Legal
Privacy Policy
Last updated: January 1, 2026 · Effective: January 1, 2026
1. Information We Collect
We collect information you provide directly: name, email address, payment information (processed securely by Stripe/Cryptomus, not stored by us), and usage preferences. We also automatically collect: IP address (for fraud prevention), browser type, pages visited, and proxy usage metrics (bandwidth, request counts — not content).
2. How We Use Your Information
We use your information to: provide and improve our services, process payments, send transactional emails (order confirmations, invoices, email verification), respond to support requests, detect and prevent fraud, and comply with legal obligations. We do not sell your personal information to third parties.
3. Proxy Traffic
We do not log, inspect, or store the content of traffic routed through our proxies. We only collect aggregate metrics (bytes transferred, connection counts) for billing and abuse prevention purposes. Your browsing activity through our proxies is not monitored.
4. Cookies
We use essential cookies for authentication and session management. We use analytics cookies (anonymized) to understand how users navigate our platform. We do not use advertising or tracking cookies. You can disable non-essential cookies in your browser settings.
5. Data Sharing
We share data only with: payment processors (Stripe, Cryptomus) to process transactions; email service providers to send transactional emails; and law enforcement when required by applicable law. All third-party providers are bound by data processing agreements.
6. Data Retention
We retain your account data for as long as your account is active. After account deletion, we retain minimal data required for legal compliance for up to 90 days, then permanently delete it. Billing records are retained for 7 years as required by tax law.
7. Your Rights
Depending on your location, you may have the right to: access your personal data, correct inaccurate data, request deletion of your data (right to be forgotten), object to processing, and data portability. To exercise these rights, contact us at privacy@proxya.co.
8. Security
We implement industry-standard security measures: TLS encryption for data in transit, bcrypt password hashing, short-lived JWT tokens with rotation, API key encryption at rest, and regular security audits. No system is 100% secure — we will notify you promptly of any breach.
9. Children's Privacy
Our services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.
10. International Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our platform at least 14 days before taking effect.
12. Contact
For privacy-related questions or to exercise your rights, contact our Data Protection team at privacy@proxya.co. We aim to respond within 72 hours.
Questions about our Privacy Policy? Contact us or email privacy@proxya.co