Hocoos

GDPR overview

The GDPR is never named anywhere on the site: a search across every archived page, text and HTML alike, returns no occurrence of the regulation. What the privacy notice does provide is a rights section covering access, correction, deletion, restriction of processing and portability, exercised at privacy@hocoos.com, and a designated Data Protection Officer reachable at the same address and at the Ontario postal address. Complaints go to the same mailbox. International transfers are said to rely on a valid transfer mechanism under applicable law, but no mechanism is named. The minimum age is thirteen, raised to sixteen inside the European Union. No Article 27 EU representative is designated, no Data Processing Agreement is offered, and Do Not Track signals are not honoured.

Who owns the data?

Customers keep ownership of their content. Section 4.1 of the terms grants Hocoos only a worldwide, non-exclusive licence to host, copy and use Customer Data as needed to deliver the service, and states that the customer or their licensors retain all rights and ownership. Internal policies are said to limit employee access to that content. Personal information is shared with third-party vendors, subsidiaries and affiliated companies, auditors and advisers, and the privacy notice states that it is never rented or sold. One exception cuts the other way: under section 7.2, any feedback a customer sends becomes a royalty-free, perpetual and irrevocable licence for Hocoos.

Reuse rights

Customers may reuse their own content freely, since they never transfer ownership of it, and they may delete their account at any time. Hocoos reserves broader rights over the data it collects. Section 3.6.1 of the terms lets it use Customer Data on an aggregated and anonymised basis to improve service performance and to develop additional related solutions. Section 3.6.2 lets it collect Account Data for monitoring, statistics, diagnostics, comparative analysis, security and billing, and hands it to third-party analytics providers. That last point comes with an unusually blunt condition: Hocoos states that no opt-out is offered, and that a customer who disagrees should simply not register. Nothing on the site says whether customer content was ever used to train AI models. Payment data is not handled in-house; it goes to Stripe, PayPal and PayPro Global. Since the shutdown, all stored websites and data are scheduled for permanent deletion.

Data retention & training

Hosting summary

The privacy notice states that Hocoos stored and processed personal information in the EU and the United States, including on infrastructure operated and maintained by cloud hosting providers in the United States. No specific country, region, data centre or hosting provider is named beyond that sentence, and no subprocessor list is published anywhere on the site. International transfers are said to rely on a valid transfer mechanism as provided for by applicable law, but the mechanism is never identified: standard contractual clauses are not cited, nor is any adequacy decision. The publishing company, Komibi Inc., is based in Etobicoke, Ontario, and the terms of use are governed by the laws of Ontario, Canada, with jurisdiction in the Ontario courts, so the jurisdiction of the contract and the jurisdictions of the data do not coincide. Network checks show the site itself served from Cloudflare's anycast network, which describes the front end rather than where customer data lived. Since the April 2026 shutdown, all data stored on Hocoos servers was scheduled for permanent deletion.