1. INTRODUCTION
This Privacy Policy explains how AegisVPN ("AegisVPN", "we", "us" or "our") collects, uses, shares and protects your personal information when you use our websites, applications, and services (collectively, the "Services"). By using AegisVPN, you agree to the collection and use of your information in accordance with this Privacy Policy.
We are committed to protecting your privacy and will only process your personal information in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. INFORMATION WE COLLECT
We collect the minimum amount of information necessary to provide our Services. This may include:
Account Information
- Email address, for account creation, communication and retrieving lost passwords
- Name, Telegram ID and username (if applicable)
Payment Information (for paid subscriptions)
- Payment amount, currency, and date
- Partial credit card information (last 4 digits)
- Country and billing postal code for tax purposes
- Payer email address for fraud prevention
All payments are processed through our trusted partners, as stated in our Terms of Service. These partners have access to payment data solely for processing payments and fraud prevention purposes.
Communication Data
- Email content when you contact us for support
- Device information if needed to resolve technical issues
- Limited data from live chat (OS, browser type)
Usage Data
- Information about which AegisVPN services and features you use and how
- Website access logs (browser type, OS, referring URL) to analyze trends and improve our site.
- Crash reports and diagnostics data to improve services
3. HOW WE USE YOUR INFORMATION
We use your information to:
- Create and manage your account
- Provide, maintain, and improve our Services
- Process payments and prevent fraud
- Respond to support inquiries and resolve technical issues
- Analyze usage trends and measure ad performance
- Send important account notices and marketing communications
4. INFORMATION SHARING
We do NOT sell, trade, or share your personal information with third parties except as described below:
- Trusted service providers who assist with payment processing, customer support, email delivery, analytics, and advertising. These providers are bound by strict confidentiality agreements.
- Competent authorities, if required by law or to defend our legal rights. We carefully review each request and only provide the minimum data necessary. We will only comply with requests from countries where the political regime is generally recognized as a democracy, as determined by widely accepted international standards and indices.
- Other AegisVPN group companies to conduct daily business operations and maintain our Services.
- In the event of a merger, acquisition, or asset sale, in which case the acquiring entity will be bound by this Privacy Policy.
5. VPN SERVER LOCATIONS
AegisVPN operates servers in various countries worldwide to provide our users with optimal speed and connectivity. While we strive to select locations with strong privacy protections, some of our server locations may be in countries with lower levels of democracy, as determined by widely accepted international standards and indices.
When connecting to servers in these locations, AegisVPN will display an alert to inform you of the potential risks. These risks include the increased likelihood that local governments may attempt to interfere with your internet traffic or request access to user data. AegisVPN does not advise using these locations if you are concerned about government interference or surveillance.
To minimize risk, we recommend connecting to server locations in countries with robust democratic institutions and strong privacy laws. AegisVPN does not work directly with governments in countries with lower levels of democracy and does not transfer any user data to these locations. However, AegisVPN is not responsible for any actions taken by local governments in such countries.
Please consider this information when selecting a server location. If you have any questions or concerns about the privacy implications of a specific location, please contact our support team for guidance.
6. DATA RETENTION
We retain your personal information only as long as necessary to provide our Services and fulfill our legal obligations:
- Billing information is kept for 10 years from the last payment for tax and accounting purposes.
- Marketing consent is valid for 3 years after your subscription ends or until you opt-out.
- Support ticket info is retained for 3 years after resolution, except device data needed to solve service issues (kept for 6 months maximum).
When no longer needed, data is securely deleted or anonymized.
7. YOUR PRIVACY RIGHTS
Depending on your location, you may have the right to:
- Access, correct, delete, or request a copy of your data
- Object to or restrict certain data processing
- Withdraw consent for marketing communications
- Lodge a complaint with your local data protection authority
To exercise these rights, please contact us using the methods below. We will respond to verified requests within 30 days.
8. SECURITY MEASURES
We take the security of your data very seriously and use industry-standard physical, technical, and administrative measures to protect it, including:
- Encryption of data at rest and in transit
- Firewalls, access controls, and intrusion detection systems
- Strict employee access policies and security awareness training
In the unlikely event of a data breach, we will notify affected users promptly and take immediate action to secure our systems.
9. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in countries other than your own, including the United States and the European Union. These countries may have different data protection laws.
However, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to protect your rights and freedoms. By using AegisVPN, you consent to the transfer of your data as described.
10. BUSINESS TRANSFERS
If AegisVPN is involved in a merger, acquisition, or asset sale, your personal information may be transferred to the acquiring entity. However, it will remain subject to the promises made in the Privacy Policy active at the time of transfer.
11. POLICY TOWARDS CHILDREN
AegisVPN is not intended for use by children under the age of 18. We do not knowingly collect personal information from minors. If we discover we have data from a child under 18, we will delete it immediately.
12. UPDATES TO THIS POLICY
We may update our Privacy Policy from time to time to reflect changes in our practices or services. We will notify you of material changes via email or a prominent notice on our websites prior to the change becoming effective. Your continued use of AegisVPN after the changes constitutes acceptance of the revised Privacy Policy.
13. BROWSER EXTENSION
This section describes how the AegisVPN browser extension for Chrome handles data. The extension routes browser traffic through our servers and performs no other function.
The extension processes the following data:
- Email address — used to authenticate you and to send a one-time confirmation code when you sign in from the extension. If you are already signed in on our website, the extension also reads the address from our own domain in order to offer signing in as that account; it is kept only for the current browser session and is never sent anywhere else.
- Access token — issued after sign-in and stored locally in your browser. It is sent only to our servers, to confirm your access rights.
- Account session cookie — read exclusively on our own domain, and only so that a user already signed in on our website does not have to enter a code again. The extension does not request cookies belonging to any other site.
- Hash of an installation identifier — the identifier is generated randomly inside your browser and never leaves it. Only an irreversible hash is sent to us, which is what allows guest access to be issued and abuse to be prevented.
- Extension version — used to check compatibility.
- Exit IP address — requested by the extension to confirm that the connection is genuinely established, and displayed to you. We do not store this address on our servers.
The extension does not process:
- Your browsing history or the addresses of pages you open — these are neither read nor transmitted.
- The contents of your traffic, your messages, or data you enter on websites — these are neither collected nor analysed.
- Behavioural data — the extension contains no analytics, counters or tracking systems.
Extension settings and connection state are stored locally in your browser and are not synchronised between devices. Removing the extension deletes this data with it.
How long the extension's data is kept: the hash of the installation identifier is not stored on our servers at all — guest access is granted by a self-contained ticket that expires within hours and is verified without any record of it. Of the access token we keep only an irreversible hash, until you sign out or it is revoked. Everything else — the token itself, your settings and the connection state — lives in your browser and is erased when you sign out or remove the extension.
Data processed by the extension is never sold to third parties and is never used for purposes unrelated to its core function. All requests the extension makes are addressed to our own servers.
While a connection is active, the extension changes the browser setting that controls WebRTC, so that your real address is not revealed outside the tunnel. This may prevent voice and video calls from working in the browser. The setting is restored when you disconnect.
14. CONTACT US
If you have any questions about this Privacy Policy or our data practices, please contact us at:
- Email: support@aegisvpn.cloud
- Live chat in Telegram: @AegisSupportBot