VPNSecure / Legal / Privacy

Privacy

InfiniteQuant Ltd · Last updated: 24 September 2026

1. Controller

Your data is controlled by InfiniteQuant Ltd (Company Registration No. 200305 B — Suite 219, Lagoon Court, Sandyport, Nassau, New Providence, The Bahamas). Contact for any privacy request: [email protected].

2. What we collect

We deliberately collect as little as possible and we do not ask for ID or any KYC documents.

• Telegram orders: your Telegram user ID, username and language, so we can deliver your eSIM, send order updates and show your order history.
• Website orders: a random order token and recovery key.
• Accounts (optional): your email address and a securely hashed password; or, if you sign in with Google, the email address Google confirms for you. We never receive your Google password.
• Order and payment data: plan purchased, price, amounts and timestamps, the payment method used, and the Platega transaction ID and status; for earlier USDT payments, the deposit address and on-chain transaction ID. For orders paid by card before 24 September 2026 we also hold the Paddle transaction ID and payment status. We never receive or store card numbers or bank credentials.
• eSIM data: the eSIM identifier (ICCID), activation status, data usage, and expiry notifications from our supplier, used to show your balance and send usage alerts.
• Store credit and referrals: credit balance and history, referral codes and referral links used.
• Support: the name (optional), email address, order reference and message you send through our contact form, and your conversations with our support assistant.
• Technical and security data: IP address, browser information and request logs, used for security, rate limiting, bot protection and fraud prevention.
• Provisioning: to create your eSIM with our supplier we generate a technical email address of the form tg<id>@… or web-<ref>@… on an internal service domain. It is not a mailbox and is not used to contact you.

3. Why we use it (legal bases)

To perform our contract with you (taking payment, provisioning, delivering and supporting your eSIM, and managing your account and store credit); for our legitimate interests (securing our services, preventing fraud and abuse, keeping records, and measuring and improving our website); to meet legal obligations (accounting, tax and sanctions compliance); and, where the law requires it, on the basis of your consent.

4. Who we share it with

We share data only with the service providers we need to run VPNSecure, each limited to its purpose:

• Our eSIM supplier (Switzerland) — to provision your eSIM and report usage.
• Platega — our payment service provider for SBP and cryptocurrency payments. It processes your payment on its own secure page and receives from us only the order reference, the amount and a pseudonymous customer identifier.
• Paddle — for orders paid by card before 24 September 2026 only: Paddle acted as Merchant of Record and holds the billing details it collected at checkout under its own privacy notice.
• Cloudflare — website delivery, security and bot protection (Cloudflare Turnstile) on our forms.
• Google — Google Sign-in, if you choose to use it, and Google Tag Manager, which loads our website tools.
• Ahrefs — Ahrefs Web Analytics, which measures page visits in aggregate to help us improve the website; it does not use advertising cookies.
• Telegram — if you order or chat with us through our Telegram bot.
• Anthropic — processes messages you send to our AI support assistant in order to generate replies.
• Amazon Web Services — delivery of support emails and storage of encrypted backups.

We may also disclose data where required by law or to protect our rights. Blockchain payment data (addresses and transaction IDs) is inherently public on the TRON network. We do not sell your data and we do not use advertising trackers.

5. International transfers

We operate from the Commonwealth of The Bahamas; our eSIM supplier is in Switzerland, and our service providers (including Platega, Cloudflare, Google, Ahrefs, Anthropic and Amazon Web Services) may process data in the United Kingdom, the European Union, the United States and other countries. Where applicable data-protection law requires it, transfers rely on adequacy decisions or appropriate safeguards such as standard contractual clauses.

6. Retention

We keep order and transaction records for as long as needed for support, accounting and legal obligations; account data until you ask us to delete your account; and security logs for a limited period. We then delete or anonymise the data.

7. Your rights

Subject to applicable law (including the EU GDPR where it applies to you), you may request access, correction, deletion, restriction, portability, or object to certain processing, and withdraw any consent you gave. Contact [email protected]. For payment data held by Paddle, you can also contact Paddle directly. Because we hold little identifying data, some requests may be limited by what we can actually link to you. You may also complain to your local data-protection authority.

8. Cookies and similar technologies

We use no advertising cookies. We use:

• Essential cookies: to keep you signed in and link guest orders to your browser, and a short-lived security cookie during Google Sign-in;
• Local storage: to remember your language and light/dark theme choice;
• Security technologies: Cloudflare and Cloudflare Turnstile to protect the site;
• Analytics: Ahrefs Web Analytics, loaded through Google Tag Manager, to count visits in aggregate.

Where the law requires your consent for any of these technologies, we will ask for it first.

9. Security

All connections to our website are encrypted (HTTPS). Passwords are stored only in salted, hashed form. We do not accept card payments, so card details never reach our servers. No system is completely secure, but we work to protect your data against loss and unauthorised access.

10. Children

The service is not intended for anyone under 18.

11. Changes

We may update this Privacy Policy from time to time. The version published here, with its update date, applies.

12. Contact

our contact form.