Privacy Policy

Last updated: February 25, 2026

1. Introduction

XEYVPN (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our VPN and script licensing services.

2. Information We Collect

Account Information

  • Name and email address during registration
  • Payment information (processed by third-party providers)
  • VPS IP address (for script license binding)

Technical Information

  • Server connection timestamps (for session management only)
  • Bandwidth usage statistics (aggregate, not per-session)
  • Device type and operating system (for compatibility)

What We Do NOT Collect

  • Browsing history or website visits
  • DNS queries or traffic content
  • Original IP address after connection
  • Downloaded or uploaded file details

3. Zero-Log VPN Policy

XEYVPN maintains a strict zero-log policy for VPN connections. We do not monitor, record, or store:

  • Your browsing activity while connected to our VPN
  • Connection logs linking your identity to your activity
  • Traffic data, content of communications, or DNS queries

We retain only the minimum data necessary for account management and service delivery.

4. How We Use Your Information

We use collected information only for:

  • Account creation and authentication
  • Service delivery and VPN account provisioning
  • Script license validation and IP binding
  • Billing and payment processing
  • Customer support and communication
  • Service improvement and troubleshooting

5. Data Security

We implement robust security measures to protect your data:

  • AES-256 encryption for all VPN connections
  • TLS 1.3 encryption for website and API communication
  • Hashed password storage (bcrypt)
  • Regular security audits and updates
  • Access controls limiting employee data access

6. Data Sharing

We do not sell, rent, or share your personal information with third parties except:

  • Payment processors: To process your transactions securely
  • Legal requirements: When required by law or valid legal process
  • Service providers: Hosting infrastructure (with data processing agreements)

7. Cookies

Our website uses essential cookies for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics that track individual users.

8. Data Retention

  • Account data: Retained while your account is active, deleted within 30 days of account closure
  • Payment records: Retained for 5 years as required by tax regulations
  • Support tickets: Retained for 1 year after resolution
  • VPN connection data: Not collected (zero-log policy)

9. Your Rights

You have the right to:

  • Access and download your personal data
  • Correct inaccurate information
  • Request deletion of your account and data
  • Object to data processing for marketing purposes

To exercise these rights, contact us through the dashboard or email.

10. Changes to This Policy

We may update this Privacy Policy periodically. The “Last updated” date at the top indicates the latest revision. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related inquiries: