Your business data stays with your WHMCS installation. This page explains what the app uses, what passes through our push relay and the choices you have.
Effective 5 November 2026
WHMCS Go is published by Daniel Collins, trading as WHMCSnow. This notice explains the iOS app, its companion addon and the WHMCSnow push relay. It supplements our website privacy policy.
When you pair a site, the app connects directly to that WHMCS installation for tickets, replies, attachments, customers, orders, invoices, quotes, services and domains. WHMCSnow does not receive those conversations or business records through its relay for viewing or editing. The installation operator controls these records, staff permissions, retention and backups. If you pair WHMCSnow's own installation, WHMCSnow is also that installation's operator.
Depending on your permissions and actions, the installation processes account and contact details, support content, selected attachments, business records and staff activity. Contact that installation's administrator about access, correction or deletion of those records. A licence does not grant permission to view them.
A pairing QR contains a short-lived, single-use token and the installation address. The app exchanges it directly with that installation for a revocable per-device credential. The credential and connection information are stored in iOS Keychain. Your WHMCS administrator password is not sent to WHMCSnow or stored by the app.
Appearance, language and selected-installation preferences are stored locally. Company logos may be cached in memory. Business API requests use an ephemeral network session without an app disk-response cache. Attachments you choose to open may be downloaded into protected temporary files, excluded from backup and removed when the preview is dismissed. Files you explicitly export or share are handled by the destination you choose.
Your Apple push token is registered with your own WHMCS installation. The addon selects permitted recipients and sends a signed request to WHMCSnow containing the destination token, environment, routing identifiers and configured notification text. WHMCSnow checks the installation licence and forwards the request to Apple. Notification text and device tokens are processed in memory and are not saved in the WHMCSnow relay database.
The relay keeps hashed delivery receipts to reduce duplicate sends. These do not contain readable notification text, ticket identifiers or Apple push tokens. Their deduplication window is 24 hours; expired receipts are removed on the next push request. Installation/licence bindings and authentication replay-protection metadata are also retained to operate and secure the service. Notification retries remain in the customer installation's queue.
Administrators control the notification templates. Including a ticket-title or other variable deliberately includes that information in the notification sent through WHMCSnow and Apple. Use generic wording if those details should stay off notifications. Apple handles push delivery and may show alerts on your lock screen according to your iOS settings. Delivery is not guaranteed or instant.
If your administrator enables WHMCS Go login approval, your installation stores the request, result and related login information. The app fetches login IP address, approximate location when available, browser and request time directly from that installation. Push payloads contain opaque request identifiers rather than those login details. Approving or denying a request is sent back to that installation.
Disconnect a site in the app, or ask its administrator to revoke your device. If disconnecting would disable enrolled administrator two-factor authentication, the app warns you first. Revocation prevents future authenticated access; it does not delete your organisation's existing tickets or business records.
Example Host uses fictional data locally. Demo API requests do not leave the device. WHMCS Go has no advertising SDK, cross-app tracking or third-party analytics SDK. Apple may provide TestFlight crash reports, usage information and feedback under its own terms. If you contact support, we receive what you send; do not include passwords, pairing codes, private keys or unnecessary customer data.
Connections use HTTPS. Hosting/security systems may record technical access metadata such as request time, IP address, route and response status. Such operational records are separate from notification payload storage. We do not intentionally log notification bodies, device credentials or Apple push tokens. Licence, billing and support records are handled separately as necessary to provide support, operate subscriptions and meet applicable obligations.
You can contact us to ask about personal information WHMCSnow holds, request access, correction or deletion, or raise a privacy concern. Records controlled by another WHMCS installation must be handled by that operator. Removing the app does not cancel an addon subscription or erase organisation records.
Daniel Collins, trading as WHMCSnow, is responsible for personal information used for WHMCS Go licensing, subscriptions, support and the security and operation of our relay. The organisation running your paired WHMCS installation is responsible for its customer records, staff access and use of notification templates. Your organisation’s privacy notice explains its own purposes and responsibilities.
We receive service information from you, your installation and, where applicable, Apple’s developer and TestFlight services. We use information as necessary to provide a service you contract with us for, to meet legal obligations such as accounting, and for our legitimate interests in operating, securing and supporting the service. For staff using an organisation’s subscription, service operation and security are generally based on those legitimate interests rather than a contract with that staff member. iOS permission prompts give you control over device features; they do not give us access to biometric data.
Apple receives notification payloads to deliver pushes. Providers operating our hosting and security services may process technical service information on our behalf. Your chosen WHMCS operator receives app requests and activity, and a destination you explicitly share a file with receives that file. We may disclose information where required by law. We do not sell personal information or use it for advertising.
Apple’s services can involve processing in countries outside the UK. See Apple’s privacy policy for information about its processing and international transfers. The location of your WHMCS records depends on your installation operator and its hosting arrangements.
Relay delivery receipts have the 24-hour window described above. Authentication nonces have a ten-minute replay-protection window and expired entries are removed when subsequent authenticated requests are processed. Installation authentication records are needed while an installation uses the relay. Licence, billing, support and technical security records are retained according to their purpose, applicable legal requirements, and any outstanding dispute or security investigation; they are not notification-content archives. Contact us for information about a particular record or a deletion request.
Depending on the circumstances, UK data protection law gives you rights to access, correct or erase personal information, restrict its use, receive certain information in a portable format, and object to processing based on legitimate interests. These rights have exceptions, including where information must be retained to meet a legal obligation. Contact us using the details below for information WHMCSnow controls; contact your installation operator for its records.
You can also complain to the UK Information Commissioner’s Office or your relevant local data protection authority. You do not have to contact us first, although we welcome the opportunity to resolve a concern.
For WHMCS Go privacy questions, contact us about privacy using our support form. We may update this notice as the service changes; the effective date above identifies the current version.
WHMCS Go is an independent product and is not the official WHMCS app. Apple's services are also subject to Apple's privacy policy.