Is there anything to be said about the privacy of the data that we put on our sites?
It seems that there is a lot of snooping around in order to check for TOS violations. Can staff members go through users' files and databases as they please, or is there some sort of policy for this?
Most of said snooping is done by automated systems that run it against a few hundred plus templates to see if it matches; if it does, it's either illegal or phishing, etc, and the system suspends it automatically. These are easy to identify; they show up as something like "Violation of x10hosting's TOS; Illegal content detected on user's account. Nulled scripts are illegal on x10hosting." or extremely similar.
That said, it is x10's servers, so they can go in and browse if they feel the need to. Given that there's plenty of work to be done though, and the way the scripts run, they rarely go in to do any "deep checking." The few times they do will be when someone disputes a suspension, or if there's a very high probability of something illegal going on behind-the-scenes. In those cases they will, but like mentioned before, there's gotta be a good reason for them to go digging, cause otherwise there's tickets and other stuff they can do -besides- go dipping in thousands of accounts for fun
Oh, and as for data security, they won't relay any personal information contained there such as passwords, email addresses, etc. What's on your account stays there, even if they do end up having a reason to go digging.