Privacy Policy

Introduction

Velo Proxy ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our proxy services ("Service"). It also informs you about your privacy rights and how the law protects you.

Our guiding principle toward data collection is to collect only the minimal data required to operate a world-class proxy service at scale. We designed our systems so that we do not possess sensitive data about our customers. We cannot disclose, misuse, or abuse — even when compelled — data that we do not possess.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy must be read in conjunction with our Terms of Service.

01 No-Logs Pledge

We take your privacy seriously. We operate a strict zero-logs policy.

We do not store logs of your online activity while you are connected to our Services. We also never store connection logs — no logs of your IP address, outgoing proxy IP address, connection timestamp, or session duration. We cannot and will not monitor, track, or log your online activities.

Any basic connection data that may temporarily exist for operational purposes is automatically deleted within minutes of your session ending. No records of your online activity are ever kept.

02 Information We Collect

Even with a strict no-logs policy, we collect minimal information necessary to provide, maintain, and improve our Service.

2.1 Account Information

When you create an account, we collect:

• Email address – required for account creation, verification, recovery, and important service notifications
• Password – stored using industry-standard encryption hashing (bcrypt)

2.2 Service Usage Information

To provide and operate our Service, we may process:

• Bandwidth usage volumes (aggregated, not per-session)
• Device model and operating system version
• App version and language settings

This information is processed under the legal basis of performing a contract with you.

2.3 Diagnostic and Performance Data

To maintain high-quality performance, we may collect:

• Aggregated performance metrics
• Crash reports from our apps and extensions (anonymized)
• Unsuccessful connection attempts (anonymized)

This data does not contain any unique identifiers that could tie it back to you. If you experience technical issues, we may request additional device information, which we will only access if you give separate consent.

2.4 Customer Support Information

When you contact us for support, we process:

• Your email address
• The content of your communications with us (emails, chat messages, support tickets)

This information helps us respond to your questions and address support requests.

2.5 Website and Cookies

When you visit our website, we may use essential cookies for:

• Session management and authentication
• Language and region preferences
• Security (CSRF protection)

We do not use tracking cookies or third-party analytics that could compromise your privacy.

03 What We Do Not Collect — Reiterated

For absolute clarity, we DO NOT collect:

04 How We Use Your Information

We use the limited information we collect for the following purposes:

• To provide and maintain our proxy Service
• To prevent fraud and detect unauthorized account activity
• To send important service notifications (account-related, security, and policy updates)
• To provide customer support when you contact us
• To improve our Service based on aggregate, anonymized usage patterns
• To comply with legal obligations where applicable

We do not sell, rent, or share your personal information with third parties for marketing purposes.

05 Legal Basis for Processing (GDPR)

For users in the European Union and European Economic Area, we process your personal data under the following legal bases:

06 Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf:

• Cloud hosting providers – to host our infrastructure
• Customer support platforms – to manage support tickets

These providers are contractually obligated to process your data only in accordance with our instructions and applicable data protection laws.

6.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request. However, because we operate a strict no-logs policy, there is minimal data available to disclose even when legally compelled.

6.3 With Your Consent

We may share information when you explicitly authorize us to do so.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.

07 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account information – retained for the duration of your active account
• Support communications – retained for as long as necessary to resolve your issue and improve our Service

After your account is closed or deleted, we will securely delete or anonymize your personal data, except where we are required to retain it for legal compliance.

08 Data Security

We implement industry-leading security measures to protect your data:

• AES-256 encryption for all data in transit and at rest
• RAM-only servers that cannot store data persistently
• Regular security audits by independent third parties
• Bug bounty program for responsible disclosure of vulnerabilities
• Secure data centers with physical and logical access controls

While we implement these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your data.

09 International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Addenda (DPA) with our service providers
• Adequacy decisions where applicable

10 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

10.1 GDPR Rights (EU/EEA Users)

If you are in the European Union or European Economic Area, you have the rights listed under Articles 15–22 of the GDPR. We will respond to legitimate requests within 30 days.

10.2 CCPA Rights (California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell your information)
• Non-discrimination for exercising your CCPA rights

10.3 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in Section 13. We may need to verify your identity before processing your request.

11 Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately, and we will take steps to delete it.

For users in the EU, the minimum age for using our Service without parental consent is 16, in accordance with the GDPR.

12 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated "Last Updated" date
• Sending an email notification to the address associated with your account
• Displaying a notice within our application

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

14 Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of [Jurisdiction], without regard to its conflict of law provisions.