Privacy Policy

1. Who We Are

nuVpn is the controller of the personal data described in this Policy. For any privacy question, or to exercise your rights, reach us through our Contact page.

2. Data We Collect

Account data: your email address and the authentication details needed to create and secure your account.

Billing data: your subscription plan, transaction records, and a payment token with the last four digits of your card — full card numbers are never stored on our servers.

Aggregate usage data: the total volume of traffic (in gigabytes) used per billing period, for quota and billing only.

Technical data: minimal information such as app version and connection status needed to operate and support the Service.

3. What We Do Not Collect (No-Logs)

We do not log, monitor, inspect or store the websites you visit, the content of your DNS queries, the applications you use, your browsing history or the content of your traffic.

Your VPN server is yours. Traffic content never touches our analytics and is never sold or shared.

4. How We Use Data

To create and operate your account and provision your server.

To process payments and manage subscriptions, renewals and quota billing.

To provide customer support in your language.

To secure the Service, prevent abuse and fraud, and comply with legal obligations.

5. Legal Bases for Processing (GDPR)

Where the EU/UK General Data Protection Regulation applies, we process personal data on the following bases: performance of our contract with you (providing the Service), our legitimate interests (security and abuse prevention), compliance with legal obligations, and your consent where required (for example, for non-essential cookies).

6. Payments

Payments are processed by third-party providers (Stripe, PayPal and Verifone). These providers handle your card data under their own privacy policies and industry security standards. We receive only a token and the limited metadata needed to manage your subscription.

7. Cookies and Similar Technologies

Our website uses strictly necessary cookies to remember your language and preferences and to keep the site working. These do not require consent.

We ask for your consent before using any non-essential cookies. You can accept or reject them via the cookie banner and change your choice at any time.

8. Sharing and Third Parties

We share personal data only with service providers who help us operate the Service (such as payment processors, cloud infrastructure and email delivery), under contracts that require them to protect your data.

We may disclose data where required by a valid legal request; but because we do not keep browsing logs, we cannot provide activity data we do not hold.

9. Data Retention

We keep account and billing data for as long as your account is active, and thereafter only as required to meet legal, tax and accounting obligations. Aggregate usage counters are retained only as long as needed for billing and are then minimised or deleted.

10. International Transfers

We operate globally and may process data in countries other than your own. Where required, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect international transfers.

11. Your Rights

Subject to applicable law, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, reach us through our Contact page. You also have the right to lodge a complaint with your local data-protection authority.

12. Data Security

We use encryption in transit, access controls and other technical and organisational measures to protect personal data. No system is perfectly secure, but we work continuously to safeguard your information.

13. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "last updated" date and, for material changes, provide additional notice where appropriate.

15. Contact

For privacy questions or requests, reach us through our Contact page.