Privacy Policy
Last updated: June 9, 2026
PanelOps is a product of Tech N Byte LLC.
1. Introduction
PanelOps ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use our Service.
2. Information We Collect
Account Information
- Phone number and password (used for authentication)
- Business/panel name provided at signup
- Billing information (processed and stored by Stripe — we do not store card details)
WhatsApp Data
- WhatsApp group IDs and names for groups the bot operates in
- Customer WhatsApp IDs (LIDs) and display names of verified users
- Message content processed by the bot for order management purposes
- Message logs stored in our database for your operational records
Usage Data
- Bot interaction counts and activity logs
- Feature usage patterns (for service improvement)
- IP addresses for security and rate-limiting purposes
3. How We Use Your Information
- To provide, operate, and improve the Service
- To authenticate your account and prevent unauthorized access
- To process payments and manage your subscription
- To send transactional notifications (OTPs, billing alerts, subscription updates) via WhatsApp
- To enforce our Terms of Service and detect abuse
- To respond to support requests
We do not sell your personal data to third parties.
4. Data Storage and Retention
Your data is stored on secure servers. Specific retention periods:
- Message logs — retained according to your plan's log retention setting (configurable in Bot Settings)
- Account data — retained for the duration of your account and up to 90 days after deletion
- AI conversation history — stored in Redis with a 24-hour TTL; automatically purged
- Live chat messages — stored in Redis with a 24-hour TTL; not persisted to the database
5. Third-Party Services
We share data with the following third parties only as necessary to operate the Service:
- Stripe — payment processing. Stripe stores your billing details under their own Privacy Policy.
- Evolution API — WhatsApp messaging infrastructure (self-hosted; message data stays on your server).
- LLM providers — if AI mode is enabled, customer messages may be sent to the configured AI provider (OpenAI, Anthropic, Google, Groq, or your own endpoint) for processing. No message data is stored by us after the AI response is generated.
- SMM panels — order IDs are sent to your configured SMM panel API to fetch order status on behalf of your customers.
6. Security
We implement industry-standard security measures including:
- Passwords hashed using bcrypt with SHA-256 pre-hashing
- JWT-based session management with server-side invalidation
- Rate limiting on all authentication endpoints
- OTP verification for account and staff registration
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but take reasonable measures to protect your data.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your message logs (available via Admin → System Health)
- Object to certain processing of your data
To exercise these rights, contact us through the contact form.
8. Cookies
We use a single authentication cookie to keep you logged in to the dashboard. This cookie is strictly necessary for the Service to function and does not track you across other websites. We do not use advertising or analytics cookies.
9. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice in the dashboard. Continued use of the Service after changes become effective constitutes your acceptance of the revised policy.
11. Contact
If you have questions or concerns about this Privacy Policy or our data practices, please reach out through our contact form.
