Privacy Policy

When you create an account we collect your name, email, company, billing details, optional VAT number, and the information you choose to add to your profile. We also store authentication events, API key metadata, and support correspondence.

• To provide the service and bill for it
• To secure accounts (2FA, login alerts, abuse detection)
• To communicate about the product, incidents and legal notices
• To meet legal obligations (tax, sanctions, law-enforcement process)

Connection metadata — timestamp, source, destination host, bytes and status — is processed to route requests, bill accurately and investigate abuse. We do not log request bodies, response bodies or full URLs. Retention is 30 days unless a longer period is required for an active investigation or legal hold.

A Data Processing Agreement is available from the dashboard and is the governing processor terms for this traffic.

Payment processors (for card and PayPal charges), cloud infrastructure providers in the UK/EU, email delivery, and — where required — competent authorities under valid legal process. We do not sell personal data. Sub-processors are listed in the DPA and we give notice of material changes.

Account data is kept for the life of the account and for seven years afterwards where tax or contract records require it. Support tickets are retained for three years. Traffic metadata is deleted after 30 days on a rolling basis.

Depending on where you live you may have rights to access, correct, delete, restrict or port your data, and to object to certain processing. Email privacy@wproxy.io. UK and EEA residents may also complain to the ICO or their local supervisory authority.

Primary processing is in the United Kingdom and European Economic Area. Where a transfer outside those regions is required, we use the UK International Data Transfer Addendum and EU Standard Contractual Clauses.