Privacy Policy
The short version
- OrbitCP runs on your own server. Your websites, files, databases and logs stay there, and we can't see them.
- For a paid license, your panel sends us a random server ID, its hostname, IP address and panel version twice a day so we can confirm the license.
- The AI assistant only sends something when you ask it a question, and passwords, keys and tokens are hidden first.
- We don't sell your data, show ads or use tracking cookies.
Who we are
OrbitCP ("OrbitCP", "we", "us") makes the OrbitCP server control panel and runs the website orbitcp.pro, the customer portal my.orbitcp.pro and the license service api.orbitcp.pro. This policy explains what personal information these collect and what we do with it. Questions go to support@orbitcp.pro.
Your server's data stays on your server
The OrbitCP panel is software you install on a server you control. Everything it manages, including your websites, files, databases, email addresses of your own clients, backups and logs, is stored on that server and is not sent to us. You (or your hosting company) are responsible for that data. If you host websites for other people with OrbitCP, you are the one handling their data, not us.
The panel contacts our servers in only two cases: the license check described below, and the AI assistant when you use OrbitCP AI credits.
What we collect
| Where | What |
|---|---|
| Customer portal account | Your name, email address, company name (optional), your password stored only as a one-way hash, and when you last logged in. |
| Orders and payments | The plan or credit pack you ordered, its price and currency, and the payment details you give us to confirm a payment, such as a bank, JazzCash or EasyPaisa transaction reference and any note you add. We don't receive or store your card number or bank login. |
| License checks | When a license is activated and about twice a day afterwards, the panel sends the license key, a random server ID created at install, the server's hostname, its public IP address and the OrbitCP version. We use this to confirm the license and to show you which servers use it. |
| AI credit usage | For each AI request paid with OrbitCP credits: the model used, how many tokens went in and out, the credits charged and the time. |
| Support emails | Whatever you choose to send us when you write to support. |
| Server logs | Like any website, our web servers record IP addresses, request times and browser details in short-lived logs used to keep the service working and to block attacks. |
The free plan without a license key doesn't contact us at all.
The AI assistant
The assistant reads information from your server (for example service status, a website's error log or a config file) only after you ask it a question, and only what it needs for that question. Before anything leaves your server, the panel replaces passwords, API keys, tokens and private keys with a placeholder. Some files, such as private keys and the panel's own secrets, are never read at all.
- With your own Anthropic API key, the request goes straight from your server to Anthropic. It doesn't pass through us.
- With OrbitCP AI credits, the request goes through api.orbitcp.pro to Anthropic so we can charge credits. We pass it on and record the token counts listed above; we don't store your questions, the assistant's answers or the server information sent with them.
Anthropic processes these requests as our AI provider under its own commercial terms and privacy policy. Your conversation history with the assistant is saved on your own server, where you can delete it.
How we use your information
- To run your account, confirm payments and issue licenses and credits.
- To check that a license is valid and used on the number of servers it allows.
- To charge AI credits correctly and show you your usage.
- To answer support requests and send messages about your account, such as a payment confirmation or a license about to expire.
- To protect our services from abuse, fraud and attacks, and to meet legal and tax obligations.
We don't sell personal information, share it for advertising, or send marketing email unless you ask for it.
Who we share it with
- Hosting: our servers run with Akamai (Linode), which stores the data on our behalf.
- AI: Anthropic, for AI requests paid with OrbitCP credits, as described above.
- Backups: copies of the portal database may be kept with a cloud storage provider, such as Google Drive, in a private account that only we can open.
- Payments: banks and wallet providers you pay through see the payment itself under their own policies. If we add card payments, the card processor will handle your card details directly.
- Fonts: our pages load the Manrope font from Google Fonts, so your browser connects to Google when you open them.
- The law: we disclose information when a valid legal request requires it, or when needed to protect our users or services from harm.
Cookies
orbitcp.pro sets no cookies. The customer portal uses one sign-in cookie that keeps you logged in and protects forms from forgery. We don't use analytics, advertising or tracking cookies.
How long we keep it
- Account details: for as long as your account is open.
- Orders and payment records: as long as the law requires us to keep business records, then deleted.
- License activations: while the license exists; you can remove a server from it at any time in the portal.
- AI usage records: while your account is open, so your credit history stays correct.
- Web server logs: a few weeks.
Security
Portal passwords are stored as salted hashes, licenses are signed so they can't be forged, all traffic uses HTTPS, and access to customer data is limited to the people who run OrbitCP. No system is perfectly secure; if a breach affects your data, we will tell you without undue delay.
Your choices
You can see and change your account details in the portal. Write to support@orbitcp.pro to get a copy of the personal information we hold about you, correct it, or delete your account. Records we have to keep by law, such as payment records, are kept until that obligation ends. Deleting your account ends any licenses and unused credits on it.
On your server, you can stop all contact with us by removing the license key (the panel then runs on the free plan) and by using your own AI key or not using the assistant.
Children
OrbitCP is a tool for running servers and is not meant for children. We don't knowingly collect information from anyone under 18; if you think we have, tell us and we will delete it.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change matters for how we use your information, we will also email account holders before it takes effect.
Contact
Email support@orbitcp.pro with any question about privacy or this policy.