Privacy Policy

ProxiedGuardians ("Company," "we," "us," or "our") is a cybersecurity platform operated by a U.S. limited liability company. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our website at proxiedguardians.com and our edge security platform (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read and understood this Policy.

1. Information We Collect

1.1 Account and Registration Data

When you create an account, we collect your name, email address, company name (optional), and a hashed password. We do not store plaintext passwords.

1.2 Billing and Payment Data

Subscription payments are processed by Paddle (paddle.com), our Merchant of Record. We do not store or process credit card numbers directly. Paddle provides us with limited transaction metadata (plan type, renewal dates, country, masked card details) for subscription management. Paddle's own privacy policy governs their data handling.

1.3 Website Security Data (Processed on Behalf of Customers)

Our edge proxy processes HTTP traffic for websites owned by our customers ("Customer Sites"). This processing may include:

• HTTP request and response headers (including cookies, User-Agent, Referer)
• HTML page content, external script URLs, and inline event handlers — processed in-memory for CSP/SRI injection
• Content Security Policy violation reports submitted by end-user browsers
• SRI hash values of third-party scripts loaded by Customer Sites

We act as a data processor for this traffic data on behalf of our customers, who are the data controllers. We do not use this data for our own marketing, advertising, or profiling purposes. Traffic content is processed in-memory and is not persistently stored beyond what is necessary for operational caching (hashes with a TTL of seconds to minutes).

1.4 Usage and Analytics Data

We collect server-side logs and anonymized usage metrics to operate and improve the Service. This may include proxy request counts, error rates, latency metrics, and feature usage patterns. We do not use client-side tracking cookies on our marketing pages beyond what is strictly necessary for session management.

1.5 Communications

When you contact us by email or through support channels, we retain the content of that communication and any associated metadata to respond to your inquiry and improve our support quality.

2. How We Use Your Information

• To provide the Service: Authenticating your account, routing configuration to your proxy nodes, billing management, and delivering platform features.
• To communicate with you: Sending transactional emails (account confirmation, password reset, billing receipts, security alerts). We do not send marketing emails without your explicit opt-in.
• To improve the Service: Analyzing aggregated, anonymized usage data to identify bugs, improve performance, and prioritize features.
• To enforce our Terms: Detecting and preventing abuse, fraud, and unauthorized access.
• To comply with legal obligations: Responding to lawful requests from public authorities, including law enforcement.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR:

• Contract performance: Processing necessary to deliver the Service you signed up for (account management, proxy operation, billing).
• Legitimate interests: Security monitoring, fraud prevention, service improvement, and communications about the Service — where our interests are not overridden by your rights.
• Legal obligation: Compliance with applicable law.
• Consent: Where we send optional marketing communications, subject to your opt-in and your right to withdraw at any time.

4. How We Share Your Information

We do not sell your personal data. We share data only in the following circumstances:

• Service Providers: We engage sub-processors (such as cloud infrastructure providers, email delivery services, and Paddle for payments) that process data on our behalf under data processing agreements with appropriate safeguards.
• Legal Requirements: We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, prevent fraud, or protect the safety of our users or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction, subject to equivalent privacy protections.
• With Your Consent: We may share your information for other purposes with your explicit consent.

5. International Data Transfers

ProxiedGuardians is operated primarily from the United States. If you are located outside the US, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate. When transferring data from the EEA, UK, or Switzerland, we rely on standard contractual clauses approved by the European Commission, or other appropriate transfer mechanisms recognized under applicable law.

6. Data Retention

• Account data: Retained for the duration of your account and for up to 90 days after account deletion, to allow for dispute resolution and regulatory compliance.
• Billing records: Retained for a minimum of 7 years as required by US tax and accounting law.
• Security traffic data (hashes, violation reports): In-memory caches with TTLs of seconds to minutes; persistent hash records retained for up to 30 days.
• Support communications: Retained for up to 3 years.
• Server logs: Retained for up to 90 days in rolling fashion.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention obligations.
• Portability: Receive your data in a structured, machine-readable format.
• Objection / Restriction: Object to or request restriction of processing based on legitimate interests.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• CCPA Rights (California Residents): The right to know what personal information is collected and how it is used; the right to delete personal information; the right to opt out of the sale of personal information (we do not sell personal information); the right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at privacy@proxiedguardians.com. We will respond within 30 days (or within the timeframe required by applicable law).

8. Security

We implement industry-standard technical and organizational measures to protect your personal data, including TLS encryption in transit, hashed passwords, role-based access controls, and infrastructure hardening. However, no transmission over the Internet or electronic storage system is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to individuals under the age of 16 (or under 18 in jurisdictions where 18 is the applicable minimum). We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it promptly.

10. Cookies and Tracking

We use only strictly necessary cookies for session management and authentication. We do not use third-party advertising cookies or tracking pixels on our platform. Our marketing website does not load any cross-site tracking scripts.

11. Links to Third-Party Sites

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (at the address associated with your account) or by posting a prominent notice on our platform at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@proxiedguardians.com
• Mailing address: ProxiedGuardians LLC, United States

If you are located in the EEA and believe your rights under applicable data protection law have not been addressed to your satisfaction, you have the right to lodge a complaint with your local supervisory authority.