Backup Policy

Version 2.0 ยท Effective August 22, 2026

1. Scope

Backup availability depends on the purchased service and plan. This Policy describes the general allocation of responsibilities; the order or product specification controls backup frequency, retention, storage location and restore entitlements for a specific service.

2. Customer Responsibility

Unless the order expressly states that HostSteps provides a managed backup service, customers remain responsible for maintaining independent, tested copies of critical data and for protecting credentials and encryption keys needed for recovery.

3. Managed Backups

Where managed backups are included, HostSteps uses reasonable operational controls to create and retain backups according to the applicable service specification. Backups are a recovery control, not an archive, and are not a substitute for customer-controlled continuity or compliance retention requirements.

4. Retention and Rotation

Retention periods and rotation schedules vary by plan and may change prospectively with plan changes. Expired restore points may be permanently deleted. Cancellation, termination or non-payment may also end retention after the applicable service lifecycle period.

5. Restoration

Restore requests are subject to available restore points, platform capability, data integrity, service status and any applicable fees or support limits. HostSteps does not guarantee that every file, transaction or configuration state can be restored unless expressly committed in writing.

6. Backup Security

HostSteps applies access restrictions and security measures appropriate to the service. Customers must still protect application-level secrets and should avoid storing unprotected credentials or encryption material in ordinary backup content.

7. Testing

Customers with critical workloads should periodically test recovery procedures. Where HostSteps manages disaster-recovery or restore testing as a contracted service, the applicable order defines scope and frequency.

8. Deletion and Exit

Customers should export required data before cancellation or migration. Backup copies may persist temporarily through normal rotation after live data is deleted, subject to legal, security and operational retention obligations.