Privacy
What data we receive from customers and from installed panels, why, and for how long we keep it.
Your account
- Email, name or company (optional), email language.
- Your password only as an Argon2 hash; we never see the password itself.
- Licenses, invoices, balance history and an audit log of actions on them.
We send only service emails: address confirmation, activation keys, invoices, license term reminders. No newsletters.
Payments
Payments are processed by Heleket. We receive the payment status, coin, network, amount and transaction ID to credit your balance. We never see payer wallets or keys. Heleket processes the payment under its own terms.
What an installed panel reports
The panel contacts the license server during install and then every few hours. Each request carries:
- the license key and the panel instance public key;
- the panel version;
- the number of accounts, nodes and units per isolation tier — no names, domains or addresses;
- server host name, OS, kernel, CPU count, memory size, whether
/dev/kvmexists; - SHA-256 of
/etc/machine-idand the DMIproduct_uuid— to tell a license move from a cloned server; - the IP address the request came from.
The panel does not send domains, site content, mail, databases, your customers’ data or their payments. The same list is shown to the panel administrator on the License screen.
The trial is granted once per account and per machine; the machine hash is kept for 90 days for that.
Retention
| Data | Kept for |
|---|---|
| Panel request nonces | one day |
| Download links | one day after expiry |
| Confirmation and password reset links | one week after expiry |
| Account sessions | until sign-out or expiry |
| Account, licenses, invoices, payments | while the account exists; invoices and payments as long as accounting requires |
Requests
To export, correct or delete your account data, email [email protected] from the account address. Deleting the account revokes its licenses.