Last updated: August 16, 2026
This Privacy Policy explains how expose127, a Bi Enterprises product operated via hostmargin.com, collects, uses, and protects information when you use the expose127 CLI, the customer dashboard at expose127.hostmargin.com, and related services (together, the "Service").
Account information. When you sign in to the dashboard, hostmargin's login system hands off your account ID and email address to expose127 so we can identify your account. We do not operate a separate sign-up form — your account lives with hostmargin.
API tokens. Tokens you generate in the dashboard to link the CLI to your account. Tokens are stored so we can recognize your tunnels; treat them like a password.
Tunnel metadata. The subdomain you request and the times your tunnel connects and disconnects — recorded for every tunnel, whether or not it's linked to an account.
Request logs. We record the HTTP method, path, status code, duration, and timestamp of every request that passes through any expose127 tunnel, whether or not it's linked to an account. If your tunnel is linked to your account (via an API token), this is metadata about traffic through your own tunnel — visible only to your account in your dashboard, never to other customers. If you run expose127 without a token, your tunnel is anonymous: this data isn't linked to any identifiable account and isn't shown in any customer-facing dashboard.
Cookies. A single session cookie (exp127_session) keeps you signed in to the dashboard. It is HTTP-only, marked secure, and expires automatically after 12 hours.
We do not use your data for advertising, and we do not sell or rent your information to third parties.
Information is processed on hostmargin's infrastructure to operate the Service. We disclose information to third parties only where required by law, to protect our rights or the security of the Service, or with your consent.
Account, token, and tunnel records tied to your account are kept for as long as your account remains active. Anonymous tunnel and request data (not linked to any account) is retained only as long as necessary to operate and secure the Service. Request logs are retained only as long as necessary to support the dashboard's debugging features and may be purged periodically. You can ask us to delete your account-linked data at any time using the contact details below.
Tunnel traffic and the dashboard are served over HTTPS. Session cookies and account handoff tokens are signed with HMAC-SHA256 and cannot be forged or read by the browser. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
You may request access to, correction of, or deletion of your account data by contacting us. Because your account is managed through hostmargin, some changes (such as updating your email) may need to be made from your hostmargin account.
The Service is intended for developers and businesses and is not directed to children. We do not knowingly collect information from children.
The Service is operated from India, and information is processed and stored there. By using the Service, you consent to this transfer and processing.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this policy? Email mail@hostmargin.com or submit a support ticket.