Privacy Policy

Effective date: August 19, 2026

This Privacy Policy explains how PuraRoute handles personal information when you visit our website or use our console, proxy products, wallet, orders, documentation, and support services (collectively, the “Services”). The responsible PuraRoute entity is the entity identified in your order confirmation, invoice, or other commercial document.

This Policy does not govern third-party websites that you access through a proxy. You are responsible for providing any privacy notice and establishing any legal basis required for data that you collect from or about third parties through the Services.

1. Information we collect

Information you provide

• Account and profile information: email address, display name, country or region, company information, preferences, and other profile fields you choose to provide.
• Authentication and security information: password-derived authentication data, verification status, enabled login methods, two-factor authentication settings, and account-recovery information. Authentication secrets are treated as sensitive security data.
• Billing and transaction information: quote requests, orders, product selections, wallet transactions, amounts, currency, payment status, invoices, and limited payment-method metadata. Payment processors may collect full card, bank, or blockchain transaction information directly; PuraRoute does not need to store full card numbers when a processor handles them.
• Support and communications: messages, attachments, contact details, survey responses, and records of communications with us.

Information generated when you use the Services

• Proxy configuration and resource information: product type, subaccount, gateway, protocol, requested country or region, session mode and duration, traffic limits, static resource identifiers, renewal settings, and resource status.
• Connection and usage information: connection time, destination host or network address where needed to route and secure traffic, source network information, bytes transferred, request outcome, supplier, account or resource used, and daily or aggregated usage records. Proxy traffic necessarily passes through network infrastructure used to provide the Service.
• Website, device, and log information: IP address, browser and device type, operating system, language, timestamps, pages or features used, cookie or session identifiers, error data, security events, and trace identifiers used to diagnose requests.
• Approximate location: location inferred from an IP address and geographic selections you make for proxy routing. We do not request precise device GPS location for ordinary use of the Services.

Information from other sources

We may receive information from payment processors, identity providers you choose to use, network suppliers, fraud and security providers, analytics providers, referral partners, and public or lawful business sources. We combine it with other information only for the purposes described in this Policy.

2. How we use information

We use personal information to:

• create, authenticate, secure, and support accounts;
• provide quotes, process orders and wallet transactions, allocate proxy resources, generate connection details, and measure usage;
• maintain rotating or sticky sessions and apply geographic or protocol selections;
• operate, troubleshoot, monitor, and improve the website, console, network, and documentation;
• detect fraud, credential abuse, attacks, prohibited activity, and violations of our Terms of Service;
• send service messages, security alerts, transaction notices, product updates, and communications you request;
• provide customer support and resolve billing, resource, or connection issues;
• comply with law, enforce agreements, protect rights and safety, and establish or defend legal claims; and
• create aggregated or de-identified statistics that do not reasonably identify an individual.

Where applicable law requires a legal basis, we rely on performance of a contract, our legitimate interests in operating and securing the Services, compliance with legal obligations, protection of vital interests where relevant, or consent. You may withdraw consent at any time, but withdrawal does not affect earlier lawful processing.

3. Cookies and similar technologies

We use essential cookies or similar storage to maintain sessions, remember security and language choices, prevent cross-site attacks, and keep the console functioning. With any consent required by law, we may also use analytics technologies to understand website performance and feature use.

Browser controls can block or delete cookies, but disabling essential storage may prevent sign-in or other console functions. Where a cookie preference tool is provided, use it to manage non-essential technologies.

4. How we share information

We may disclose relevant information to:

• network and infrastructure suppliers that route proxy traffic, host systems, deliver content, or provide security and observability;
• payment and finance providers that process top-ups, payments, refunds, fraud checks, accounting, or tax obligations;
• identity, communications, analytics, and support providers that help operate account login, email, notifications, analytics, and customer service;
• professional advisers and auditors subject to appropriate confidentiality obligations;
• authorities or other parties when reasonably necessary to comply with law, lawful process, sanctions, or to protect rights, safety, and the integrity of the Services; and
• a successor or transaction participant in connection with a merger, financing, reorganization, sale of assets, or similar transaction, subject to appropriate safeguards.

Suppliers may process information in multiple countries. We require service providers to use information for authorized purposes and apply appropriate protections. We do not sell personal information for money. If our practices are considered a “sale” or “sharing” under a particular law, we will provide the disclosures and choices that law requires.

5. International data transfers

PuraRoute, network suppliers, and other service providers may process information outside your country. Those locations may have different data protection laws. Where required, we use recognized transfer mechanisms or other safeguards, such as contractual protections, and consider the nature of the data and the risks of the transfer.

6. Retention

We retain information only as long as reasonably necessary for the purpose collected, including to provide active Services, maintain accurate usage and transaction records, prevent fraud, resolve disputes, meet tax and accounting duties, and comply with law.

Retention varies by category. Session and diagnostic data is generally kept for a shorter period than account, invoice, wallet, order, and compliance records. Deleted accounts may remain in restricted backups or legally required records until their applicable retention period ends. We may retain aggregated or de-identified data that no longer reasonably identifies you.

7. Security

We use safeguards designed to protect information, including access controls, protected sessions, encryption in transit where supported, restricted credential access, logging controls, and security monitoring. Sensitive proxy credentials are retrieved only when needed by supported console workflows. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You also play an important role: use a unique password, enable available verification methods, restrict access to credentials, and contact support immediately if you suspect compromise.

8. Your choices and rights

Depending on your location, you may have the right to request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of certain sales, sharing, or targeted advertising; or appeal a decision about a request. You may also have the right to complain to a data protection authority.

Many profile, notification, security, and resource settings are available directly in the console. For other requests, use the support channel in the console or the contact method on your order or invoice. We may verify your identity and authority before completing a request. Rights may be limited where we must retain information for security, transactions, legal obligations, or legal claims.

You can unsubscribe from optional marketing email using the message link or your preferences. We may still send essential security, account, billing, and service notices.

9. Business customers and proxy traffic

When a business customer uses PuraRoute to process personal information under its own instructions, that customer is generally responsible for deciding why and how the information is processed, while PuraRoute and relevant suppliers may act as processors or service providers for the routing operation. The parties may enter into a separate data processing agreement where required.

Customers must not use the Services to collect personal or sensitive information without a valid legal basis, transparent notice where required, appropriate security, and respect for individual rights.

10. Children

The Services are not directed to children, and we do not knowingly collect personal information from children in connection with an account. If you believe a child has provided personal information to us, contact support so we can investigate and take appropriate action.

11. Automated security decisions

We may use automated signals to detect fraud, abuse, unusual login activity, or network threats. These signals may lead to a challenge, rate limit, payment review, or temporary restriction. Where applicable law grants a right to human review of a significant automated decision, you may request review through support.

12. Changes to this Policy

We may update this Policy to reflect changes in the Services, suppliers, law, or our practices. We will post the revised version and update the effective date. We will provide additional notice for material changes where required.

13. Contact

For privacy questions or rights requests, contact us through the support channel in the PuraRoute console or through the contact method shown on your order or invoice. Please include the account email and enough detail for us to understand the request, but do not send passwords, two-factor secrets, or proxy passwords.