Our core principle: We collect the minimum data necessary to operate the VPN service. We do not log your browsing activity, DNS queries, or the content of your traffic.
1. Data We Collect
When you use SafeConnect, we collect and store:
- Telegram user ID and display name — to identify your account.
- Connection credentials — VPN usernames, UUIDs, and tokens required for authentication.
- Aggregate bandwidth usage — total upload and download bytes per session (not per-site or per-connection).
- Subscription and payment data — plan type, payment status, expiry date, and Telegram Stars payment charge IDs.
- Last seen timestamp — when you last connected to the VPN.
2. Data We Do NOT Collect
- Browsing history or websites visited.
- DNS queries.
- Content of your internet traffic.
- Your IP address (we do not log source IPs).
- Connection timestamps beyond "last seen".
3. How We Use Your Data
Your data is used solely to:
- Provision and manage your VPN account.
- Process payments via Telegram Stars.
- Monitor aggregate bandwidth for infrastructure planning.
- Send subscription reminders (expiry notices via Telegram).
- Enforce fair usage and acceptable use policies.
4. Payment Data
Payments are processed through Telegram's Stars payment system. We store:
- Telegram payment charge ID (for refund capability).
- Payment amount and currency (XTR).
- Subscription plan purchased.
We do not have access to your Telegram Stars balance, payment methods, or financial accounts. All payment processing is handled by Telegram.
5. Data Storage and Security
All data is stored in an encrypted database on our servers. Access to the server is restricted to administrators via SSH key authentication. We do not use third-party analytics or tracking services on the VPN infrastructure itself.
6. Data Sharing
We do not sell, rent, or share your personal data with third parties. We may disclose information only if required by law, and only to the extent strictly necessary.
7. Data Retention
- Account data: Retained while your account is active. Deleted upon account removal.
- Traffic logs: Aggregate bandwidth data is retained for service monitoring. No per-site traffic data is ever created.
- Payment records: Retained for 12 months after the transaction for refund processing and accounting purposes.
8. Your Rights
You may request:
- Access — a copy of all data we hold about you.
- Deletion — removal of your account and all associated data.
- Correction — correction of inaccurate data.
Contact us via the Telegram bot to exercise any of these rights.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the Telegram bot. Continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions, contact us via the SafeConnect Telegram bot.