Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to operate the Service:

• Account information: Your email address, collected when you create an account via Clerk.
• Billing information: Payment details are processed and stored by Stripe. We do not store your full card number or bank details.
• Subscription data: Your subscription status, plan, and billing history.
• VPN client identifiers: A randomly generated identifier assigned to your VPN configuration. This does not contain your email or any personally identifiable information.
• Usage metadata: Bandwidth allowance and expiry time associated with your VPN client, as required to enforce your subscription limits.

2. What We Do Not Collect

We operate a strict no-logging policy with respect to your VPN activity. We do not collect, monitor, store, or share:

• Your VPN traffic or its contents;
• The websites, services, or IP addresses you connect to;
• Your originating IP address during VPN use;
• Connection timestamps or session duration;
• DNS queries made through the VPN.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account;
• Process payments and manage your subscription;
• Provision and maintain your VPN configuration;
• Respond to support requests;
• Send transactional emails (e.g. payment receipts, service notices).

We do not use your data for advertising or sell it to third parties.

4. Third-Party Services

We use the following third-party services to operate the Service. Each has its own privacy policy:

• Clerk — authentication and account management
• Stripe — payment processing and billing
• Neon — managed database hosting

These providers are contractually required to handle your data securely and only as necessary to provide their services.

5. Data Retention

We retain your account and subscription data for as long as your account is active or as required to comply with legal obligations. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes.

6. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest. Access to personal data is restricted to authorised personnel only. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your account and associated data;
• Object to or restrict certain processing of your data.

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

8. Cookies

We use a single functional cookie to store your language preference. We do not use tracking, advertising, or analytics cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. The "effective date" at the top of this page indicates when the policy was last updated.

10. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: support@sheepn.app