Privacy Policy

1. Overview

SotaProxy (“SotaProxy”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices you have.

This policy applies to our website at https://sotaproxy.com, our proxy services, dashboard, and any associated APIs or tools (collectively, the “Services”).

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Name and email address
• Username and hashed password
• Company or organization name (optional)
• Account preferences and settings

2.2 Usage Data

When you use our Services, we automatically collect:

• Bandwidth consumed per session and per billing period
• Request counts and error rates
• Proxy endpoint selections and geo-targeting parameters
• Dashboard access logs (timestamp, IP, browser type)
• API request metadata (not content of proxied traffic)

We do not log the content of traffic routed through our proxy network. We do not store URLs, HTTP body content, or cookies from proxied requests.

2.3 Payment Information

Payments are processed by third-party payment processors. We do not store your full card number, CVV, or bank account details. We receive a tokenized representation of your payment method and billing address for fraud prevention and invoicing.

2.4 Communications

If you contact our support team, we retain those communications to resolve your request and improve our Services.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Services
• Process payments and send billing-related communications
• Respond to your support requests and inquiries
• Monitor service performance, detect abuse, and enforce our Terms of Service
• Send transactional emails (account confirmation, password reset, billing receipts)
• Send product updates and announcements (you can opt out at any time)
• Conduct analytics to improve and develop the Services
• Comply with legal obligations

We do not use your data for advertising purposes and we do not sell your personal information to third parties.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with:

4.1 Service Processors

Trusted third-party companies that perform services on our behalf (payment processing, email delivery, infrastructure hosting, analytics). These processors access your data only as needed to perform their functions and are bound by confidentiality obligations.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety, or prevent fraud.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

5. Cookies and Tracking

We use the following categories of cookies:

• Strictly necessary cookies: Required for the website and dashboard to function (session authentication, CSRF protection).
• Analytics cookies: We use Google Analytics to understand how visitors interact with our website. Data collected is aggregated and anonymized. You can opt out using Google’s opt-out browser add-on.
• Preference cookies: Store your dashboard preferences and language selection.

You can control cookies through your browser settings. Disabling cookies may affect certain functionality of the Services.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. Specifically:

• Account data is retained for the lifetime of your account plus 90 days after deletion
• Billing records are retained for 7 years as required for tax and accounting purposes
• Usage logs (aggregated, non-content) are retained for 12 months
• Support communications are retained for 3 years

After the applicable retention period, data is securely deleted or anonymized.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data (“right to be forgotten”)
• Portability: Request your data in a structured, machine-readable format
• Restriction: Request that we restrict processing of your data
• Objection: Object to processing based on legitimate interests
• Opt-out of marketing: Unsubscribe from marketing emails at any time via the link in any email

To exercise any of these rights, contact us at support@sotaproxy.com. We will respond within 30 days.

8. Security

We implement industry-standard security measures to protect your data, including:

• TLS/HTTPS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Bcrypt hashing for passwords
• Regular security audits and vulnerability assessments
• Strict access controls and employee training

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to support@sotaproxy.com.

9. Children’s Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date, and by sending an email to registered users where appropriate. Your continued use of the Services after any change constitutes acceptance of the new policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out: