacy
The Services are intended for businesses and organizations and are not directed to children.
We do not knowingly collect personal information directly from children under 13.
If you believe a child under 13 has provided personal information to us, contact privacy@digitimber.com so that we can investigate and, where appropriate, delete the information.
Third-Party Websites and Services
Our website and Services may contain links to or integrations with third-party websites, products, or services.
This Privacy Policy does not govern the independent privacy practices of those third parties. We encourage you to review their privacy notices before providing information to them.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
- Our Services
- Our business practices
- Our vendors
- Applicable laws and regulations
The “Last Updated” date at the beginning of this Privacy Policy indicates when it was most recently revised.
If we make a material change, we may provide notice through our website, client portal, email, or another appropriate method.
Contact Us
Questions, concerns, privacy requests, and data-protection inquiries may be directed to:
DigiTimber
A trade name of Twitch Inc.
Email: privacy@digitimber.com
Website: www.digitimber.com