Privacy Policy

1. Who we are and scope

Proxya operates the Service at proxya.co. This Policy applies to personal data we process as a controller — for example account and billing data. Where we process personal data on your behalf as part of your use of the proxies, our Data Processing Agreement applies in addition to this Policy.

2. Information we collect

We collect the following categories of data:

• Account data you provide: name or username, email address and password (stored only as a secure hash).
• Billing data: plan, transactions and invoices. Card and crypto payment details are handled by our payment processors and are not stored on our servers.
• Technical data collected automatically: IP address, device and browser type, and basic log data used for security and fraud prevention.
• Usage metrics: aggregate proxy statistics such as bandwidth used and request counts — never the content of your traffic.
• Support data: the contents of messages you send to our support and any information you choose to share with us.

3. How we use your information

• To provide, operate, maintain and improve the Service.
• To process orders, payments, invoices and account balances.
• To send transactional messages such as order confirmations, security alerts and email verification.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To respond to your support requests and communicate with you about the Service.
• To comply with legal obligations and enforce our Terms and policies.

4. Legal bases for processing

Where data protection law (such as the GDPR) applies, we rely on the following legal bases: performance of our contract with you (to provide the Service); our legitimate interests (to secure and improve the Service and prevent abuse); your consent (for non-essential cookies and optional communications, which you may withdraw at any time); and compliance with legal obligations.

5. Proxy traffic

We do not monitor, log, inspect or store the content of the traffic you route through our proxies. For billing and abuse-prevention purposes we process only aggregate metadata such as the volume of bandwidth transferred and the number of connections. Your browsing activity through the proxies is not associated with the content of the sites you visit.

6. Cookies

We use cookies and similar technologies for authentication, session management and anonymized analytics. We do not use advertising cookies. For full details and your choices, see our Cookie Policy.

7. How we share information

We do not sell your personal data. We share data only in the following circumstances:

• With service providers acting on our behalf, such as payment processors, email delivery providers and infrastructure/upstream proxy partners, under appropriate confidentiality and data-protection terms.
• When required by applicable law, regulation, legal process or an enforceable governmental request.
• To protect the rights, property and safety of Proxya, our users or the public, including to enforce our Terms and prevent fraud or abuse.
• In connection with a merger, acquisition or transfer of assets, in which case we will require the recipient to honor this Policy.

8. International data transfers

We and our service providers may process data in countries other than your own. Where personal data is transferred internationally, we put in place appropriate safeguards, such as standard contractual clauses or equivalent mechanisms, to protect your data in accordance with applicable law.

9. Data retention

We retain account data for as long as your account is active. After account closure we delete or anonymize personal data within a reasonable period, except where we must retain certain records to comply with legal, tax or accounting obligations, or to resolve disputes and enforce our agreements. Security and billing logs are kept only as long as necessary for those purposes.

10. Data security

We apply industry-standard technical and organizational measures, including TLS encryption in transit, hashing of passwords, short-lived authentication tokens, access controls and ongoing monitoring. No method of transmission or storage is completely secure; if we become aware of a breach affecting your personal data, we will notify you and the relevant authorities where required by law.

11. Your rights

Depending on your location, you may have the right to access, correct, delete or port your personal data, to object to or restrict certain processing, and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law and may need to verify your identity first.

12. Children's privacy

The Service is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Third-party links

The Service may contain links to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies.

14. Changes to this Policy

We may update this Policy from time to time. When we make material changes we will notify you by email or through a notice on the Service before they take effect. The date at the top of this Policy shows when it was last updated.

15. Contact

For privacy questions or to exercise your rights, contact our privacy team at [email protected]. We aim to respond within 72 hours.