Privacy Policy
Last updated: April 4, 2026
Strict No-Logs Policy
Vexo VPN operates under a strict no-logs policy. We do not collect, store, or monitor any of the following:
- Browsing history or website destinations
- DNS queries
- IP addresses assigned to you
- Connection timestamps or session durations
- Traffic data or content of your communications
- Bandwidth usage per session
We have no way to associate any specific activity with any specific user. This policy applies to all users on both Free and Premium plans.
What Data We Collect
We collect only the minimum information necessary to operate the service:
- Email address — used for account creation, login, and essential service communications.
- Payment information — processed securely by Stripe. We never store your full card number or CVV. We retain only a transaction ID and subscription status.
- Device identifiers — an anonymous device token used solely for push notifications and subscription validation via RevenueCat. This cannot be used to identify you or your activity.
We do not collect any browsing data, DNS queries, traffic content, or connection logs.
Data Encryption
All VPN traffic is encrypted using the WireGuard protocol with state-of-the-art cryptographic primitives including ChaCha20 for symmetric encryption, Poly1305 for authentication, Curve25519 for key exchange, and BLAKE2s for hashing. All communications between our apps and backend servers use TLS 1.3. User data stored on our infrastructure is encrypted at rest.
Third-Party Services
We integrate with the following third-party services:
- Stripe — payment processing for Premium subscriptions. Subject to Stripe's Privacy Policy.
- RevenueCat — in-app subscription management and receipt validation. Subject to RevenueCat's Privacy Policy.
These services receive only the data strictly necessary for payment processing and subscription management. They do not have access to your VPN traffic or browsing activity.
Data Retention
Account data (email, subscription status) is retained for the duration of your account. When you delete your account, all associated data is permanently removed within 30 days. Because we do not log VPN activity, there is no browsing data to retain or delete.
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond within 30 days. You may also export your account data or close your account at any time from within the app.
Contact
If you have any questions about this Privacy Policy, contact us at privacy@vexo.eynullabeyli.com.