Privacy policy
How iBoMate ("iBoMate", "we") handles personal data on ibomate.app, in the reseller panel and in the branded apps we build. Effective 4 September 2026.
Two kinds of people, two roles
Resellers are our customers: you create an account, run a panel and pay us. For your data we decide how and why it is processed, and this policy is the whole story.
Your customers are the people whose devices run your branded app. Their names, devices and expiry dates are entered by you and belong to you. For that data we act on your instructions and only as needed to run the service — you are responsible for telling your customers what you collect and for having a lawful basis to do so.
What we collect from resellers
- At signup: a username, an email address, the contact channel you want your customers to see (a WhatsApp number, Telegram handle, Messenger page or website) and the app name you choose. The username becomes part of your panel address and your app's package id.
- Sign-in: one-time codes sent to your email, and a session cookie once you are signed in. We do not store passwords for the reseller panel's email login.
- In the panel: everything you configure — branding assets, themes, prices, notifications, servers and DNS entries, ads, sports screens and app builds.
- Billing: the plan you are on, the number of active customers at each renewal, the Binance order IDs you submit and our record of each payment. We never see or store card numbers; we do not take cards.
- Email we send you: sign-in codes, trial and renewal notices, and replies to anything you write to us.
What we process on your behalf
- Customer records you enter: names, notes, the contact details you put in a note, device identifiers (MAC address or device key), expiry dates and the playlists or DNS entries assigned to each device.
- From the branded app: each time a customer's device opens your app it sends its device identifier and the app's package name to our API so we can return that device's playlists, expiry state and your settings. That is the only thing the app reports. We do not see what is played, and we do not have the streams.
- Renewal reminders and expiry notices you have switched on are sent to your customers through the channels you configured, in your name.
Technical data
Our servers keep standard access logs — IP address, user agent, requested address and time — for security and to diagnose faults. They are rotated on a short cycle and are not used to profile anyone. This website sets no advertising cookies and loads no third-party analytics; the only cookie is the session cookie after you sign in.
Why we use it
- To provide the service: build and serve your app, run your panel, answer your customers' devices, send the reminders you configured.
- To bill you and keep the accounting records the law requires.
- To keep the platform secure, prevent abuse and enforce the terms.
- To answer you when you write to us.
We do not sell personal data, we do not use it for advertising, and we do not send marketing email to your customers.
Who it is shared with
- Our hosting provider, on whose servers the platform runs.
- Cloudflare, which sits in front of the website and the API and therefore sees the traffic to them.
- The email service that delivers sign-in codes and notices.
- Binance, when you pay: you deal with Binance directly, under its own privacy terms, and we receive the order details you give us.
- Authorities, where we are legally required to.
Nobody else. Your customers' data is never shared with other resellers or with anyone outside the list above.
How long we keep it
Account and panel data: for as long as your account is active. When a subscription ends, the panel is frozen and your customers' apps keep working for 14 days so you can export your list or come back; after that the account is scheduled for deletion. Deletion is carried out by us, not automatically, and you can ask for it sooner at any time.
Billing records: for the period our accounting obligations require, even after the account is gone.
Server logs: a short rotation, measured in weeks.
Your rights
You can export your customer list from the panel at any time, including during the 14-day window after cancellation. You can ask us to show you, correct, export or delete the personal data we hold about you, and to stop processing it, by emailing the address below. We answer within one business day and act within 30 days. If you are in a jurisdiction with a data-protection authority you also have the right to complain to it.
If you are a reseller's customer, contact your reseller first — they hold your record and can change or delete it. If that does not work, write to us and we will help.
Children
The reseller panel and this website are for businesses and are not directed at anyone under 18.
Changes and contact
We will update this page when the service changes and move the effective date at the top. Questions and requests: [email protected], with "Privacy" in the subject line.