This Privacy Policy explains what VaultRoute Labs (“we”, “us”) collects when you use VaultRoute at vaultroute.store, why we collect it, and the choices you have. It applies to the website, dashboard, API and support channels.
1. Data we collect
- Account data: your email address, display name, account ID, role, and the date you accepted the Terms and Acceptable Use Policy.
- Authentication data: a salted password hash and session records (session identifier, creation time, expiry, IP address and browser user-agent). We do not store your password in plain text.
- Billing data: invoices, top-up amounts, payment method category, payment references and balance history. We do not store full card numbers; card payments are handled by a payment provider.
- Order and delivery data: the country, city, quantity, timestamps and proxy credentials associated with your orders.
- Technical and security data: IP address, request timestamps, pages or API endpoints requested, error logs and rate-limit events.
- Support data: messages you send to support and the information you choose to include.
2. What we do not collect
We do not intentionally inspect the content of traffic that passes through a proxy. The proxy gateway processes connections so it can route them, but we do not build profiles of the websites you visit or the content you access. Our network partners may process technical data under their own policies; see section 5.
3. How we use data
- To create and operate your account, deliver proxies, and maintain your balance and order history.
- To authenticate you, secure the Service, prevent fraud and abuse, and enforce our Terms and Acceptable Use Policy.
- To process payments, invoices and refunds, and to comply with accounting and tax obligations.
- To provide support and respond to your requests.
- To diagnose errors, monitor reliability and improve the Service.
- To comply with legal obligations and lawful requests from competent authorities.
4. Cookies and local storage
We use an essential session cookie to keep you signed in. It is HttpOnly, SameSite=Lax, and expires when your session ends. We do not use advertising cookies or third-party analytics on the dashboard. The public site may store a small preference in your browser's session storage (for example, whether you dismissed a notice).
5. Sharing
We share data only where needed to run the Service:
- Infrastructure and payment providers: hosting, storage and payment processing vendors that help us operate the Service.
- Network partners: the upstream proxy network that supplies addresses and routes connections. They may process technical data such as connection metadata under their own policies.
- Legal and safety: competent authorities where required by law, or where necessary to investigate abuse, fraud or security incidents.
- Business transfer: a successor in a merger, acquisition or asset sale, subject to this Policy.
We do not sell your personal data.
6. Retention
We keep account, order and billing records for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and dispute-resolution obligations. Security logs are kept for a limited period and then deleted or aggregated. Proxy credentials are retained with your order history so you can retrieve them during the access window.
7. Security
We use salted scrypt password hashing, HttpOnly session cookies, access controls and encrypted transport (HTTPS) in production. No system is completely secure; you are responsible for keeping your password and access token confidential and for using a trusted device.
8. International transfers
Our infrastructure and providers may process data in countries other than yours. Where required, we use appropriate safeguards for those transfers.
9. Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete or restrict the processing of your personal data, or to object to certain processing. Contact support@vaultroute.store to make a request. We may need to verify your identity before acting. You may also have the right to complain to a local data-protection authority.
10. Children
The Service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
11. Changes
We may update this Policy. The current version is published on this page with its effective date. Material changes will be communicated through the dashboard or by email where appropriate.
12. Contact
Privacy questions: support@vaultroute.store. Abuse reports: abuse@vaultroute.store.