CIVPN
Privacy Policy

This Privacy Policy (the 'Policy') applies to the website, clients (Windows, macOS, Android, iOS, Linux), and related services operated by CIVPN ('we', 'us', or the 'Service').

By visiting this website, downloading the client, or using the Service in any way, you acknowledge that you have read and understood this Policy. If you do not agree, please stop using the Service.

'Personal Information' refers to data that can identify an individual either alone or in combination with other data. This Policy explains our processing methods and is not an exhaustive list of every possible scenario.

We may collect the following categories of information:

• Account Info:Your email address, hashed password, and referral code (if any).
• Usage Data:Plan purchases, data usage summaries, and account status changes. We do not log the specific websites or content you access via VPN.
• Device & Access Info:Client version, OS type/version, device type, browser type, timestamps, and referral pages.
• Payment Summaries:Order status, payment channel, and amount. Full payment details are handled by third-party providers; we do not store them.
• Support Content:Inquiries or complaints submitted via our ticket system and our replies.

We use your information to:

• Provide & Maintain Service:Handle registration, manage data allowances, and process payments.
• Account Security:Detect unusual logins and protect against unauthorized access.
• Customer Support:Respond to your tickets and email inquiries.
• Service Improvement:Analyze usage patterns to optimize performance, node stability, and UX.
• Legal Compliance:Retain or disclose info as required by legal obligations.
• Communication:Send important notices about service changes or policy updates (no unsolicited marketing without consent).

If we plan to use your info for other purposes, we will notify you and obtain consent as required.

We do not sell your personal information.We may share minimal data with:

• Service Partners:Audited providers for payment, hosting, and security. They are contractually bound to use data only for our Service.
• Legal Requirements:When required by law, court order, or government authority. We will notify you in advance when possible.
• Business Changes:In the event of a merger or acquisition, your info may be transferred to the successor under the same policy terms.
• Protection:To investigate or prevent fraud, security threats, or illegal activities.

Otherwise, we do not share your info without your explicit consent.

We use industry-standard measures to protect your info, including:

• TLS/HTTPS encryption for data in transit;
• One-way hashing for passwords (we cannot see your plain-text password);
• Strict internal access controls based on the principle of least privilege;
• Regular security assessments and vulnerability scans.

We use cookies and browser local storage (localStorage/sessionStorage) for:

• Session Management:Keeping you logged in across visits.
• Preferences:Remembering your language and UI choices.
• Analytics:Tracking page views and usage paths for service improvement (not shared with ad platforms).

You can manage or delete cookies through your browser settings, but disabling them may prevent some features (like staying logged in) from working correctly.

We do not guarantee that no third-party cookies will be used, but any third-party cookies we introduce are limited to the purposes stated above and are subject to the third party's own privacy policy.

We only retain your personal information for as long as necessary to fulfill the purposes described in this Policy, depending on the following factors:

• Business Necessity:Data will be retained as long as your account is active or there are unresolved matters.
• Legal Obligations:Applicable laws, regulations, or regulatory requirements may force us to retain certain categories of data for a specific period.
• Dispute Resolution:Data may be retained for as long as necessary to handle potential disputes or enforce agreements.

When data is no longer needed, we will securely delete or anonymize it.We do not make a fixed commitment to specific retention periods; the actual duration is determined by business purposes and legal requirements.

Depending on the privacy laws in your jurisdiction, you may have the following rights:

• Right to Access:Request a copy of the personal information we hold about you.
• Right to Correction:Request that we correct any inaccurate or incomplete personal information.
• Right to Deletion:Request the deletion of your personal information where permitted by law.
• Right to Restrict Processing:Request that we limit how we process your information in certain circumstances.
• Right to Data Portability:Receive your data in a structured, machine-readable format where technically feasible.

The Service is not intended for children under 18, and we do not knowingly collect, store, or use personal info from children.

If you are a parent or guardian and discover that your child has provided us with personal info without your consent, please contact us immediately. we will delete the info upon verification.

If we discover we have accidentally collected info from a child, we will take reasonable steps to delete it as soon as possible.

The Service may contain links to third-party websites or services (e.g., payment platforms, support tools). These third parties have independent privacy policies, and we are not responsible for their data collection or processing practices.

We recommend carefully reading the privacy policy of any third-party service before visiting or using it.

Links to or integrations with third-party services do not constitute our endorsement or recommendation of that third party.

We reserve the right to revise this Privacy Policy at any time without prior notice.We will update the 'Last Updated' date at the top of this page after any changes. Major changes will be highlighted on our homepage or login screen.

Continued use of the Service after changes take effect constitutes your acceptance of the updated Policy. Please check this page regularly for the latest version.

Historical versions of this Policy are available upon request (see section 12).

If you have any questions, comments, or wish to exercise your data rights, please reach out to us via: