1. Information We Collect
We collect the following information when you use AuraProxies:
- Account data: Email address, display name, hashed password
- Payment data: Processed by our payment providers (Telegram and our cryptocurrency processor, Heleket). We only store the payment reference and amount.
- Usage data: Data used per plan, and the IP address and browser used when you sign in or change security settings
- Technical data: Browser type, device info, session cookies
2. How We Use Your Data
- Providing and maintaining the proxy service
- Processing payments and managing your balance
- Preventing abuse and enforcing our terms
- Sending service-related communications
- Improving the Service
3. Data Sharing
We do not sell your personal data. We may share data with:
- Payment processors (Telegram and our cryptocurrency processor, Heleket) for transaction processing
- Our upstream proxy network partner, which carries your proxy traffic
- Infrastructure providers for hosting, security checks and bot protection (Cloudflare), and sending email (Resend)
- Law enforcement when required by law
4. Data Security
We use industry-standard measures to protect your data, including encrypted passwords (bcrypt), HTTPS, secure session management, and rate limiting. However, no system is 100% secure.
5. Cookies
We use essential cookies to keep you signed in. Cloudflare may set a cookie when it checks that a visitor is not a bot. We do not use tracking or advertising cookies.
6. Your Rights
You can download a copy of your data and delete your account yourself at any time from your dashboard under Settings. You may also request access to, correction of, or deletion of your personal data by contacting us at [email protected].
7. Data Retention
We retain your data for as long as your account is active. When you delete your account, your personal data (email, name, login details, support tickets, API keys and proxy credentials) is removed immediately. Order and payment records are kept in anonymised form where the law requires us to keep financial records.
Some data is removed automatically while your account is active: IP addresses from contact-form messages after 90 days, IP addresses and browser details in our security log after 12 months, and the raw notifications we receive from payment providers after 90 days. Expired sign-in and password-reset links are deleted within a day.