Privacy Policy

Control panel account

When you register and sign in to cp.ivpser.com, we process your account name, email address and password. Passwords are stored only as salted hashes, never in plain text. Password reset links are sent only to your email, and we store only a hash of the reset token. If you sign in with or link WeChat, we also store the openid WeChat provides.

For security and troubleshooting, gateway access logs record IP address, time, request path and browser identifier, and the control panel records key actions on your account, such as action type, target, time and result.

Identity verification

Where applicable regulations require it, some products need real-name verification before activation. Verification is performed by Tencent Cloud FaceID: you submit your identity details and complete face verification on Tencent Cloud's page. We then retrieve and store the result from Tencent Cloud, including your name and national ID number, to confirm your account's verification status and to respond to lawful requests for assistance. We do not receive or store your face images.

Orders, payments and account balance

When you purchase, renew or top up, we record order details, amounts, transaction IDs, payment status, balance changes and refunds in order to complete the transaction, reconcile accounts and handle disputes.

Payments are processed by payment providers: Alipay, WeChat Pay and, once enabled, Creem for international card payments. Creem acts as merchant of record, charges you directly and processes your payment details, billing address and tax information under its own privacy policy. Full card numbers and other payment credentials are handled by the payment provider; iVPSer never receives or stores them. We receive only what is needed, such as the transaction ID, amount and payment result.

Server data

We store metadata about your servers, such as data center, plan, operating system image, IP addresses, expiry date and status. The initial root or administrator password is stored encrypted and shown only to you in the control panel.

Servers run on upstream infrastructure providers (Linode/Akamai, the provider of our Global regions, or our data center partners), which process the servers and the data on them in order to provide compute, network and storage. We do not look at the files or business data on your servers. We access them only as far as necessary when you ask for help in a ticket, when handling abuse reports or security incidents, or when cooperating with competent authorities as required by law.

AI operations assistant

The AI operations assistant runs only when you use it. To answer your questions and carry out actions you approve, it processes your messages, basic server information, and the commands run on your server and their output. This content is sent to the third-party AI model provider we use to generate responses. Every command that changes your server requires your confirmation first. Please do not paste passwords, keys or personal information that are unrelated to your question.

Website and VPS selector

The VPS selector runs in your browser and does not require an email address, name or phone number. When results are shown, it sends an anonymous event with the answer categories (use case, region, operating system, budget range, server count range, timeline and number of candidates), without any free text.

The website stores format-restricted first-touch referral parameters (such as UTM source and campaign and the first landing page) in your browser's local storage, and a signed anonymous flow identifier in session storage for up to 30 minutes of inactivity. These do not contain your email, name or free text. They are passed to cp.ivpser.com when you follow a link to the control panel.

The website, CDN and servers keep standard access logs (IP address, time, request path, browser identifier and response status) for security, troubleshooting and performance.

The website uses Cloudflare Web Analytics to count page views and measure load performance. It sets no cookies, stores no identifier in your browser and does not track you across sites; Cloudflare processes aggregate data such as page URL, referring site, browser type, country and performance timings.

Service providers and international transfers

We share information only with providers that need it to deliver the functions above: infrastructure providers, Tencent Cloud (identity verification), payment providers, our email delivery provider, our CDN and our AI model provider. Our website, control panel, CDN and these providers may be located outside your country or region, so your information may be processed across borders. We give each provider only the fields it needs.

We do not sell or rent your personal information.

Retention and security

We keep account, order and payment records while your account is active and afterwards for as long as needed for accounting, dispute handling, security and legal obligations. We protect information with access control, encryption in transit, encrypted storage of sensitive fields, rate limiting and data minimization.

Your choices and contact

You can use the selector and the pricing page without submitting an email; only a control panel account needs one. To access, correct or delete information about you, or with any question about this policy, email admin@ivpser.com or open a ticket in the control panel. We will handle your request according to its nature and the applicable rules.

Our services are not intended for children.