Privacy Policy

We collect the following types of information to provide and improve our services:

Account information: Email address and password (stored encrypted) provided during registration.

Usage data: Connection metadata for rotating residential and static ISP proxy sessions, including timestamps, bytes transferred, exit IP address, and target domain (eTLD+1 level only). Used for billing, service quality analytics, and anomaly investigation. Retained for 90 days and then automatically deleted.

Payment information: Processed through Stripe. IPDATA does not store full card numbers or bank account details — only the transaction ID and amount returned by Stripe for billing reconciliation.

Log data: Server access logs (IP, timestamp, HTTP status code) retained for up to 30 days.

We use collected information to:

- Provide, maintain, and improve the proxy service
- Process payments and manage your account balance
- Send account-related notifications (top-up confirmations, traffic alerts, etc.)
- Detect and prevent abuse, fraud, and security threats
- Comply with applicable legal and regulatory requirements

We do not sell, rent, or share your personal information with third parties, except in the following cases:

Service providers: We use trusted third-party providers such as Stripe (payment processing) and Resend (email delivery). These parties may access your information only to perform functions we delegate and are bound by strict confidentiality obligations.

Legal requirements: We may disclose information when required by law, court order, or government authority, and will notify you in advance where legally permitted.

Business transfers: In the event of a merger, acquisition, or asset sale, user information may be transferred as part of the transaction. We will notify you in advance.

We apply industry-standard technical and organizational measures to protect your data:

- Passwords are hashed using bcrypt
- All data in transit is encrypted using TLS 1.2+
- Production database access is restricted by IP whitelist
- Regular security audits and vulnerability scans

No internet transmission can be guaranteed absolutely secure. We cannot warrant the absolute security of your information.

We use the following cookies:

Essential cookies: Used to maintain login state (JWT). Expire when the session ends.

Analytics cookies: We may use anonymized page-view statistics that contain no personally identifiable information.

You may disable cookies in your browser settings, though some features may not function correctly as a result.

Under applicable laws (including GDPR), you have the following rights:

- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate personal information
- Deletion: Request deletion of your account and associated personal data
- Withdraw consent: Withdraw consent for specific data processing activities at any time

To exercise these rights, email support@ipdata.hk. We will respond within 30 business days.

- Account data: Retained while your account is active; deleted within 90 days of account closure
- Usage metadata: Automatically deleted after 90 days
- Payment records: Retained for 7 years as required by financial regulations
- Server logs: Automatically deleted after 30 days

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

We may update this Privacy Policy periodically. When we do, we will post the revised version on this page with an updated effective date. Material changes will be communicated to registered users by email. Continued use of our services following notice of changes constitutes acceptance of the updated policy.

If you have any questions or complaints about this Privacy Policy, please contact us:

Email: support@ipdata.hk
Operator: TradePath Limited