This policy explains what personal data Proxy Portal collects when you use proxyportal.io, the merchant panel, merchants' proxy stores, our API and our proxies, and what we do with it. The short version: we collect what we need to run your account and bill your traffic, we never log what you browse through a proxy, and we never sell your data.

1. Who we are

Proxy Portal (proxyportal.io) runs a mobile and ISP proxy network and a platform on which resellers (“merchants”) run their own branded proxy stores. In this policy “we” and “us” means Proxy Portal.

We are the controller of the data of merchants and of customers who buy on proxyportal.io directly. When you buy from a merchant's store, that merchant is the controller of your customer relationship and we process your data on their behalf to run the store and the proxies. Each merchant may publish its own privacy policy on its store.

2. Data we collect

  • Account data: email address, name (if given), a hashed password, and whether your email is verified. If you sign in with Google we receive your name, email address and Google account ID; we never see your Google password.
  • Merchant data: store name, brand settings, custom domains, store pages, payout details and the SMTP settings you enter.
  • Billing data: top-ups, balance history, purchases, payouts and the crypto network you paid on. Payments go through our crypto payment gateway; we do not collect card or bank details.
  • Usage data: how many bytes each proxy account sends and receives (per hour), proxy credentials, ports and the countries you choose. We do not record the contents of your traffic or the pages you visit through a proxy.
  • Technical data: IP address, browser type and request logs when you use our websites and API, kept to secure the service and to stop abuse.
  • Support data: what you write in support tickets and emails to us.
  • Cookies and analytics: a login cookie keeps you signed in. On proxyportal.io and the merchant panel we use Google Tag Manager and Google Analytics to understand how the sites are used. Merchants' stores do not load our analytics.

3. How we use it

  • To create and run your account, your proxies and (for merchants) your store.
  • To meter traffic, charge your balance, credit merchant earnings and pay payouts.
  • To send emails you need: verification, password resets, receipts and support replies.
  • To keep the network safe: find and stop fraud, abuse and breaches of our Terms.
  • To improve the sites and the service, using aggregated analytics.
  • To meet legal duties, such as keeping financial records or answering lawful requests.

Where the law asks for a legal basis, we rely on performing our contract with you, our legitimate interests in running a secure service, your consent (for analytics cookies where required), and legal obligations.

4. Who we share it with

We do not sell your personal data. We share it only with:

  • The merchant whose store you use, who can see your account, balance, proxies and usage, and answers your tickets.
  • Service providers that help us run the platform: hosting and DNS (Cloudflare), email delivery, the crypto payment gateway, upstream network and ISP proxy suppliers, IP location lookups (ipinfo.io) and Google (sign-in and analytics). They may only use the data to provide their service to us.
  • Authorities, when the law requires it or to protect our users, our network or the public from serious harm.
  • A buyer or successor, if Proxy Portal is merged or sold, under the same protections as this policy.

Note that crypto payments are recorded on a public blockchain, which is outside our control.

5. How long we keep it

We keep account data while your account is open. When you close it we delete or anonymise your personal data within 90 days, except billing records we must keep for tax and accounting (usually several years) and data we need to settle a dispute or investigate abuse. Hourly usage totals and request logs are kept only as long as we need them for billing, support and security.

6. Security

Passwords are stored hashed, login sessions are stored as hashes, API keys are hashed or encrypted, and all our websites use HTTPS. Access to production systems is limited to the people who need it. No system is perfectly secure, so please use a strong, unique password and keep your proxy credentials and API keys private.

7. Your rights

Depending on where you live (for example under the GDPR or the CCPA) you may have the right to access, correct, delete or export your data, to object to or restrict some uses, and to withdraw consent. You can edit most details in your account. For anything else, email [email protected] from the address on your account; we answer within 30 days. If you bought from a merchant's store, you may also contact that merchant. You can complain to your local data-protection authority.

8. International transfers

Our servers and providers are in several countries, so your data may be processed outside the country where you live. Where required, we use safeguards such as standard contractual clauses.

9. Children

Our service is not for anyone under 18. We do not knowingly collect data from children; if you believe a child has given us data, contact us and we will delete it.

10. Changes and contact

We may update this policy. We change the date at the top when we do, and email account holders about significant changes. Questions or requests: [email protected].

See also our Terms and Conditions.