Privacy Policy

Last updated: March 2026

1. Introduction

NexTunnel ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our VPN service.

2. Information We Collect

Account Information: Email address, name, and hashed password when you register.

Payment Information: Processed securely by Stripe. We do not store your credit card details.

Usage Data: We track aggregate bandwidth consumption per account for quota enforcement. We do NOT log your browsing activity, DNS queries, or destination IP addresses.

Connection Metadata: Timestamps and connection duration for abuse prevention. This data is automatically deleted after 72 hours.

3. What We Do NOT Collect

• Browsing history or visited URLs
• DNS queries
• Content of your internet traffic
• Original IP addresses (beyond initial authentication)

4. How We Use Your Information

• To provide and maintain our VPN service
• To process payments and manage subscriptions
• To enforce traffic quotas and prevent abuse
• To send transactional emails (receipts, alerts, support)
• To improve service quality and reliability

5. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• Resend — for transactional email delivery
• Law enforcement — only when legally required, and we can only provide the limited data we store

6. Data Retention

Account data is retained while your account is active. Connection metadata is deleted after 72 hours. Payment records are retained for 7 years as required by tax regulations. You may request full account deletion at any time.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to: access your data, rectify inaccuracies, request deletion, restrict processing, data portability, and object to processing. Contact us to exercise these rights.

8. Security

We use industry-standard encryption (VLESS+Reality protocol), bcrypt password hashing, and secure infrastructure. All data in transit is encrypted.

9. Cookies

We use only essential cookies for authentication and session management. No tracking or advertising cookies are used.

10. Contact

For privacy inquiries, contact us via the support ticket system in your dashboard or email our data protection team.