Privacy Policy

1. Information we collect

• Account information you provide directly: name, email, password (hashed), billing details, and company information
• Usage data generated as you use the Service: request volume, session metadata, endpoint and pool selections, and API activity
• Device and log data: IP address, browser type, and timestamps, collected automatically for security and abuse prevention
• Cookies and similar technologies, described in the Cookies section below
• Information you provide when contacting support or responding to surveys

2. How we use your information

We use collected information to provide and improve the Service, process billing, authenticate your account, communicate service updates, detect and prevent fraud or abuse (including free-trial abuse), provide support, and comply with legal obligations. Where GDPR applies, our legal bases are: performance of our contract with you, our legitimate interests in operating and securing the Service, your consent (for optional cookies and marketing), and compliance with legal obligations.

3. Cookies

We use strictly necessary cookies to keep you signed in and to remember basic preferences — these can't be switched off without breaking core functionality. We do not currently use third-party advertising or analytics cookies. If that changes, we'll update this policy and request consent where required.

4. Data sharing and sub-processors

We do not sell your personal data. We share information only with service providers who help us operate BuyProxy — payment processing, cloud infrastructure and database hosting, email delivery, and customer support tooling — bound by contractual confidentiality and data-protection obligations, and only to the extent necessary to provide the Service. We may also disclose information if required by law or to protect the rights, property, or safety of BuyProxy, our customers, or the public.

5. International data transfers

BuyProxy operates globally, and your information may be processed in countries other than your own. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on recognized transfer mechanisms such as Standard Contractual Clauses.

6. Data retention

We retain account and usage data for as long as your account is active, and for a limited period afterward as required for legal, billing, fraud-prevention, or security purposes. You can request deletion of your account at any time as described in “Your rights” below.

7. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit, access controls, and regular review of our security practices. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

8. Your rights

Depending on your jurisdiction (including under GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us via the link below — we'll respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

9. Children's privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. For material changes, we will notify you via email or an in-product notice before they take effect.