Privacy Policy

1. Data we collect

Account data

• Email address and name (name is optional)
• A password stored only as a bcrypt hash — we never store or can read your password
• Account creation date

Billing data

• Transaction history: amounts, dates, method (card or crypto) and status
• Orders and the services they provisioned
• We do not store card numbers. Card payments are handled by Stripe; card details go directly to Stripe and never reach our servers. Crypto payments are processed by our crypto payment provider.

Service data

• Proxy credentials and service configuration (locations, rotation settings, IP allowlists)
• Aggregate bandwidth usage for billing and quota enforcement

Technical data

• Server logs: IP address, timestamp, request path and status, retained for security and debugging

What we do not do

We do not log the destination websites you access through our proxies, nor the content of that traffic. We record aggregate volume for billing, not your browsing or scraping targets. We do not sell personal data, and we do not use your data to train models.

2. Why we process it

• Contract — to create your account, provision services and take payment
• Legitimate interests — security, fraud and abuse prevention, service improvement
• Legal obligation — tax, accounting and lawful requests
• Consent — marketing email, where applicable; withdrawable at any time

3. Sharing

We share data only with processors needed to run the service:

• Payment providers (Stripe; crypto payment processors) — to take and confirm payment
• Upstream proxy providers — to provision the IPs you buy
• Infrastructure and email providers — hosting and transactional email

We may disclose data where legally required by valid legal process. We will notify you unless prohibited from doing so.

4. Retention

• Account data: for the life of the account, then up to 90 days
• Billing records: as required by tax and accounting law (typically 6–7 years)
• Server logs: typically 30 days

5. Security

Passwords are bcrypt-hashed; traffic is encrypted with TLS; API access uses signed tokens; databases are not publicly reachable; and access to production is restricted. No system is perfectly secure, but we will notify affected users and regulators of a breach as required by law.

6. Your rights

Depending on where you live (including under GDPR and CCPA/CPRA) you may have the right to: access your data; correct it; delete it; restrict or object to processing; receive it in a portable format; and opt out of sale or sharing — noting that we do not sell personal data. Exercise any of these by emailing support@froxproxy.com. We respond within 30 days and will not discriminate against you for exercising your rights.

7. International transfers

Your data may be processed in countries other than your own. Where we transfer data out of the EEA or UK we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Cookies

The marketing site uses no tracking or advertising cookies. The dashboard stores an authentication token in your browser so you stay signed in; it is strictly necessary for the service and is removed when you log out.

9. Children

The service is not directed at anyone under 18 and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

10. Changes and contact

We will post material changes here and notify you by email. For any privacy question or request, contact support@froxproxy.com.