Privacy Policy

Last Updated: 11 June 2026

1. Introduction

LocalPanel (“we,” “our,” or “us”) is a professional server management application developed by Nesdzo LTD. This Privacy Policy explains how we handle your information when you use our app.

LocalPanel connects to your remote servers via the SSH protocol and provides tools including monitoring, site deployment, database management, file manager, terminal, SSL management, security scanning, Web Terminal, and Access Mode. No software is installed on your servers.

2. Information We Collect

We collect and process the following categories of data:

2.1 Data Stored Locally on Your Device

• Server Connection Details: Hostname or IP address, SSH port, and username — stored locally in an Isar database on your device.
• SSH Credentials: Passwords and private keys — stored in your device’s system Keychain via flutter_secure_storage, encrypted by iOS/Android at the OS level.
• Site Configurations: Domain names and document root paths — stored locally in the Isar database.
• App Settings: Your in-app preferences (theme, language, layout) stored locally.

2.2 Account Data

• Email Address: We collect your email address when you create an account or sign in. This is used for:
  • Account management and authentication
  • Critical security notifications (e.g., password resets, suspicious login alerts)
  • Promotional and marketing communications only if you have explicitly opted in via your account settings or during registration. You can withdraw this consent at any time.

2.3 Web Terminal and Access Mode Data (Stored on Nesdzo LTD Servers)

• Temporary Session Credentials: Usernames, one-time passwords, or session tokens generated for Web Terminal or Access Mode connections are stored on our servers for the duration of the active session or until you revoke them.
• Access Logs: Minimal connection metadata (timestamps, IP addresses of connecting browsers, session duration) may be retained temporarily to ensure security and troubleshoot connectivity issues.
• Retention: This data is ephemeral by design. Sessions expire automatically after a configurable timeout, and you can manually revoke all active sessions and delete associated data instantly from within the app using the “Delete My Data” or “Revoke Sessions” button.

We do NOT collect:

• Server file contents, logs, or database data retrieved via SSH (displayed on-screen only, never persisted on our systems)
• SSH private keys or passwords from your device
• User behaviour or usage analytics for profiling
• Device identifiers for cross-app tracking
• Location data
• Crash reports or diagnostic data (unless you explicitly opt in via your OS)

3. How We Use Your Information

• Authentication: Your email address is used to authenticate your account and secure your access to app features.
• SSH Connection Management: To establish SSH connections to your servers using the locally stored credentials you provide.
• Live Data Display: To display live server metrics, logs, and file contents on-screen.
• Web Terminal & Access Mode: To relay secure browser-based terminal and file manager sessions to your servers. This requires temporary session data to be stored on our infrastructure.
• Session Persistence: To remember your server list and site configurations between sessions.
• Marketing (Opt-In Only): To send product updates, feature announcements, and promotional offers if you have explicitly consented. You can opt out at any time from your account settings.

Important: Data retrieved from your servers via SSH — such as file listings, database contents, or server logs — is displayed within the app only and is never written to local storage or transmitted to Nesdzo LTD, except where strictly necessary for Web Terminal / Access Mode relay functionality.

4. Data Storage and Security

Local Device Storage: SSH credentials and server connection details are stored exclusively on your device using the Isar database and OS-level Keychain. We have no technical ability to access this data.

Nesdzo LTD Server Storage: Web Terminal and Access Mode session data is stored on our secure servers. We implement industry-standard encryption (TLS 1.3 for data in transit, AES-256 for data at rest), access controls, and regular security audits. Session data is isolated per user and automatically purged upon revocation or expiry.

Account Data Storage: Your email address and account preferences are stored securely on our authentication infrastructure. Marketing consent flags are stored separately and can be modified by you at any time.

Deletion:

• Web Terminal / Access Mode Data: You can delete all active session data and revoke temporary credentials at any time from within the app via the dedicated “Delete My Data” button.
• Account Deletion: You can delete your entire account — including your email address, marketing preferences, and all associated server session data — exclusively from within the app. This action is immediate and irreversible.
• Data Deletion Requests by Email: If you are unable to use the in-app deletion features, you may request deletion of your data by emailing us at [email protected]. We will process verified requests within 30 days in accordance with applicable data protection laws.
• Local Device Data: You can delete individual servers or configurations at any time from within the app. Uninstalling the app permanently deletes all locally stored data, including Keychain entries.

5. Data Sharing and Third Parties

We do not sell your personal data to third parties.

We share data only with trusted service providers strictly necessary for delivering our services (e.g., secure hosting infrastructure, email delivery providers for authentication and opt-in marketing emails). All providers are bound by data processing agreements compliant with GDPR.

LocalPanel contains no advertising SDKs, analytics frameworks, or third-party tracking libraries within the app.

6. Permissions We Request

• Network Access: Required to establish SSH connections to your remote servers and to communicate with Nesdzo LTD servers for authentication and Web Terminal / Access Mode relay.
• Keychain / Secure Storage: Required to securely store SSH passwords and private keys using the OS-level encrypted Keychain.
• Local Storage: Required to persist your server list, site configurations, and app settings between sessions.

7. Your Rights (GDPR / UK & EU Data Protection)

Under UK and EU data protection laws, you have the right to:

• Access: All your stored data is visible within the app or available upon request — server list, site configurations, active Web Terminal / Access Mode sessions, and account details.
• Deletion: You can delete individual servers, revoke all Web Terminal / Access Mode sessions, and delete your account entirely from within the app. If you cannot access the app, you may submit a data deletion request to [email protected].
• Rectification: You can edit any stored server details or credentials directly within the app. You can update your email address via account settings.
• Withdraw Consent: If you opted in to marketing communications, you can withdraw this consent at any time from your account settings or via the unsubscribe link in any promotional email.
• Objection & Restriction: You may object to certain processing or request restriction by contacting us.

8. Children’s Privacy

LocalPanel is a professional server management tool not intended for use by individuals under the age of 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.

9. Changes to This Policy

We may update this policy as LocalPanel’s features evolve. Any material changes will be communicated via an in-app notice and reflected on this page with an updated date. Continued use of the app after changes constitutes acceptance of the revised policy.