1. Information we collect
- Account information: Email, password stored as a salted hash, registration time and IP, and verification status.
- Payments and orders: Order IDs, plans, amounts, payment methods and payment-provider transaction IDs. We do not store full bank card details or payment passwords.
- Proxy credentials: System-generated proxy usernames, passwords and API keys.
- Usage and logs: Login and dashboard activity, traffic billing logs (time, bytes, exit country and gateway), errors and security logs.
- Device and browser information: IP address, User-Agent, language and time zone for security and unusual-login detection.
- Abuse-prevention information: Verification results from services such as Cloudflare Turnstile.
2. Content we do not actively inspect
Proxy exits provide network forwarding. We maintain service through reasonable traffic accounting and anomaly monitoring. We do not actively decrypt HTTPS traffic, store plaintext request bodies sent through the proxy, or build user-level browsing profiles for sale or targeted advertising.
3. How we use information
- To provide login, billing, proxy access, traffic statistics and customer support.
- Risk control and abuse prevention: identifying and rejecting violations of the AUP such as credential stuffing, restricted-content scraping, attacks and scanning.
- Compliance and legal obligations: responding to lawful, valid government or court requests.
- Service improvement: using aggregate statistics to improve stability, capacity and product direction, without targeting individuals.
4. How we share information
- Payment providers: Alipay, WeChat Pay and USDT collection services receive only fields needed to create and confirm payments.
- Infrastructure providers: Cloud hosting, CDN, DNS and DDoS protection providers receive the minimum information needed to process service requests.
- Abuse-prevention services: Verification services such as Cloudflare Turnstile.
- Legal requirements: Cooperation with valid legal process from an authority with jurisdiction.
We do not sell, rent or exchange personal information for third-party advertising profiles.
5. Retention
- Account and order information: retained while the account exists and for the minimum period required by law.
- Usage and billing logs: generally no longer than 90 days, with extensions for specific investigations or compliance needs.
- Security and abuse-prevention logs: may be retained longer to detect and prevent ongoing abuse.
6. Your rights
- Access and correct your account information.
- Request deletion of your account and personal data, subject to legal requirements and ongoing services or disputes.
- Withdraw consent previously given for optional uses.
- Raise privacy concerns with us or with regulators where your jurisdiction permits.
Please use the Contact page to submit requests. We will respond within a reasonable time.
7. Cookies and local storage
We use necessary cookies and local storage for login sessions, CSRF protection, verification and basic preferences. We do not embed cross-site behavioral advertising SDKs on public pages.
8. Security
We use TLS, password hashing, least-privilege access and audit logs to protect data. Internet transmission cannot be guaranteed completely secure. Use a strong password and protect your API credentials.
9. Minors
The service is not intended for users under 18. If you discover use by a minor without guardian consent, notify us through the Contact page, and we will handle it under applicable law.
10. Updates
We may update this policy periodically. Material changes will be announced here or in the dashboard. Continued use constitutes acceptance of the updated policy.
11. Contact
For privacy questions, use the channels on the Contact page.