Privacy Policy

At CopVPN, protecting your privacy is central to what we do. Your browsing habits, the sites you visit and your searches are off our radar — we don’t monitor, log, or store any of it.

Diving deeper, here is what that means. We keep no connection logs: no record of your IP address, the websites you visit or what you do online. To apply the limit of 7 devices connected at once, we only keep track of which of your devices are currently connected. When it comes to payments, your full card details are handled by our payment processors, not stored by us, and we never connect your financial transactions to your online activities within CopVPN.

This policy explains what we do collect, why we collect it, how long we keep it, and the rights you have over it.

• Creating Your Account: We need your email address to set up your CopVPN account. It’s essential for signing up, signing in (we email you a one-time code; there are no passwords), and staying connected with our services. If you sign in with Apple or Google, we receive the email address that account shares with us. You can also sign an app in with a sign-in link from your CopVPN dashboard.
• Subscription Details: When you subscribe, we collect information like your email, chosen plan, subscription length, ID, payment frequency, and which features you’ve enabled. This information helps us tailor your subscription to your needs.

Making Payments

• Handling Payments: We work with trusted partners to process payments securely for any paid services. We collect necessary details like purchase date and billing information to ensure smooth transactions and prevent fraud.
• Country Information: Knowing where the purchase is made helps us calculate VAT correctly.
• Fraud Prevention: We use certain personal details to help detect and prevent payment fraud, ensuring your transactions are safe. A person reviews every fraud and refund decision; we do not make decisions about you by automated means alone.
• Payment Verification: Occasionally, we verify that your payment method is still valid to avoid service interruptions without collecting personal data beyond its validity.

Communicating with You

• Email Communications: We use your email to send updates, respond to inquiries, and occasionally share offers. Every marketing email has an unsubscribe link, and where the law requires your consent for marketing emails, we send them only if you have agreed.
• Support Inquiries: If you reach out to our customer support, we might need specific information to help resolve your issue, from payment details for verification to device and OS information.
• Optimizing Our Services: We do not track whether you open or click our emails, and we do not use your activity to build a profile of your preferences.

Enhancing Your Experience

• Using Our Services and Website: We gather data on how you use CopVPN and our website to improve functionality and user experience.
• Protecting Our Services: Like most online services, we collect essential information to safeguard against attacks and ensure our website runs smoothly.
• Connection quality data: When you use the Optimal or Stealth protocol, the app sends a report that does not include your identity after each connection attempt: which protocol and server location it tried, whether the connection succeeded, how long it took, the step where a failed attempt stopped, and your app’s platform and version. We use the IP address of that request only to look up your country and internet provider. We then discard the address and never store it. These reports carry no email address, account ID, device ID or IP address, and we keep only hourly totals per country, internet provider and protocol. We delete these totals after 90 days. We never keep individual reports. We use these totals only to choose the protocol most likely to work on your network. We never sell them or use them for advertising. If you pick a specific protocol yourself, no reports are sent.
• Cookies and Similar Technologies: Our website uses cookies for essential operations, for analytics, and for our partner (referral) program, as described under “Advertising and Analytics at CopVPN”. We do not use cookies for advertising. Essential cookies are always on because the website needs them. Analytics cookies (Google Analytics and Hotjar) are set only after you agree in our cookie banner, and you can change your choice at any time with the “Cookie settings” link at the bottom of every page. Hotjar helps us see how pages are used, such as clicks and scrolling. The referral cookie is set only when you arrive through a partner’s link.

Remember, your privacy is our top priority, and we’re here to make your CopVPN experience secure and enjoyable. We’re just an email away if you have questions or need more information.

At CopVPN, we believe in holding onto your data only as long as it’s necessary to deliver our services to you or as long as we’re legally allowed to. Here’s how we handle your data with care:

• Billing and Payments: Your payment and billing details are stored securely with us for 5 years following your last transaction, ensuring we comply with financial and legal requirements.
• Staying in Touch: We’d love to keep you updated with marketing communications for a year after your subscription ends or until you decide to opt out, giving you the control to stay connected on your terms.

When it comes time to part ways with your data, we do so responsibly. If there’s no longer a legal reason to keep your information, we’ll safely dispose of it or anonymize it beyond recognition. We use deletion methods for digital data that are designed to prevent it from being reconstructed or recovered, because your privacy is our priority.

Protecting the Children’s Data

At CopVPN, we’re committed to safeguarding the privacy of young internet users. We consciously do not collect or seek out personal information from individuals under 18. If you’re younger than 18, we respectfully ask that you refrain from providing us with any personal details.

Should we discover that we’ve inadvertently collected data from someone under the age of 18, we will act swiftly to remove such information from our systems. Protecting the privacy of our younger users is a responsibility we take seriously, ensuring a safe and secure online environment for all.

Advertising and Analytics at CopVPN

CopVPN does not currently show ads, does not sell your data, and does not share it with advertisers. If we add ads in the future, we will update this policy before any ads appear.

We use a few analytics tools to understand how our website and apps are used and to fix problems: Google Analytics and Hotjar on copvpn.com, and Google Firebase (Analytics, Crashlytics, Performance and Cloud Messaging) and OneSignal in our apps. They receive technical and usage information, such as device model, operating system, app version, pages or screens viewed and crash reports. In some of our apps, Firebase, OneSignal and our payment provider Qonversion also receive your account email address. They never receive the websites you visit while connected to CopVPN. On our website, Google Analytics and Hotjar run only after you agree in our cookie banner, and Google Analytics runs with Google Signals and ad personalization turned off.

When you arrive through a partner’s link, a referral cookie records which partner sent you, so we can credit them.

At CopVPN, our cornerstone is respecting your privacy, underscored by our No-logs Policy. That means we only collect the essential info needed to offer you top-notch services. Here’s a breakdown of how long we keep your data, tailored to its use:

• For Providing Services: We hold onto personal data needed to deliver our services to you for the duration of your use and no longer than 2 years after you’ve moved on.
• Improving Our Services: Information for enhancing our website and services, and your user experience, is kept while your account is open, and deleted or anonymized when you delete your account or after 2 years without use, whichever comes first.
• Communication and Support: Data used to communicate with you and offer support is kept for up to 2 years after your last interaction, except for device information used to resolve app issues, which we store for a maximum of 7 days.
• Social Media Interaction: If we interact with you on social media, we keep the messages you send us there for up to 2 years after our last interaction.
• Advertising: CopVPN does not currently show ads, so we do not process any data for advertising.
• Special Cases: Certain scenarios, like unresolved account issues, legal obligations, or our legitimate business interests like fraud prevention, may necessitate holding on to your data for more extended periods.

We’re committed to honoring your right to privacy. If you ask us to, we’ll delete your data, except where we’re legally required to keep it. Whether resolving account issues, complying with legal duties, or protecting our community, we only retain what’s necessary for as long as needed.

Navigating Legalities

At CopVPN, navigating through the maze of accounting, payment, and legal requirements is a part of our commitment to both compliance and your privacy. Here’s how we handle the data that these obligations entail:

• Statutory Compliance: To align with accounting, tax, and other legal mandates, we need to collect and store specific information. This information could include your email address, details about your subscription, payment-related information, and, occasionally, legal documents.
• Payment Information: Our trusted payment processors handle the heavy lifting of payment transactions and refunds, gathering standard data like transaction dates, payers’ IP addresses, and credit card details. CopVPN only processes a minimal subset (e.g., partial credit card number, payment amount, currency, and payment date) primarily for addressing payment issues and fraud prevention. Additionally, we keep the country from your sign-in, and the billing country and postal code you give our payment processor, Stripe, to calculate VAT/sales tax correctly. And if you prefer, we can keep your billing details on file for future invoices.
• Other Payment Methods: At checkout you can pay by card, Apple Pay or Google Pay. Crypto and bank wire payments go through our support team; we keep the details needed to match your payment. Crypto and bank wire payments are one-time, never renew, and are non-refundable, except for the rights of buyers in the EU and UK described in section 6 of our Refund Policy. If you buy in the App Store or Google Play, Apple or Google process the payment and we receive confirmation of your purchase, not your payment details. We use Qonversion, which manages subscriptions bought through Google Play and the App Store in our Android, iPhone, iPad and Mac App Store apps.
• Legal Grounding: We rely on legal obligations and on our legitimate interest in protecting our rights, for example when we keep records the law requires or defend against legal claims. The legal basis for each use of your data is listed below under “Legal Bases (EEA, UK and Similar Laws)”.

In essence, while we tread through the necessary legal and financial frameworks, our priority remains to protect your privacy, ensuring that we only keep what’s needed and for legitimate reasons. CopVPN is dedicated to being transparent and responsible in how we manage your data amidst these requirements.

Legal Bases (EEA, UK and Similar Laws)

We use your personal data only when the law allows it:

• To perform our contract with you: creating and running your account, passwordless sign-in, your subscription and payments, and customer support.
• To meet legal obligations: keeping accounting, tax and payment records, and answering valid legal requests.
• For our legitimate interests: preventing fraud and abuse, keeping our services secure, crash reports, app analytics (Google Firebase and OneSignal) used to understand how our apps are used and to fix problems, connection-quality totals used to keep the service working, and establishing or defending legal claims. You can object to this use at any time by emailing contact@copvpn.com.
• With your consent: analytics cookies on our website (Google Analytics and Hotjar), and marketing emails and push notifications where the law requires consent. You can withdraw your consent at any time; this does not affect processing before you withdrew it.

Where We Store and Transfer Your Data

The servers that run your account, and our database, are hosted by Hetzner in Germany, in the European Union. CopVPN, Inc. is based in the United States, and some of our service providers are in the United States, so some personal data is transferred there. When we transfer personal data from the EEA, UK or Switzerland to a country without an adequacy decision, we rely on the provider’s certification under the EU-U.S. Data Privacy Framework or on the European Commission’s Standard Contractual Clauses in its data processing terms. You can ask us about these safeguards at contact@copvpn.com.

Your US State Privacy Rights

If you live in California or another US state with a privacy law, this section applies to you. In the last 12 months we collected these categories of personal information: identifiers (email address, account ID); commercial information (plan, purchases, refunds); approximate location (the country from your sign-in, and the billing country and postal code you give our payment processor, Stripe); device and app information (device model, operating system, app version); and website and app usage data (pages or screens viewed, crash reports). We never collect the websites you visit while connected to CopVPN. We get this information from you, your devices and, if you use them, Apple, Google and our payment processors, and we use and disclose it only as described in this policy.

We do not sell your personal information or share it for cross-context behavioral advertising, and we have not done so in the last 12 months. You can ask to know what personal information we hold about you, to get a copy of it, and to correct or delete it, and we will not treat you differently for using these rights. To make a request, email contact@copvpn.com from the email address on your account; an authorized agent can make a request for you with your signed permission. We reply within 45 days. If we refuse your request, you can appeal by replying to our answer; we respond to appeals within 60 days, and if you are not satisfied you can contact your state Attorney General.

• While you’re connected, the extension sends this browser’s traffic through CopVPN’s encrypted proxy servers. It only protects the browser it’s installed in, not other apps on your device. It does not record or send your browsing history.
• While connected, this browser’s website lookups also go through CopVPN, except sites on your Bypass list, CopVPN’s own account servers and local addresses, which connect directly. To stop leaks, the extension limits WebRTC and turns off the browser’s DNS prefetching while connected, and restores them when you disconnect.
• To sign you in and manage your account, it sends us your email address, a sign-in token, and your browser’s name and version, which appear in your device list.
• It tells us when it connects and disconnects, so we can apply the limit on how many devices can be connected at once.
• Optional ad blocking, off by default, downloads a block list from us. Which sites are blocked is decided inside your browser and is never reported to us.
• It uses the browser’s proxy, privacy (WebRTC) and request-blocking features only to provide these functions. We do not sell this data or use it for advertising.

Third-Party Links

Our website might include links to sites owned by others. We want to be clear: CopVPN doesn’t have a say over or endorse the content, products, or services on these third-party sites, nor can we vouch for their accuracy. You’re doing so at your own risk when you explore these external sites through our links.

Changes to Policy and the Website

Changes to the Website itself are covered in section 4 of our Disclaimer.

If we change this Privacy Policy, we will publish the new version here and update the date at the top. If a change is material, we will also tell you by email before it takes effect.

No Warranty

To the fullest extent permitted by law, we provide our website and services “as is”. Warranties for our services are covered in section 9 of our Terms of Service.

Limitation of Liability

To the fullest extent permitted by law, CopVPN’s liability for our website and services is limited as set out in section 9 of our Terms of Service, including the exceptions listed there. Nothing in this Privacy Policy limits any right you have under data protection law.

Get in touch

CopVPN, Inc. (address below) is the controller of your personal data. We have not appointed a Data Protection Officer because the law does not require one for our processing. For questions about this policy and for every privacy request, email us at contact@copvpn.com.

CopVPN, Inc., 8 The Green, Ste A, Dover, DE 19901, United States.