Privacy Policy

This policy explains how Q Panel (the "Panel") handles information. The Panel is operated by Qompera Tech Solutions, a trade name of Hind Advertisers ("we", "us"). It covers every installation of the Panel that we operate, including the one at vps.qompera.com.

The Panel is an internal tool for managing our own servers. Only administrators we authorise can use it.

1. Information we collect

• Administrator accounts: name, email address, hashed password and two-factor authentication settings for people who sign in to the Panel.
• Server data: the configuration of the websites, databases, mail accounts and backups that administrators manage through the Panel.
• Technical logs: standard web-server and application logs, such as IP address, time of request and errors, used for security and troubleshooting.
• Google user data: described in section 2.

2. Google user data

An administrator can connect a Google account so that the Panel stores this server's backups in that account's Google Drive. When they do, the Panel asks Google for these permissions only:

• https://www.googleapis.com/auth/drive.file: lets the Panel create, read, update and delete only the files and folders that the Panel itself created. The Panel cannot see, open or change any other file in your Google Drive.
• openid and email: lets the Panel read the email address of the connected Google account, so administrators can see which account is in use.

How we use it

• We upload encrypted backup archives of this server to a dedicated folder in the connected Drive.
• We list, verify, restore and delete those backup files according to the retention schedule the administrator sets.
• We read the Drive storage quota so the Panel can warn when space is running low.
• We show the connected email address on the Panel's backup settings page.

We use Google user data for nothing else.

How we store and protect it

• The OAuth access and refresh tokens are stored encrypted in the Panel's database, on the server that was connected. They are never shown in the interface, returned by any API or written to logs.
• Backup contents are encrypted on our server before upload. The encryption key never leaves our infrastructure, so Google cannot read the backups.
• All communication with Google uses HTTPS.

Sharing

We do not sell, rent or share Google user data with anyone. We do not use it for advertising, and we do not use it to develop, improve or train generalised or non-personalised AI or machine-learning models. Our staff do not read it, except when an administrator asks for help with a backup, when we need it for security purposes, or when the law requires it.

Q Panel's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Retention and deletion

• Backup files stay in the connected Drive until the Panel's retention schedule removes them, or until the account owner deletes them.
• When an administrator clicks Disconnect on the Panel's Google Drive page, the Panel revokes its access with Google and deletes the stored tokens and email address straight away. Backup files already in Drive are left in place, since they belong to the account owner.
• You can also remove the Panel's access at any time at myaccount.google.com/permissions.
• Administrator accounts and logs are kept for as long as they are needed to operate and secure our servers.

To ask us to delete data we hold about you, email ankit@qompera.com.

4. Cookies

The Panel uses only the session and security (CSRF) cookies it needs to keep administrators signed in. It does not use analytics or advertising cookies.

5. Changes to this policy

We will update the effective date above when this policy changes. If a change affects how Google user data is used, we will tell connected administrators before it takes effect.

6. Contact

Hind Advertisers (trading as Qompera Tech Solutions)
Email: ankit@qompera.com