Privacy Policy

1. Who we are

Airankia operates ProxyServer.tech. For data-protection questions email info@proxyserver.tech.

2. What we collect

• Account: email (or Telegram ID if you signed up via the bot), country, timezone preference, referral code you used.
• Payments: the crypto method you chose, transaction hash / invoice id, USD equivalent. We do not see credit cards or bank details.
• Usage: the proxies you bought, their ports and expiry, bandwidth counters from the box (megabytes in/out, daily or lifetime).
• Technical: IP address and timestamp of every login and purchase; user-agent; Telegram user id if you link your Telegram account.

3. Why we collect it

• To deliver the Service (assign your proxy, bill you, honour plan expiry).
• To prevent abuse and fraud, and respond to abuse reports about traffic originating from our proxies.
• To comply with lawful orders from authorities (/law-enforcement).
• To send transactional emails (receipts, proxy ready, expiry reminders) and, if you opt-in, product updates.

4. Who we share it with

We disclose personal data only to:

• Payment processors (Cryptomus, CryptoBot, TON Connect, Telegram Stars) strictly to process your chosen payment.
• Email delivery (Resend / SMTP2GO) for transactional messages.
• Law enforcement or judicial authorities when legally compelled and after review.

We do NOT sell personal data, we do NOT share it with advertising networks, and we do NOT use it to train machine-learning models.

5. How long we keep it — retention

This is the schedule our crons and admin processes enforce:

• Access logs (IP + timestamp of logins, purchases, proxy rotations): 90 days.
• Account + purchase + transaction records: for the life of your account, plus 24 months after you close it (legal and tax obligations).
• Proxy bandwidth counters (daily totals per port): 180 days.
• Bot chat history with our AI agent: 180 days.
• Admin audit log: retained indefinitely for forensics (actor + timestamp + redacted details).

We may retain a specific record longer when legally required (e.g. preservation letter from law enforcement).

6. Your rights

You can at any time:

• Request a copy of the personal data we hold on you.
• Request correction of inaccurate data from /account.
• Request deletion of your account; we honour it within 30 days. Some records (payment proof, abuse history) may be retained where law requires.
• Withdraw consent for product-update emails (we never sent marketing without it anyway).

7. Security

Infrastructure is on Hetzner (EU) with HTTPS-only traffic. Passwords are stored as bcrypt hashes by Supabase Auth. Service-role database writes are gated by a trigger that only allows sanctioned RPCs to mutate balance. We rotate bot / API secrets when warranted.

8. International transfers

Our infrastructure is in Germany (Hetzner) and Mexico (mobile modems). If you access us from another country your data will transit those jurisdictions. By using the Service you consent to this transfer.

9. Changes

We post updates here. Material changes are announced by email or bot DM at least 7 days before taking effect.