Privacy Policy - Core Panel

1. Introduction

At Core Panel ("we", "our", or "us"), we take data privacy and server security seriously. This Privacy Policy explains how we collect, process, and safeguard information when you use our website at core-panel.net, our server control panel, or related services.

2. Information We Collect

We collect minimal information necessary to deliver high-performance control panel services:

Account Data: Your name, email address, company details, and authentication credentials.
Server Telemetry: Anonymized performance metrics (CPU usage, memory overhead, bandwidth counters) to render system dashboards.
Payment Information: Billing data is processed securely by Square. Core Panel does not store full payment-card credentials.
Technical Logs: IP address, browser type, and access timestamps for diagnostic and security auditing purposes.

3. How We Protect Your Server Data

Core Panel operates on a strict zero-trust architecture. We do not store or inspect the contents of website files, database records, or private keys hosted on your servers.

All API communications are encrypted via TLS 1.3.
Server management commands are executed over isolated SSH/TLS channels.
Sensitive credentials (such as database root passwords) are encrypted at rest using AES-256-GCM.

4. Cookies & Tracking

We use strictly necessary session cookies to keep you authenticated and preserve UI preferences. With your permission, we also use Google Analytics to understand website traffic and improve our pages. Analytics stays disabled until you accept through the consent banner.

When enabled, Google Analytics may process page URLs, referral information, browser and device characteristics, approximate geographic information derived from your IP address, and interaction events. We identify visits attributed to ChatGPT, Claude, and Perplexity from explicit campaign parameters or the referring domain and record the landing path without sending the page query string in our custom AI-referral event. We disable Google advertising signals and ad-personalization features in our implementation, and we do not sell this information to advertising networks.

You can accept or reject analytics without affecting access to the website. You can change your choice at any time through the Cookie settings control in the site footer. Rejecting or withdrawing consent prevents future Analytics collection from this browser.

5. Your Rights (GDPR & CCPA)

Regardless of location, all users enjoy full control over their data:

Right to Access: Request a complete export of your personal account data.
Right to Erasure: Permanently delete your account and associated telemetry logs at any time.
Right to Rectification: Update inaccurate contact details via your account settings.

Installation telemetry is retained for up to 365 days after the last heartbeat, API request logs for 90 days, contact and feedback records for 365 days, consented AI-referral events for 365 days, and security audit logs for 730 days, unless a longer period is legally required. Authorized staff can export or delete installation telemetry and its consent evidence through audited procedures.

6. Contact Us

If you have questions about this Privacy Policy or data security practices, contact our Privacy Team at [email protected], call +92 321 7425335, or write to our Pakistan office at 417 L, DHA Rahbar, Lahore, Pakistan.