This page lists the personal data we process, why we process it and how long we keep it. It complements our Privacy Policy. Questions go to [email protected].
Account
- What
- Name, email address, password hash, two-step verification secret and backup codes, avatar, last sign-in time and IP address.
- Why
- To create and secure your account, sign you in and send account emails.
- Kept for
- While your account is open.
Workspace and team
- What
- Workspace name and plan, applications, license keys, prices, team members and roles, invites, balances, ledger entries, payout requests, uploaded resources and notification channel settings.
- Why
- To provide the Service.
- Kept for
- While the workspace exists.
Security and activity
- What
- IP addresses, browser details, panel sessions, the activity log of actions taken in the panel and through the API, and trusted devices.
- Why
- Security, abuse prevention, an audit trail for your team, and troubleshooting.
- Kept for
- Activity log 90 days; sessions end after 2 hours idle; trusted devices 30 days.
Users of sellers' apps
- What
- License key, device identifier, IP address, approximate country and city, app version, sign-in times, session and device records, and resource downloads.
- Why
- To verify keys, enforce device limits and bans, show live sessions and statistics, and send the login alerts the seller turned on.
- Kept for
- Verification history 90 days; device and session records while the key exists; location lookups cached 7 days.
Messages and the AI assistant
- What
- Messages you send us on Telegram or by email, and your conversations with the in-panel AI assistant if you use it.
- Why
- To answer you and provide the assistant.
- Kept for
- Support messages as long as needed to resolve your request; assistant conversations 3 days.
Payments
- What
- Your plan, payment dates and amounts, and the payment details you share with us when you pay.
- Why
- To activate plans, keep records and handle refunds.
- Kept for
- As long as tax and commercial laws require.
Website visits
- What
- IP address and browser details seen by our servers and network provider. No cookies and no analytics.
- Why
- To deliver and protect our websites.
- Kept for
- Short-lived server logs.
Backups
- What
- Copies of the database and uploaded files.
- Why
- To recover the Service after a failure.
- Kept for
- Up to 14 days on our servers and up to 35 days in encrypted off-site storage.
How we collect it
By automated means through our websites, panel and API: directly from you when you sign up and use the panel, from the members of your team, and from your apps when they check a license key.
Who receives it
Our service providers Cloudflare, our server hosting provider, Google, Telegram, ip-api.com and our email delivery provider, as described in our Privacy Policy, some of them in other countries. We do not sell personal data.
Your choices
You can ask us what personal data we hold about you, and ask us to correct it, give you a copy of it or delete it. Email [email protected] from the address registered on your account. We answer within 30 days.