Privacy Policy

1. Information We Collect

• Account data: name, email address, and authentication details (passwords are stored only as salted hashes; Google sign-in uses OAuth).
• Transaction data: wallet top-ups, invoices, order history, and amounts. Card numbers are never stored on our servers.
• Service data: the proxies and lists provisioned to your account and related metadata (type, country, expiry).
• Technical data: IP address, browser type, and basic usage logs used for security and troubleshooting.

2. How We Use Your Information

• To create and manage your account and deliver the Services.
• To process payments, prevent fraud, and maintain accurate billing records.
• To provision and support proxies through our upstream providers.
• To communicate service notices, respond to support requests, and improve the Services.
• To comply with legal obligations.

3. Payment Processing

Payments are processed by Stripe. When you pay by card, your card details are sent directly to Stripe and handled under their PCI-DSS-compliant systems. We receive only limited information such as the last four digits, card brand, and payment status.

4. How We Share Information

• Upstream proxy providers, strictly to provision and maintain the proxies you order.
• Stripe, to process payments and manage saved payment methods.
• Service providers (such as hosting and database infrastructure) acting on our behalf under appropriate confidentiality obligations.
• Authorities, where required by law or to protect rights, safety, and the integrity of the Services.
• We do not sell your personal information.

5. Data Retention

We retain account and transaction records for as long as your account is active and as needed to comply with legal, tax, and accounting requirements. When you delete your account, we remove or anonymize personal data that we are not legally required to keep.

6. Security

We use encryption in transit (TLS), hashed passwords, scoped access controls, and idempotent payment handling. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard safeguards.

7. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update your profile or delete your account from the settings page, or contact us to exercise these rights.

8. Cookies

We use strictly necessary cookies to keep you signed in and to remember preferences such as your theme. We do not use advertising cookies.

9. International Transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses for cross-border transfers.

10. Children’s Privacy

The Services are not directed to children under 18, and we do not knowingly collect their personal data.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

12. Contact

For privacy questions or requests, contact privacy@aptproxy.com or support@aptproxy.com.