Privacy Policy

Who is responsible

ServerPanelX (SPX Panel) (India) is responsible for the personal data described here, collected through serverpanelx.com, your ServerPanelX account and licensed installs.

What we collect

Account details: your name, email address, password (stored only as a secure hash), country and, in India, your state; optionally your company, phone number, billing address and GSTIN.

Orders and invoices: what you bought, amounts, taxes, invoice numbers and the payment provider’s reference for each payment.

Sign-in records: the IP address and browser of each signed-in device, so you can see and end your sessions.

Licence information from your servers: the server’s IP address, the panel version and operating system, and the number of hosting accounts and domains, so we can show licence usage in your account and keep licences working.

Partner applications: your name and email address if you apply to the affiliate programme, and the referral code a visitor arrived with.

We do not receive card or bank details — those go directly to the payment provider.

How we use it

To run your account, issue and renew licences, take payments, send invoices and service emails (such as email confirmation, password reset, receipts and expiry reminders), prevent fraud and abuse, keep records required by tax law, and answer your questions.

We do not sell your personal data and we do not use it for third-party advertising.

Who we share it with

Payment providers (Razorpay, Stripe) to take payments; our email delivery and hosting providers to run the service; and authorities where the law requires it. Each provider only receives what it needs.

Cookies and browser storage

We use one essential cookie to keep you signed in, and this browser’s local storage for your cart and a few display preferences. We do not use advertising or tracking cookies. See the Cookie Policy.

How long we keep data

Account data is kept while your account is open. Orders and invoices are kept for as long as Indian tax law requires. Sign-in records and server licence data are kept only as long as needed to run and secure the service. [RETENTION PERIODS TO CONFIRM]

Your rights

You can see and correct your details in My account, and ask us for a copy of your data or for it to be deleted (except records we must keep by law). To make a request, use the Contact page.

Security

Passwords are stored only as hashes and sign-in sessions use secure cookies.

Changes and contact

We will post any update here with its date. Questions about privacy: see the Contact page.