Privacy policy
Last updated Oct 14, 2026
This Privacy Policy explains how PanelHubs Limited ("PanelHubs", "we", "us" or "our") collects, uses, shares and protects personal data when you visit our website, create an owner account, run a panel on our platform, or contact us. It is written to meet the requirements of the Nigeria Data Protection Act 2023 ("NDPA") and other data protection laws that may apply.
Please read it together with our Terms of Service.
1. Who is responsible for your data
- Owners and website visitors. For personal data about you as a visitor to our website or as an owner of a PanelHubs account, PanelHubs Limited is the data controller.
- Customers of panels. Each panel on PanelHubs is run by its own owner as an independent business. For personal data about the customers of a panel, the panel owner is the data controller and PanelHubs is a data processor that hosts and processes the data on the owner's behalf. If you are a customer of a panel, please read that panel's own privacy policy and contact the panel owner first about your data. See section 9.
2. What personal data we collect
Information you give us
- Account details: your name, email address, password (stored only in hashed form), phone, WhatsApp or Telegram contact, country and preferred language.
- Sign-in with Google: if you choose it, your Google account identifier, name and email address as shared by Google.
- Panel details: panel names, domains, settings, staff accounts you create, and the content you add to your panels.
- Billing details: invoices, the plans you use, payment records and references, and proof of payment you upload. Card details are entered directly with our payment processors; we do not store full card numbers.
- Support and communications: messages, tickets, attachments and any other information you send us.
- Imports: files you upload to move customers or orders from another panel.
Information collected automatically
- Security and usage records: IP address, browser and device type, sign-in times and devices, two-step sign-in events, and actions taken in your account and console (activity logs).
- Technical data: pages visited, referring pages and error logs, used to operate, secure and improve the Service.
- Cookies: see section 8.
Information from others
- Payment status from our payment processors, DNS information about domains you connect, and information from Google if you use Google sign-in.
3. How we use your data, and our legal bases
- To provide the Service (create and host your panels, connect your domains, run your account): performance of our contract with you.
- To bill you and keep financial records: performance of contract and legal obligations (tax and accounting).
- To keep accounts and the platform secure, detect fraud, abuse and unauthorised access, send new sign-in alerts and enforce our Terms: our legitimate interests and legal obligations.
- To provide support and communicate with you about your account, invoices, service changes and security: performance of contract and legitimate interests.
- To improve the Service, fix problems and understand how features are used: legitimate interests.
- To send product news and offers: legitimate interests or consent where required. You can opt out at any time.
- To comply with the law and respond to lawful requests from authorities: legal obligations.
We do not sell your personal data, and we do not use it for automated decisions that produce legal or similarly significant effects on you.
4. Who we share data with
We share personal data only where needed, with:
- Service providers (sub-processors) that help us run PanelHubs, such as hosting and server providers, network security and DDoS protection (for example Cloudflare), DNS providers, email delivery services, payment processors (for example Paystack and Flutterwave), and Google for sign-in and website analytics. They may use the data only to provide their services to us and must protect it.
- Services you connect yourself to your panel, such as your providers, payment gateways, live chat, analytics, SMS, messaging or automation tools. These receive data under their own terms and your instructions.
- Authorities, courts or regulators when required by law, or where necessary to protect the rights, property or safety of PanelHubs, our users or the public.
- A buyer or successor if our business is reorganised, merged or sold, subject to this Policy.
5. International transfers
Our servers and some of our service providers may be located outside Nigeria. When personal data is transferred outside Nigeria, we do so only as permitted by the NDPA, for example where the destination provides an adequate level of protection, where appropriate safeguards such as contractual commitments are in place, or where the transfer is necessary to perform our contract with you.
6. How long we keep data
- Account and panel data: while your account or panel is active, and for a reasonable period after closure so you can request an export and so we can resolve disputes.
- Billing and payment records: for as long as required by tax and accounting laws (generally at least six years).
- Security and activity logs: for as long as needed to protect the Service and investigate incidents, then deleted or anonymised.
- Backups: deleted data may remain in backups for a limited time until they are overwritten in the normal backup cycle.
- Import files: deleted once the import has finished.
7. How we protect data
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) for every site, hashing of passwords, encryption of secret keys, a separate database for each panel, network protection against attacks, two-step sign-in, staff roles and permissions, activity logs and regular backups. No system is completely secure, so we cannot guarantee absolute security, but we work to prevent, detect and respond to incidents. If a personal data breach is likely to put your rights at risk, we will notify you and the Nigeria Data Protection Commission as required by law.
8. Cookies
- Essential cookies keep you signed in, protect forms against forgery, remember your language and keep the Service secure. The Service does not work without them.
- Analytics and advertising cookies (for example Google Analytics or Meta Pixel) may be used on our website to understand visits and measure campaigns, where enabled.
You can block or delete cookies in your browser settings, but parts of the Service may then stop working. Panel owners decide which cookies and tracking tools their own panels use and must inform their customers.
9. Data about panel customers
When an owner runs a panel on PanelHubs, the panel collects data about its customers (such as usernames, emails, balances, orders, payments and support messages). For this data:
- the panel owner decides why and how it is used and is responsible for informing customers and handling their requests;
- PanelHubs processes it only to host and operate the panel on the owner's instructions, keeps each panel's data in its own database, does not sell it and does not use it to market to those customers;
- PanelHubs may access it where needed to provide support requested by the owner, keep the Service secure, investigate abuse or comply with the law.
Customers who contact us about a panel's data will normally be referred to the panel owner. We will help owners respond to such requests where reasonably possible.
10. Your rights
Under the NDPA and other applicable laws, you may have the right to:
- be informed about how your data is used and access a copy of it;
- correct inaccurate or incomplete data;
- have your data deleted where there is no good reason to keep it;
- restrict or object to certain processing, including direct marketing;
- receive your data in a structured, commonly used format (data portability);
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with the Nigeria Data Protection Commission or another competent supervisory authority.
To exercise your rights, open a support ticket from your account or contact us using the details on our website. We may need to verify your identity first, and we will respond within the time required by law. Some data may need to be kept for legal reasons even after a deletion request.
11. Children
PanelHubs is intended for adults running a business. We do not knowingly collect personal data from anyone under 18 as an owner. If you believe a child has given us personal data, please contact us and we will delete it.
12. Links to other websites
Our website and panels may link to websites and services run by others. We are not responsible for their privacy practices. Please read their privacy policies.
13. Changes to this Policy
We may update this Privacy Policy from time to time. The date at the top shows the latest version. If we make important changes, we will tell you by email or in your account before they take effect.
14. Contact us
For questions about this Privacy Policy or your personal data, please open a support ticket from your PanelHubs account or contact us using the details shown on our website.
PanelHubs Limited · Federal Republic of Nigeria