1. Overview & Commitment to Privacy
ProxyVault ("we", "our", "us") values your privacy and digital freedom. This Privacy Policy explains how we collect, handle, store, and protect your information when you visit proxyvaultng.com.ng, use our platform dashboard, lease static residential ISP proxies, or purchase virtual SMS OTP activations.
We adhere to the Nigeria Data Protection Regulation (NDPR), the Nigeria Data Protection Act (NDPA), and align our global privacy standards with principles established under the General Data Protection Regulation (GDPR).
🛡️ Our Zero-Traffic-Logging Guarantee
We do NOT record, inspect, monitor, or store the browsing activity, destination websites, DNS queries, payload contents, or data transmitted through your leased proxy tunnels. Proxies function as stateless transport relays.
2. Information We Collect
We only collect the minimum information necessary to deliver and secure our services:
- Account Credentials: Your email address and a cryptographically salted & hashed representation of your password (using industry-standard
bcrypt). We never have access to your plain-text password.
- Financial & Transaction Records: Transaction references, deposit amounts in Kobo/Naira, timestamp, and order status. Note: We do not collect or store credit/debit card numbers (PANs) or CVVs; all payment processing is handled securely by our PCI-DSS compliant payment partner, Korapay.
- Service Utilization Data: Your leased proxy identifiers (allocated IP, port, protocol), lease creation and expiration timestamps, replacement requests, and virtual phone number activation logs (SMS code received and service name, e.g. "WhatsApp", "Telegram").
- Customer Support Interactions: Messages and technical metadata submitted through our real-time Telegram support bot, email inquiries, or ticketing system.
3. How We Use Your Information
We use your information strictly for the following operational purposes:
- To allocate and manage your dedicated residential ISP proxies and virtual phone numbers.
- To credit your prepaid wallet balance and generate electronic payment receipts via Resend.
- To execute automated upstream liveness checks and issue instant wallet refunds when an upstream carrier revokes an IP or an SMS is unfulfilled.
- To safeguard the integrity of our network, prevent abusive automated bots, and enforce our Acceptable Use Policy.
- To provide dedicated customer support and notify you of critical service or maintenance updates.
4. Third-Party Service Providers & Sub-Processors
We partner with vetted, enterprise-grade infrastructure providers to deliver our core features. These third parties only receive the data strictly required to execute their specific sub-processing task:
- Korapay Technologies: Secure payment processing and checkout webhook notifications for Nigerian bank transfers, card payments, and pay-with-bank channels.
- Resend Inc.: Delivery of transactional emails, deposit receipts, and account authentication links.
- Upstream Proxy & Telecom Carriers: Routing upstream orders for ISP allocations (Proxy-Seller, CyberYozh) and virtual SMS gateway delivery (5SIM). No personal user data is ever transmitted to these upstream telecommunication vendors.
- MongoDB Atlas: Encrypted cloud database storage with automated backups, role-based access control, and TLS 1.3 in-transit encryption.
- Telegram Bot API: Live encrypted real-time customer support routing.
5. Cookies & Local Storage
ProxyVault uses essential HTTP session cookies and browser LocalStorage strictly to keep you securely logged into your dashboard, preserve your active session state, and remember your display preferences. We do not use third-party tracking pixels, advertising networks, or intrusive tracking cookies.
6. Data Retention & Account Deletion
- Active Accounts: We retain account and transaction records for the duration of your active platform relationship to maintain accurate wallet balances and lease histories.
- Expired Leases & OTPs: Historical proxy credentials and one-time SMS verification codes are rotated, redacted, or archived after the lease cycle completes.
- Right to Erasure ("Right to be Forgotten"): You may request full deletion of your account and associated personal data at any time by emailing our privacy team. Upon verification, your account records and hashed credentials will be permanently purged within 7 business days, except where statutory accounting compliance requires transaction record retention.
7. Information Security Measures
We implement rigorous technical and organizational safeguards to protect your data from unauthorized access, alteration, or disclosure:
- Mandatory TLS 1.3 / HTTPS encryption across all web interfaces, dashboards, and API endpoints.
- Strict multi-tenant database isolation preventing cross-account data leakage.
- Cryptographic salt-hashing for passwords using
bcrypt with high cost factors.
- Automated IP-rate-limiting and Web Application Firewall (WAF) protection against brute-force attacks.
8. Children's Privacy
Our Services are directed exclusively to business professionals, developers, and individuals who are at least 18 years of age (or the age of legal majority in their jurisdiction). We do not knowingly collect personal information from individuals under the age of 18.
9. Updates to this Policy
We may update this Privacy Policy periodically to reflect enhancements to our infrastructure, regulatory changes, or new service offerings. When material changes are made, we will update the "Last Updated" date at the top of this document and post a prominent notice on the user dashboard.
10. Contacting the Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us: