This Privacy Policy explains how PanelDNS ("we", "us", "our") collects, uses, and protects information about you when you use our DNS management platform.
When you register, we collect your name, email address, and billing information. We do not store payment card data directly — payments are processed by Stripe.
We store the DNS zones, records, and server credentials you configure through the Service. Server credentials (API tokens, SSH keys) are encrypted at rest.
We collect logs of API calls, zone changes, and system events. These are used for billing, debugging, and security monitoring. Logs are retained for 90 days.
We automatically collect IP addresses, browser type, and session data to operate and secure the Service. This data is not sold to third parties.
We use the information we collect to:
To deliver the Service, we send zone names and record data to the DNS providers you configure (e.g. Cloudflare, Route 53). We also use third-party DNS intelligence services to detect malicious domain patterns and protect the integrity of the platform. These services may receive zone names but not personally identifiable information. By using the Service you consent to this data sharing.
If you use PanelDNS as a reseller and grant sub-clients access to your portal, you are the data controller for your sub-clients' personal data. We act as a data processor on your behalf. You must maintain a valid legal basis for processing sub-client data and provide them with an appropriate privacy notice. See our Data Processing Agreement for details of our processor obligations.
We retain account data for the duration of your subscription plus 30 days. Billing records are retained for 7 years as required by financial regulations. Anonymised usage statistics may be retained indefinitely.
The Service is operated from infrastructure that may be located in multiple regions. By using the Service you consent to the transfer and processing of your data in those regions. Where transfers involve jurisdictions without an EU adequacy decision, we rely on standard contractual clauses.
Depending on your jurisdiction, you may have the right to:
To exercise these rights, contact the platform operator's privacy contact as listed in the admin portal.
We use session cookies that are strictly necessary for the operation of the Service (authentication). We do not use tracking or advertising cookies. You can disable cookies in your browser, but this will prevent you from logging in.
We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The permanent archive link at the top of this page ensures that previously communicated versions remain accessible.
Privacy enquiries should be directed to the platform operator's privacy contact as listed in the admin portal.