This privacy policy explains how DOMAINSROCK PRIVATE LIMITED ("we", "us", "our") collects, uses, shares and protects personal data when you visit whmpanel.in or whmpanel.net (the "Website"), create an account, buy or use a WHMPanel license, download the WHMPanel software or contact our support team. It is written to meet the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023.
By using the Website you agree to this policy. If you do not agree, please do not use the Website.
1. Who is responsible for your data
DOMAINSROCK PRIVATE LIMITED is the data fiduciary (controller) for the personal data described here. Contact us at dataprivacy@domainsrock.com
WHMPanel is self-hosted software. When you install WHMPanel on your own server, you are responsible for the personal data of your own clients stored in that installation. We do not have access to it, except for the license check data described in section 4.
2. Personal data we collect
Data you give us
Account details: name, email address, password (stored only as a one-way hash), phone number and profile photo if you add one.
Billing details: company name, billing address, country, state and GST / tax number, so we can issue correct tax invoices.
Order details: the plan you buy, billing cycle, coupon used and the domain where you will install WHMPanel.
Support and contact messages: what you write to us in tickets, the contact form or the live chat, and any files you attach.
Payment proofs: if you pay by bank transfer or UPI, the transaction reference and the screenshot or receipt you upload.
Affiliate details: if you join the affiliate program, the payout details you provide.
Data collected automatically
Log and security data: IP address, browser and device type, pages visited, date and time, sign-in history and actions taken in your account (for example license resets), used to keep your account secure and to prevent fraud.
Cookies: see section 9.
Payment card and bank data
Online payments are processed by our payment partners (such as Razorpay, PayU, Instamojo, Cashfree, PhonePe, Stripe and PayPal). Your card number, UPI PIN, net-banking password and similar data are entered on the payment partner's secure page and are never received or stored by us. We only receive the payment status, amount, transaction ID and the fees charged.
3. Why we use your data
Purpose Data used
Creating and running your account Account details, log data
Selling licenses, issuing invoices and collecting payment Account, billing, order and payment data
Issuing, renewing, blocking and verifying licenses Order details, license code, installation domain
Giving you downloads, updates and support Account details, support messages
Sending service emails and SMS (invoices, license codes, renewal reminders, security codes) Email address, phone number
Preventing fraud, abuse and unlicensed use Log data, license check data
Meeting legal duties such as tax and accounting records Billing and payment data
Improving the Website and the software Aggregated, non-identifying usage data
We process your data because it is needed to provide what you asked for (your account and license), because the law requires it (invoices and tax records), or with your consent (for example optional newsletters, which you can stop at any time). We do not sell your personal data and we do not use it for advertising profiles.
4. License verification
To protect WHMPanel against unlicensed use, each installation contacts our license server when the license is activated and again from time to time (normally every 7 days). Each check sends:
the license code and the name entered at activation;
the domain or address of the installation and the server's IP address;
the WHMPanel version.
We use this only to confirm that the license is valid, to show you where it is installed, to let you reset installations, and to detect misuse. We do not collect the data of your hosting clients through license checks.
5. Who we share data with
We share personal data only with service providers who help us run the Website and only as far as they need it:
Payment partners to process payments and refunds;
Our license server provider (License Manager) to store license records;
Email and SMS providers to deliver service messages;
Hosting and backup providers that store the Website and its database;
Professional advisers such as auditors and chartered accountants;
Government authorities when the law requires it, for example under tax law or a valid legal order.
Some providers (for example Stripe or PayPal) may process data outside India. When that happens we rely on their contractual and security safeguards and on the rules of the Digital Personal Data Protection Act, 2023 for cross-border transfers.
6. How long we keep data
Account and license records: while your account is open and for up to 3 years after your last license ends, so we can answer questions about past licenses.
Invoices, payments and related billing data: for the period required by Indian tax and accounting law (currently up to 8 years).
Support tickets and messages: up to 3 years after the ticket is closed.
Security and activity logs: up to 12 months, unless needed longer to investigate abuse.
When data is no longer needed we delete it or make it anonymous.
7. How we protect data
We use HTTPS for the whole Website, store passwords as one-way hashes, encrypt API keys and payment gateway secrets in our database, offer two-factor login, limit staff access by role and permission, and keep logs of administrative actions. No system is completely secure, so please keep your password private and turn on two-factor login.
8. Your rights
Under Indian law you have the right to:
get a summary of the personal data we hold about you and how it is used;
have inaccurate or incomplete data corrected and updated (most of it you can change yourself under Edit profile and Billing details);
have your data erased when it is no longer needed, except where we must keep it by law (for example invoices);
withdraw consent you gave earlier, without affecting what was done before;
nominate another person to exercise your rights in case of death or incapacity;
raise a grievance with us, and if not resolved, with the Data Protection Board of India.
To use these rights, email dataprivacy@domainsrock.com from the address on your account. We reply within 30 days.
9. Cookies
We use a small number of cookies:
Essential cookies keep you signed in, remember your cart, protect forms against cross-site attacks and remember trusted devices for two-factor login. The Website does not work without them.
Preference cookies remember choices such as the light or dark theme.
Referral cookie: if you arrive through an affiliate link, a cookie records the referring affiliate for the period shown in the affiliate terms.
Analytics cookies are used only if analytics is switched on for the Website, to understand which pages are useful.
You can delete or block cookies in your browser settings; essential features may then stop working.
10. Children
The Website and WHMPanel are meant for businesses and adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
11. Grievance officer
For any complaint about how your personal data is handled, contact our Grievance Officer at grievance@domainsrock.com with the subject "Grievance". We acknowledge complaints within 48 hours and aim to resolve them within 30 days.
12. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version. For important changes we will also email account holders or show a notice on the Website.
Contact
DOMAINSROCK PRIVATE LIMITED
Web: www.domainsrock.com
Email: info@domainsrock.com