Privacy Policy

PHP Patch Service is operated by Superstar Telecom LLC. This policy covers phpatch.com and patch engagements.

What we collect

Free scan: the URL you submit and what that site discloses publicly (response headers, fingerprints). We keep the scan result to operate the service.
Deep check (read-only): a software inventory of the server you authorize — PHP binaries and versions, packages, containers, and crash indicators in recent logs. No application data, no user content, no database contents.
Patch engagements: the patch manifest, before/after versions, verification results, and the snapshot of the runtime being patched.
Billing: payment is processed by our payment processor; we do not store card numbers.

Retention

Pre-patch snapshots: 72 hours on the Patch tier, an extended window on Patch + Rollback, then deleted. Engagement records and reports are kept so we can support you and evidence the work; ask us at any time to delete your snapshot and engagement data early and we will.

Sharing

We do not sell personal or engagement data. Infrastructure is hosted with Hetzner (data center in the United States for this service). We disclose data only when legally required.

Contact

Privacy questions: via the contact channel on https://phpatch.com/security

Not affiliated with the PHP Group. PHP is a trademark of the PHP Group.

This document is published in English, which is the controlling text.

AI assistant

The website offers an AI assistant powered by NVIDIA NIM. Messages you type into the assistant are sent to NVIDIA for processing so it can answer. Do not enter passwords, keys or personal data into the assistant. Assistant conversations are not used to operate the patching service.