Privacy Policy
⚠️ DRAFT template — not yet legally reviewed. If you serve EU/UK users you must
comply with GDPR/UK-GDPR; have a lawyer/DPO review before relying on this.
Operated by [COMPANY NAME], [ADDRESS]. Contact: [email protected].
What we collect
- Account: email, password (hashed), phone number.
- Identity (KYC): verification result and a reference ID. We do not store your ID documents — they are held by our verification provider ([Stripe Identity]).
- Billing: handled by [Stripe]; we store a customer/subscription reference, not card numbers.
- Service data: which IP block is assigned to you, device identifiers, connection metadata, and audit logs of account actions.
Why & legal basis
To provide the service (contract), verify identity and prevent abuse/fraud (legal obligation and legitimate interest), and comply with lawful requests.
Sharing
With processors (payment, identity, hosting, DNS/CDN) under contract, and with law enforcement where legally required. We do not sell your personal data.
Retention
We keep account and assignment records for [X years] after account closure for legal/abuse purposes, then delete or anonymize them.
Your rights
Subject to law, you may request access, correction, or deletion of your data via [email protected].