Privacy Policy

1. What we collect

We collect only what the service needs to work.

• Account: email, display name, plus the optional company and phone you provide
• Authentication: login passwords are stored as one-way hashes we cannot reverse; Google sign-in stores the account identifier, email and account name Google returns, where the account name becomes your display name and can be changed in the console at any time
• Transactions: recharges, traffic package orders and balance history
• Usage: traffic consumption and request counts reported by business nodes
• Risk control: registration IP, used only to detect bulk-registration abuse

2. How we use it

To provision and run the service, bill and reconcile accounts, detect and block abuse, and help investigate issues when you open a ticket.

We only email you about balance, billing or product topics when the matching preference is on, and every marketing email carries a one-click unsubscribe link.

3. What we don't do

• We do not sell your personal information
• We do not log the destinations or content you access through the proxy — metering stops at byte counts and request counts
• We do not use your personal information for purposes unrelated to this service, and we do not disclose it to third parties other than the necessary service providers listed in section 4 and cases the law requires

4. How we share

To deliver the service, the following processors handle the relevant information, limited to what each function requires:

• Authentication: when you choose Google sign-in, Google performs the verification and returns your account identifier, email and account name to us
• Email delivery: verification, billing and notification emails are delivered through a third-party email provider, which processes your email address and the message content
• Payments: when you top up, the order number and amount are submitted to the payment channel you select for collection and reconciliation. We never handle your card number or payment account password
• Bot detection: when the captcha is enabled, a third-party verification service processes the device and network information the check requires

5. Storage and security

Data is stored on servers in mainland China. Login passwords are stored with one-way bcrypt hashing and cannot be reversed by us.

The proxy access password is a connection credential separate from your login password and cannot be used to sign in to this site. Because the access gateway must verify it on every proxy connection, it is stored in a reversible form and distributed to the gateway for authentication and quota enforcement; the console also displays your current credential directly. Access to this credential is limited to those necessary system components and authorized operations staff. You can reset it in the console at any time, which invalidates the previous credential immediately.

After account closure, transaction and accounting records are retained for the period the law requires; other personally identifiable data is deleted or anonymized.

6. Cookies

We use strictly necessary cookies for your login session and language preference. We do not use them for cross-site advertising.

7. Your rights

You can view and change your profile, notification preferences and access credentials in the console. To export or delete your data, contact us by ticket or email.

Contact

Privacy questions: support@gaofengxt.cn.