Privanta privacy policy

1. Scope

This policy covers privanta.ai, the account area, the Privanta apps and the server infrastructure needed to operate them. Questions about personal data can be sent to privacy@privanta.ai.

2. What data is processed

Account and subscription

Email address, an internal account identifier, subscription state, access period, purchases and refunds. Privanta does not receive your full bank card number or card verification code.

Devices

The platform type, app version, a neutral device name, a random registration identifier and cryptographic public keys used to connect a device or remove it from an account. Private keys remain on the device.

One-time Test plan

To check eligibility for the one-time Test plan, the app creates a random protected installation identifier separate from sign-in credentials. The server stores its SHA-256 hash and a SHA-256 hash of the account email normalized to lower case. The check covers installations linked during purchase and use, and the account's history of activated subscriptions. These hashes can still be linked to a person; they are not used for advertising, analytics, traffic routing or tracking across other services.

App operation and diagnostics

Technical information about connection state, chosen transports and gateways, network checks, results, errors and counters, and a DNS and network connection journal. This may include domain names, network addresses and destinations, connection times and outcomes. Context may include app and operating system versions, account and device identifiers, and email and account details where included in a report. The approximate country is derived from network information, not GPS.

Sign-in protection

When a sign-in code is requested, the network address is transformed into a protected hash for rate limiting and abuse prevention. It is not used for advertising.

Automatic reports and support requests

When a VPN connection attempt fails, the app automatically creates and securely sends a diagnostic report with the maximum available technical context, including the DNS and connection journal, to investigate the failure. Automatic reports do not require a separate tap on a send button. You can also manually send a support request, a comment and a diagnostic report. Technical logs and error information are used for diagnostics and support.

3. VPN traffic and diagnostics

To provide the VPN, network nodes forward packets and process connection addresses. DNS and connection diagnostics may reveal visits to individual websites. They are used to investigate failures and restore the service. Privanta does not retain the contents of transmitted messages or files.

Diagnostic data is not used for advertising, advertising profiles or tracking across other services. Privanta does not sell personal data to advertising networks or data brokers.

4. Purposes

Data is used for authentication and account, device, subscription and entitlement management; payment confirmation; VPN connection, routing and recovery; diagnostics, support and reliability; and preventing abuse and repeat use of the one-time trial offer. The website may store technical session data and interface preferences in your browser to operate the service, not for advertising.

5. Sharing with other organisations

Privanta does not sell personal data or share it with advertising companies. Limited data may be processed by hosting, email and payment service providers to perform their corresponding tasks.

Data may also be disclosed where required by law or with your separate consent.

6. Retention and protection

The primary data storage server is located in the Netherlands, hosted by HOSTKEY B.V. Backups are also stored with HOSTKEY B.V.

Account and device data is kept while the account exists. Payment records are kept as long as settlement, refunds and legal requirements need them. Connection event history is deleted under the configured retention period, except records needed to show the device's current state.

After account deletion, data is deleted or anonymised, except information needed for settlement, refunds, security, one-time offer eligibility and legal requirements. Transmission between the app and the service is encrypted.

Confirmed records of Test use contain hashes of the email and installation identifiers, a timestamp, the offer region and a random claim-group identifier. They remain after account deletion and device removal while the one-time eligibility restriction applies and the records are needed to enforce it; deleting an account does not itself delete these records. An installation identifier is not an immutable identifier of a physical device and may change after the app is reinstalled.

7. Your rights

In your account area you can view your subscription and devices, remove a device, request a copy of your data or request account deletion. For questions about correcting, deleting or processing data, write to privacy@privanta.ai.

8. Policy changes

The current policy is published on this page with its revision date. If the data processed or its purposes change materially, an updated policy will be published before that processing starts.