Privacy Policy
Introduction
IPFB LLC and its subsidiaries and affiliates (“we”, “our”, “us”) are committed to protecting and respecting your privacy. For the purpose of the General Data Protection Regulation (the “GDPR”), IPFB LLC Subsidiaries are the data controller.
This policy sets out the basis on which we will process any personal data or usage information we collect from you, or that you provide to us, in connection with your use of the different IPFB LLC websites that link to this policy (the “Websites”). Please read this policy carefully so that you understand your rights in relation to your personal data, and how we will collect, use and process your personal data. If you do not agree with this Privacy Policy in general or any part of it, you should not access the Website in question.
What types of information do we collect and how we use it?
Information you give us
You may provide information by contacting us via our Websites, email, telephone or by creating an account in our customer portal. As it is in our legitimate interests to be responsive to you and to ensure the proper functioning of our products and organization, we will use your information to:
- communicate with you via email or telephone;
- administer and provide services and customer support to our customers; or
- enforce our Website terms and conditions.
Technical usage information
When you visit the Website, we collect the information sent to us by your computer, mobile phone, or other access device. This information includes:
- your IP address;
- device information including, but not limited to, identifier, name, and type of operating system;
- mobile network information;
- standard web information, such as your browser type and the pages you access on our Website.
We collect this information in order to:
- personalize our Website to ensure content from the Website is presented in the most effective manner for you and your device;
- monitor and analyze trends, usage and activity in connection with our Website and services to improve the Website;
- administer the Website and for internal operations, in order to conduct troubleshooting, data analysis, testing, research, statistical and survey analysis;
- keep the Website safe and secure;
- measure and understand the effectiveness of the content we serve to you and others.
Do we use cookies?
We use cookies to collect information about your browsing activities over time and across different portions of the Website. They allow us to recognize and count the number of users and to see how users move around the Website when they are using it. This helps us to improve the services we provide to you and the way the Website works. You can find more information about cookies and how to manage them at http://www.allaboutcookies.org/
我们使用第三方网络分析服务 Yandex Metrica 来了解访问者如何与本网站互动。在不含敏感信息的页面上,这可能包括匿名会话回放(Webvisor);显示您的 VPN 密钥和配置的页面已排除在此类记录之外。此外,我们还收集自有的第一方产品事件(例如页面浏览、账户注册和支付流程步骤),用于运营、保护和改进服务。这些信息以汇总形式使用,不会在提供服务所需范围之外识别个别访问者,也不会出于广告目的出售或与第三方共享。您可以在此选择退出 Yandex Metrica 跟踪: https://yandex.com/support/metrica/general/opt-out.html
Android 分析与广告归因
我们的 Android 应用使用 Google Analytics for Firebase 衡量安装、应用使用、试用和购买,并识别带来注册的广告。Google 可能收到应用实例标识符和广告标识符(如可用)、设备和应用信息、大致位置,以及包含购买金额和币种的事件。我们将 Google Play 安装来源、广告系列标签和点击标识符与您的账户一起保存。Google Ads 可能使用这些事件进行转化报告和广告效果衡量。这些数据不包括 VPN 流量内容、VPN 配置或账户登录凭据。您可以在 Android 隐私设置中限制广告标识符。如需访问或删除数据,请联系 [email protected]。
推荐链接访问
当您打开 meduzavpn.com/r/… 这样的推荐链接时,网站会向我们报告此次访问:邀请码(如链接中带有优惠码,也包括优惠码)、您的 IP 地址、根据 User-Agent 标头识别的平台和设备型号,以及访问时间。我们用这些信息来记入邀请:如果您随后从 App Store 或 Google Play 安装应用并在同一台设备上打开,应用在首次启动时会请求我们的服务器将其 IP 地址和平台与近期访问进行匹配。访问记录最多保留 7 天,之后即被删除;如果邀请已记入,您的账户中只会保留邀请人的代码。
Trustpilot 评价和邀请
我们自己的邀请。除 Trustpilot 自行发送的邀请外,经您明确同意,MeduzaVPN 可能会在您与服务有真实互动体验后,通过邮件或推送发送我们自己的中立邀请。该邀请仅包含 Trustpilot 公开资料页的普通链接;对于此类邀请,我们不会向 Trustpilot 传输您的邮箱、姓名或邀请标识。是否访问 Trustpilot 并发表评价,由您自行决定;访问时适用该平台的隐私政策。正面、褒贬不一和负面评价均同样受到欢迎。邀请不提供奖励。首次付款后由 Trustpilot 自行发送的邀请,见下一段说明。
评价邀请权限与服务提醒、Google 或 OpenAI 广告衡量以及网站小组件相互独立。邮件和推送默认关闭,直到您主动选择。您可在账户通知设置中撤销其中一种或两种渠道;邮件也提供退订选项。
来自 Trustpilot 的邀请。在您首次付款后,我们可能会向 Trustpilot A/S 提供您的邮箱地址、姓名和订单号,以便 Trustpilot 向您发送为 MeduzaVPN 撰写评价的邀请。所有客户在首次付款后都会收到此邀请,无论其对服务的看法如何。Trustpilot 作为独立的数据控制者,依照其自身的隐私政策处理上述数据。撰写评价并非必须。您可以通过 Trustpilot 邮件中的链接或联系我们的客服,拒绝接收此类邀请。
页脚中的 Trustpilot 评价小组件会在页脚接近屏幕时从 Trustpilot 加载。Trustpilot 会收到连接和浏览器技术数据,并可能使用 Cookie。小组件旁边的普通评价链接无需小组件也可使用。
Trustpilot 隐私政策Optional ChatGPT ad measurement
If you allow it, we share your trial start and confirmed payment details (amount and currency), linked to your ChatGPT ad click, with OpenAI. We do not send your email or contact details. Your choice does not affect registration, purchases or service.
应用内免注册 VPN 测试
我们正在为来自 App Store 和 Google Play 的 MeduzaVPN iPhone、iPad 和 Android(包括 Android TV)应用推出无需注册的短时 VPN 测试。该功能将逐步开启,可能并非在所有设备和所有国家/地区都可用。为运行测试并防止滥用,我们会处理以下数据。
我们处理的数据
安装标识符
应用安装的随机标识符,而非设备的硬件标识符。应用在检查测试是否可用时发送该标识符,我们只保存用密钥计算出的哈希值。在 iPhone 和 iPad 上,它保存在钥匙串中,重新安装应用后依然保留。
IP 地址:30 天
我们根据请求地址确定所在国家/地区和网络运营商(网络编号和名称),并限制同一网络的测试次数。我们将该地址及其用密钥计算出的哈希值保存 30 天,之后删除;网络编号和名称会保留在测试日志中。
设备验证
iPhone 和 iPad 上使用 Apple DeviceCheck,Android 上使用 Google Play Integrity,仅在您同意开始测试后进行。验证确认请求来自真实设备上的我们的应用。Apple(以及在支持的情况下 Google)会记录该设备已使用过测试。我们不保存验证令牌。
测试步骤事件
显示了哪些界面、连接情况、错误代码、耗时、网络类型、平台和应用版本,以及按类别划分的连接检查结果:国外网站、视频、社交网络、即时通讯、本地网站、速度。
我们不收集
您访问的网站的地址或名称、流量内容以及 Wi-Fi 网络名称。
保存期限
- 90 天未与账户关联的测试日志,之后删除
- 30 天IP 地址及其哈希值,之后删除
- 12 个月安装标识符的哈希值及该设备已使用过测试的标记,以确保每台设备只能测试一次,之后删除
- 账户存在期间如果您在该设备上创建或登录了账户,测试记录将与账户一起保存,并随账户一并删除
测试步骤事件也会与其他应用使用事件一起记录在我们的应用分析中。
如需访问或删除数据,请联系 [email protected]。
Sensitive Information
We ask that you not send us, and you not share, any sensitive Personal Information (e.g., government-issued or financial account numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, genetic, or biometric data, criminal background or trade union membership).
How do we share your personal data?
Provide Services and Support. We do not sell, rent or lease your personal information to others except as described in this Privacy Policy. We share your information with selected recipients. These categories of recipients include:
- IPFB LLC-affiliated companies in the United States which store your personal data, to provide for disaster recovery, as well as for the performance of any contract we enter into with you;
- IT Services providers that provide us with SaaS services, including Salesforce who we use to store our customer relationship management information.
Comply with Legal Requirements and Corporate Transactions.
IPFB LLC may disclose your Personal Information as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence, for national security and/or law enforcement purposes; (d) to enforce our terms and conditions; and (e) to allow us to pursue available remedies or limit the damages that we may sustain. Additionally, in the event of a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings), we may transfer the Personal Information we have collected to the relevant third party.
Where do we store your personal data?
IPFB LLC has operations in countries throughout the world. For users outside of the United States, the information that we collect from you will be transferred to, stored at, and processed in the United States. Your personal data may also processed by staff operating outside of your country who work for us or for one of our suppliers. Such staff are engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this policy.
IPFB LLC has implemented appropriate safeguards for transfers of personal information originating from the European Economic Area (“EEA”) to IPFB LLC affiliates and unaffiliated third parties located outside the EEA.
The security of your personal data
Unfortunately, the transmission of information via the internet or email is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your information transmitted through the Website or over email; any transmission is at your own risk. Once we have received your information, we will take appropriate technical and organizational measures to safeguard your personal data against loss, theft and unauthorized use, access or modification.
We will, from time to time, host links to and from the websites of our affiliates or third parties. If you follow a link to any of these websites, these websites will have their own privacy policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any information to those websites.
How long do we store your personal data?
We will retain your Personal Information for as long as our Customer account is active and for a set period afterwards; as needed to provide our Customer products or services; as needed for the purposes outlined in this Policy or at the time of collection; as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements; or to the extent permitted by law. In general, we will retain your Personal Information for a period of seven years after the termination of service to our Customer.
Your rights
In certain circumstances you have rights in relation to the personal data we hold about you. We set out below an outline of those rights and how to exercise those rights. Please note that we will require you to verify your identity before responding to any requests to exercise your rights. To exercise any of your rights, please email [email protected] . In your request, please make clear what Personal Information you would like to have changed, or whether you would like to have your Personal Information that you have provided to us erased from our database. Please note that for each of the rights below we may have valid legal reasons to refuse your request, in such instances we will let you know if that is the case.
- Access: You have the right to know whether we process personal data about you, and if we do, to access data we hold about you and certain information about how we use it and who we share it with.
- Correction: You have the right to require us to correct any personal data held about you that is inaccurate and have incomplete data completed.
- Erasure: You may request that we erase the personal data we hold about you in the following circumstances: where you believe it is no longer necessary for us to hold the personal data, we are processing it on the basis of your consent and you wish to withdraw your consent, we are processing your data on the basis of our legitimate interest and you object to such processing, you no longer wish us to use your data to send you marketing or you believe we are unlawfully processing your data.). Please provide as much detail as possible on your reasons for the request to assist us in determining whether you have a valid basis for erasure.
Objection to Marketing
At any time you have the right to object to our processing of data about you in order to send you marketing materials, including where we build profiles for such purposes and we will stop processing the data for that purpose.
Complaints
In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at [email protected] and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with regulatory authority in the country in which you live or work where you think we have infringed data protection laws.
Changes
We may update this policy from time to time. Any changes we will make to this policy in the future will be posted on this page. Please check back frequently to see any updates or changes to this policy.
