1. Account information
We store your name, email address, verification status, and a salted password hash. We store hashed session and recovery tokens to authenticate you and protect account recovery. We do not store your password in plain text.
2. Billing information
Stripe processes payments. Our backend stores Stripe customer and subscription identifiers, subscription status, paid-period dates, failure state, and invoice references. Card numbers and card security codes are entered with Stripe and are not stored in this application. Stripe’s own privacy policy applies to its processing.
3. Devices and connection authorization
We store registered device names, platforms, installation identifiers, registration times, and the last successful gateway authorization time. Trusted VPN gateways may report aggregate upload/download byte counters, daily usage totals, device identifiers, and collection times for support and capacity planning. We do not collect destination websites, DNS queries, browsing history, packet contents, or application contents through this traffic-reporting API. Your reusable activation code is encrypted at rest and matched using a one-way hash. You can reset it in your portal; resetting deactivates all registered devices and revokes their credentials. Short-lived VPN credentials are stored as hashes with their device, location, and expiry so we can enforce the three-device limit and revoke access. This application does not implement browsing-history or traffic-content storage. VPN gateways keep restricted operational diagnostics, which may include source IP addresses and connection timestamps, in daily rotated logs retained for seven rotations. Aggregate per-device byte counters are kept for account support and capacity planning. We do not describe this as a network-wide no-logs service.
4. Email and support
ZeptoMail delivers verification, password recovery, billing, and account notices. It receives the email address and message content required for delivery. Support requests store the subject, message, status, and account reference. Never include passwords or full payment details in a support request. Pending transactional email content is held in a local outbox for retry and cleared after successful delivery.
5. Cookies and service protection
The website uses an essential, HttpOnly account-session cookie. It is required for signed-in functionality. This build contains no advertising trackers or third-party analytics. Security rate limits use short-lived request identifiers and counters; application request bodies and secret tokens are not intentionally logged. Infrastructure operators must configure access-log retention separately.
6. Retention and choices
Expired sessions, recovery tokens, authorization codes, and VPN credentials are routinely removed. Account and support data remain while needed to operate and support your account; billing records may need to be retained to satisfy legal obligations. You can remove devices and revoke sessions in account settings. To request access, correction, export, or deletion, submit a privacy request through account support. Requests may require identity verification.
7. Sharing and security
We share service data with payment and transactional email providers as needed to operate the service, and where legally required. We do not include advertising integrations or sell personal information through this application. We use password hashing, token hashing, session controls, and access checks. Live operation requires HTTPS, access controls, backups, and a reviewed infrastructure configuration. No system can guarantee absolute security.
8. Contact and updates
Tech Guys 2 Go, LLC is responsible for the service. Submit privacy questions through account support or [email protected]. This policy will be updated to reflect the actual VPN infrastructure, retention periods, operational contact details, and jurisdiction-specific obligations before public launch.