Privacy Policy

Control panel account

When you register and sign in to cp.ivpser.com, we process your account name, email address and password. Passwords are stored only as salted hashes, never in plain text. Password reset links are sent only to your email, and we store only a hash of the reset token. If you sign in with or link WeChat, we also store the openid WeChat provides.

For security and troubleshooting, gateway access logs record IP address, time, request path and browser identifier, and the control panel records key actions on your account, such as action type, target, time and result.

Identity verification

Where applicable regulations require it, some products need real-name verification before activation. Verification is performed by Tencent Cloud FaceID: you submit your identity details and complete face verification on Tencent Cloud's page. We then retrieve and store the result from Tencent Cloud, including your name and national ID number, to confirm your account's verification status and to respond to lawful requests for assistance. We do not receive or store your face images.

Orders, payments and account balance

When you purchase, renew or top up, we record order details, amounts, transaction IDs, payment status, balance changes and refunds in order to complete the transaction, reconcile accounts and handle disputes.

Payments are processed by payment providers: Alipay, WeChat Pay and, once enabled, Creem for international card payments. Creem acts as merchant of record, charges you directly and processes your payment details, billing address and tax information under its own privacy policy. Full card numbers and other payment credentials are handled by the payment provider; iVPSer never receives or stores them. We receive only what is needed, such as the transaction ID, amount and payment result.

Server data

We store metadata about your servers, such as data center, plan, operating system image, IP addresses, expiry date and status. The initial root or administrator password is stored encrypted and shown only to you in the control panel.

Servers run on upstream infrastructure providers (Linode/Akamai, Vultr or our data center partners), which process the servers and the data on them in order to provide compute, network and storage. We do not look at the files or business data on your servers. We access them only as far as necessary when you ask for help in a ticket, when handling abuse reports or security incidents, or when cooperating with competent authorities as required by law.

AI operations assistant

The AI operations assistant runs only when you use it. To answer your questions and carry out actions you approve, it processes your messages, basic server information, and the commands run on your server and their output. This content is sent to the third-party AI model provider we use to generate responses. Every command that changes your server requires your confirmation first. Please do not paste passwords, keys or personal information that are unrelated to your question.

Website, VPS selector and email reports

The VPS selector runs in your browser and does not require an email address, name or phone number. When results are shown, it sends an anonymous event with the answer categories (use case, region, operating system, budget range, server count range, timeline and number of candidates), without any free text.

If you choose "send this report", we process your email address, your selector answers, the recommended plan identifiers, the report path, a request identifier, referral/UTM parameters and an anonymous flow identifier in order to deliver that report. Marketing emails are sent only if you tick the separate, unticked-by-default opt-in box and confirm it by email. Every marketing email contains an unsubscribe link; after you unsubscribe we keep a minimal suppression record so that we do not email you again.

The website stores format-restricted first-touch referral parameters (such as UTM source and campaign and the first landing page) in your browser's local storage, and a signed anonymous flow identifier in session storage for up to 30 minutes of inactivity. These do not contain your email, name or free text. They are passed to cp.ivpser.com when you follow a link to the control panel.

The website, CDN and servers keep standard access logs (IP address, time, request path, browser identifier and response status) for security, troubleshooting and performance.

Service providers and international transfers

We share information only with providers that need it to deliver the functions above: infrastructure providers, Tencent Cloud (identity verification), payment providers, our SMTP email provider, our CDN and our AI model provider. Our website, control panel, CDN and these providers may be located outside your country or region, so your information may be processed across borders. We give each provider only the fields it needs.

We do not sell or rent your personal information.

Retention and security

We keep account, order and payment records while your account is active and afterwards for as long as needed for accounting, dispute handling, security and legal obligations. Unconfirmed marketing sign-ups are deleted under our server-side cleanup policy. We protect information with access control, encryption in transit, encrypted storage of sensitive fields, rate limiting and data minimization.

Your choices and contact

You can use the selector, the pricing page and the control panel without submitting an email for marketing. To access, correct or delete information about you, or with any question about this policy, email admin@ivpser.com or open a ticket in the control panel. We will handle your request according to its nature and the applicable rules.

Our services are not intended for children.