§01 In short
- We don’t copy the files, databases or mail on your servers. A screen is read when you open it, shown to you, and not stored.
- We don’t hold data belonging to your own customers in our systems.
- We don’t perform any operation on your servers without your instruction; writes happen only when you start them.
- Every action taken is written to the audit log with who did it and when.
- We don’t store your root password. Only its vault path, its age and who changed it are kept.
- Data is hosted inside the European Union.
§02 Data we process
What we collect falls into three groups: data about your account, data about your server connections, and data created as you use the website.
- Account data
- Name, work email, optional phone number, a one-way hash of your password, your language and theme preference, your team members’ names and roles.
- Server connection profile
- Host name, IP address, panel type and version, connection port, the access key held encrypted, and the key’s expiry date. Labels and notes if you entered any.
- Metric history
- Time series of numeric measurements: disk, memory, load, network, request counts, mail queue. Numbers, not content.
- Audit log
- Every action taken in the panel: what was done, by whom, on which server, at what time. The agent’s own read cycles are recorded under its own name.
- Billing data
- Invoice title, address, tax number, your plan and payment history. Card details never reach us; they stay with the payment provider.
- Correspondence
- Your support requests and our replies.
- Website usage
- Aggregate visit statistics, if you consented. The detail is in the cookie policy.
§03 We don’t hold the contents of your servers
This is the defining decision in the architecture. Screens such as the account list, DNS records, mail queue and database list are read from the panel’s API or over SSH the moment you open them, shown to you, and no copy is kept with us.
So your customers’ files, emails, database contents and personal data are not present in our systems. What we hold is the connection profile that lets us know where that data lives, plus numeric metrics.
The root password is never stored in any form: we record its vault path, when it was last changed and who changed it. The panel never sees the plain text, so there would be nothing to store.
The AI assistant makes no requests to any outside service. It is rule-based and builds its answers from the panel’s own data; your host names, IP addresses and customer details are not passed to a third party.
§04 Why we process it
- To enter into the contract and provide the service: open your account, connect your servers, fill the screens.
- To invoice you and keep statutory books.
- To keep things secure: detect unauthorised access, prevent abuse, make what you and we do traceable.
- To improve the service: measure in aggregate which screens are used. This measurement happens only with your explicit consent.
- To send you service notices: maintenance, security and billing announcements. These need no separate consent; they are part of the contract.
§05 Where it is held and for how long
All data is hosted in data centres inside the European Union.
- Account data
- For the term of the contract, then 30 days after termination.
- Server connection profile
- Deleted immediately along with the key when you remove the server.
- Metric history
- 13 months; then reduced to aggregate statistics, with per-server detail deleted.
- Audit log
- 12 months. Where law requires longer retention, the statutory period applies.
- Invoices
- 10 years, as required by tax legislation.
- Support correspondence
- 24 months after the request is closed.
- Your cookie choice
- 12 months, then we ask again.
§07 Security measures
- Access keys are stored encrypted and never shown on screen after saving.
- All connections are encrypted in transit.
- Permissions inside the panel are role-based; team members see only the screens and actions their role allows.
- Two-factor authentication is supported, and operators missing it are reported as a finding.
- Our staff access customer accounts only at your request and only as far as needed; every access is logged.
- Irreversible operations ask for separate confirmation, and destructive command patterns in the terminal are stopped before they run.
§08 Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict processing, to object to processing, and to receive your data in a portable form.
Send your request to [email protected] and we answer within 30 days at the latest. The detailed procedure and legal bases are in the GDPR notice.
§09 Changes
When we update this policy we change the date at the top of the page. Material changes that affect its scope are also announced by email.