Last updated: August 2026
This section describes the categories of personal information, personally identifiable information, technical data, usage data, and other information (collectively, "Data") that NotPanel (the "Company," "we," "us," or "our") may collect from you (the "User," "you," or "your") in connection with your access to and use of the NotPanel platform, website, application programming interfaces, and all related services, features, content, and functionality (collectively, the "Services"). By accessing or using the Services, you acknowledge and agree that you have read, understood, and consent to the collection, processing, storage, transfer, and use of your Data as described in this Privacy Policy, to the fullest extent permitted by applicable law.
When you create an account, place orders, submit support tickets, or otherwise interact with the Services, you may voluntarily provide us with certain information. The types of information you may provide include, without limitation, the following categories of Data, each of which is collected solely for the purposes described herein and is processed in accordance with this Privacy Policy and all applicable data protection laws and regulations:
NotPanel uses the Data collected from and about you for a variety of business and operational purposes, all of which are designed to provide, maintain, improve, and secure the Services, and to fulfill our contractual obligations to you. The specific purposes for which we process your Data include, without limitation, the following. Notwithstanding the foregoing, we will not process your Data for any purpose that is materially incompatible with the purposes described in this Privacy Policy without first providing you with notice and, where required by applicable law, obtaining your consent:
NotPanel takes the security, confidentiality, and integrity of your Data extremely seriously. We have implemented and maintain a comprehensive set of technical, administrative, organizational, and physical security measures designed to protect your Data against unauthorized access, acquisition, use, disclosure, alteration, destruction, loss, or any other form of unlawful or unauthorized processing. These security measures are reviewed and updated on an ongoing basis to address evolving threats, vulnerabilities, and industry best practices. Our security measures include, without limitation:
NotPanel retains your Data only for as long as is reasonably necessary to fulfill the purposes for which it was collected, to comply with our legal, regulatory, tax, accounting, and reporting obligations, to resolve disputes, to enforce our agreements, and to protect our legitimate business interests. The specific retention periods for different categories of Data are described below. Upon expiration of the applicable retention period, your Data will be securely deleted, destroyed, or irreversibly anonymized in accordance with our data retention and disposal procedures, unless a longer retention period is required or permitted by applicable law:
A verified, signed-in user may submit a permanent account-deletion request from the protected account-deletion request page. The account remains active while the request is pending, and the user may cancel it until an administrator approves it. Changing the account email invalidates the request and requires a new email verification. Approval is blocked while orders, deposits, rewards, or other financial or delivery activity remains unresolved.
Approval permanently revokes account access and erases login identities, passwords, OAuth links, two-factor secrets, sessions, API keys, webhooks, profile data, preferences, private configuration, and user-uploaded private files where technically available. Backup copies of erased data may remain inaccessible in encrypted backups until those backups expire through the normal rotation cycle; they are not used to restore the deleted account.
Orders, deposits, transactions, commissions, support history, audit records, and other legally or operationally required business records are retained under the published retention rules and remain connected only to an anonymized Deleted Account record. The original email address is retained encrypted indefinitely for account-closure evidence and may be revealed only to an administrator with account-deletion permission after fresh multi-factor verification.
User-requested deletion requires separate consent to permanently forfeit any remaining real and demo balance. On approval, the real-balance forfeiture is recorded once in the financial ledger and both balances become zero. Approval is irreversible. A future signup using the same email address or Google account creates a new user ID and cannot recover or access the deleted account's balance, orders, API keys, referrals, sessions, or history.
This disclosure is mandatory. Any operator-supplied custom legal text is additional; if it conflicts with this account-deletion disclosure, this fixed disclosure controls.
Subject to applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable privacy legislation in your jurisdiction, you may have certain rights with respect to the personal information we hold about you. These rights may be subject to limitations and exceptions provided by applicable law. To the fullest extent permitted by applicable law, you have the right to:
The Services are not intended for, directed at, or designed to attract individuals under the age of eighteen (18) years (or the age of legal majority in your jurisdiction, if higher). NotPanel does not knowingly collect, solicit, request, store, process, or otherwise obtain personal information, personally identifiable information, or any other Data from any individual under the age of eighteen (18). We do not knowingly allow individuals under the age of eighteen (18) to create accounts, place orders, or otherwise access or use the Services.
If you are a parent, legal guardian, or other responsible adult and you believe that a minor under the age of eighteen (18) has created an account on the Services, provided personal information to NotPanel, or is otherwise using the Services without your knowledge or consent, please contact us immediately at support@notpanel.com with sufficient detail to allow us to identify the account in question. Upon verification that the account holder is indeed a minor, we will take prompt and reasonable steps to: (a) terminate the account and revoke access; (b) erase or anonymize personal information to the fullest extent permitted while retaining records that applicable law requires us to keep; and (c) address any unused account balance to the extent feasible and in accordance with our Refund Policy and applicable law. We take the protection of minors' privacy seriously and will act promptly upon receiving such a notification.
NotPanel operates globally, and your Data may be transferred to, stored in, and processed in countries or jurisdictions other than your country of residence, including countries that may not provide the same level of data protection as the laws of your home jurisdiction. By accessing or using the Services, you acknowledge and consent to the transfer of your Data to such countries and jurisdictions. These international transfers are necessary for the provision and operation of the Services, including but not limited to: hosting and infrastructure services provided by our data center and cloud service providers; partner-routed order fulfillment when an independent fulfillment partner is used; payment processing through international Payment Processors; and analytics and monitoring services. Directly operated fulfillment does not, by itself, require order data to be transferred to an independent fulfillment partner.
Where we transfer your Data to countries that have not been deemed to provide an adequate level of data protection by the relevant supervisory authority, we implement appropriate safeguards to ensure that your Data receives a level of protection substantially equivalent to that required by the data protection laws of your jurisdiction. These safeguards may include, without limitation: Standard Contractual Clauses (SCCs) approved by the European Commission or other relevant regulatory authorities; binding corporate rules; data processing agreements incorporating appropriate data protection obligations; certification mechanisms; codes of conduct; and other transfer mechanisms recognized by applicable data protection laws. You may request additional information about the specific safeguards we employ for international data transfers by contacting us at support@notpanel.com.
The Services may contain hyperlinks, references, integrations, or other connections to websites, applications, platforms, products, or services that are owned, operated, or controlled by third parties that are not affiliated with, endorsed by, or under the control of NotPanel (collectively, "Third-Party Services"). These Third-Party Services are provided solely for your convenience and informational purposes. The inclusion of any link to or integration with a Third-Party Service does not imply, suggest, or constitute any endorsement, approval, recommendation, sponsorship, affiliation, or partnership by NotPanel with respect to such Third-Party Service or its owner, operator, content, products, services, or privacy practices.
NotPanel is not responsible for, and assumes no liability with respect to, the privacy practices, data collection and processing activities, security measures, content, accuracy, legality, opinions, terms of service, or any other aspect of any Third-Party Service. Your interactions with Third-Party Services, including the provision of any personal information or Data to such services, are governed solely by the privacy policies and terms of service of those Third-Party Services. We strongly recommend that you carefully review the privacy policy and terms of service of every Third-Party Service before providing any personal information or engaging in any transaction with or through such service.
NotPanel reserves the right to modify, amend, update, revise, supplement, or otherwise change this Privacy Policy at any time, at our sole and absolute discretion, with or without prior notice, to reflect changes in our data practices, business operations, legal requirements, regulatory guidance, industry standards, or for any other reason we deem necessary or appropriate. When we make changes to this Privacy Policy, we will update the "Last Updated" date at the top of this page to reflect the date of the most recent revision.
For changes that we determine, in our sole discretion, to be material or significant -- including but not limited to changes that affect the categories of Data we collect, the purposes for which we process your Data, the third parties with whom we share your Data, or your rights under this Privacy Policy -- we will make reasonable efforts to notify you through one or more of the following methods: (a) a prominent notice published on the Services; (b) an in-platform announcement or notification; (c) an email sent to the email address associated with your account; or (d) any other method we deem appropriate under the circumstances. Your continued access to or use of the Services following the posting of any changes to this Privacy Policy, or following the effective date of any material change for which you received notice, constitutes your acknowledgment, acceptance, and agreement to be bound by the revised Privacy Policy. If you do not agree with the revised Privacy Policy, your sole and exclusive remedy is to discontinue your use of the Services and delete your account.
NotPanel is the data controller responsible for the personal information processed through the Services as described in this Privacy Policy. If you have any questions, concerns, comments, complaints, or requests regarding this Privacy Policy, our data collection and processing practices, your rights under applicable data protection laws, or any other privacy-related matter, please do not hesitate to contact us using any of the following methods. We are committed to addressing all privacy-related inquiries promptly, thoroughly, and in accordance with applicable legal requirements:
We endeavor to acknowledge all privacy-related inquiries within forty-eight (48) hours of receipt and to provide a substantive response within thirty (30) calendar days, or within such shorter period as may be required by applicable data protection laws and regulations in your jurisdiction. If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that provides for the right to lodge complaints with a supervisory authority, you have the right to file a complaint with your local data protection authority if you believe that our processing of your personal information violates applicable data protection laws.
When you access, browse, navigate, or otherwise interact with the Services, certain information is automatically collected by our servers, infrastructure, and third-party analytics tools. This automatic data collection occurs through standard internet technologies including, without limitation, server access logs, application performance monitoring systems, cookies, and similar tracking technologies. The categories of automatically collected information include, but are not limited to:
We do NOT, under any circumstances, request, collect, store, access, or otherwise obtain your social media account passwords, login credentials, authentication tokens, access keys, or any other information that would grant us or any third party the ability to log into, control, or access your social media accounts. The only information we receive in connection with order fulfillment consists of the public uniform resource locators (URLs) and links that you voluntarily submit when placing an order through the Services.
Legal bases for processing: Where the General Data Protection Regulation (GDPR) or equivalent legislation applies to our processing of your Data, we rely on the following legal bases: (a) performance of a contract — for processing necessary to provide the Services you request, including account management, order processing, wallet operations, and customer support; (b) legitimate interests — for fraud prevention, platform security, service monitoring, and the improvement of the Services, balanced against your rights and freedoms; (c) consent — for optional processing you affirmatively enable, such as browser push notifications, which you may withdraw at any time; and (d) compliance with legal obligations — for the retention of financial transaction records and responses to lawful requests from public authorities.
Notwithstanding the security measures described above, no method of electronic transmission over the Internet and no method of electronic storage is completely secure or impervious to all threats. While we implement commercially reasonable and industry-standard security measures to protect your Data, we cannot and do not guarantee absolute security against all potential threats, including but not limited to advanced persistent threats, zero-day vulnerabilities, state-sponsored attacks, or other sophisticated attack vectors. You acknowledge and agree that you transmit your Data to us at your own risk, and you are solely responsible for maintaining the confidentiality and security of your login credentials, password, and account access information. You agree to notify us immediately at support@notpanel.com if you suspect any unauthorized access to or use of your account.
Most modern web browsers allow you to manage, block, or delete cookies through browser settings. Please be aware that disabling or blocking essential cookies may impair the functionality, security, and usability of the Services, and certain features may not function correctly or at all without the use of necessary cookies.
To exercise any of the rights described above, or to make any inquiry regarding our privacy practices, please contact us at support@notpanel.com. We will acknowledge receipt of your request within a reasonable timeframe and will respond substantively to all verified requests within thirty (30) calendar days, or within such shorter period as may be required by applicable law. In certain circumstances, we may need to extend this response period by an additional sixty (60) days, in which case we will notify you of the extension and the reasons therefor.