This Privacy Policy explains how RiftIP (“we”, “us”) collects and uses personal data when you visit our website, create an account or use the Service. The short version: we collect what we need to run your account and bill you, we don't store the content of your traffic, and we never sell your data.
01What we collect
- Account details — your name, email address, company name and password (stored hashed).
- Billing details — billing address, tax information and payment history. Card details are handled by our payment processors; we never see or store full card numbers.
- Verification details — where a plan or target requires it, information you provide to confirm your identity or intended use.
- Usage data — aggregate counters such as bandwidth, request counts, plan and location selections, used to bill you and run the Service.
- Support conversations — messages you send us and our replies.
- Website data — device, browser and page-view information collected through cookies, as described in our Cookie Policy.
02Your proxy traffic
We do not store the content of requests or responses that pass through our network. Connection metadata needed to route traffic, enforce limits and prevent abuse (such as timestamps, exit IPs and byte counts) is deleted automatically after 24 hours. Aggregated usage totals are kept for billing.
03How we use your data
- To provide the Service — create your account, route traffic, show usage and keep your credentials working.
- To bill you and meet our tax and accounting obligations.
- To keep the network safe — detect fraud and abuse, and enforce our Acceptable Use Policy.
- To support you and tell you about changes to the Service or your plan.
- To improve the product, using aggregated and de-identified data.
- To send product news, if you've opted in. You can unsubscribe at any time.
04Legal bases
Where data protection laws such as the GDPR apply, we process personal data because it's necessary to perform our contract with you, to comply with legal obligations, for our legitimate interests in running and securing the Service (balanced against your rights), or with your consent — which you can withdraw at any time.
06International transfers
We and our providers may process data outside your country. Where we transfer personal data out of the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
07How long we keep it
Account data is kept for as long as your account is open and for a limited period afterwards to resolve disputes and meet legal obligations. Billing records are kept for as long as tax law requires. Connection metadata is deleted after 24 hours, as described above.
08Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete and correct personal information, and to not be discriminated against for exercising these rights.
To exercise any of these rights, email support@riftip.com. We'll respond within the time the law requires. You also have the right to complain to your local data protection authority.
09Security
We protect personal data with encryption in transit, access controls, least-privilege access for our team and regular review of our systems. No system is perfectly secure, so please use a strong, unique password and keep your credentials private.
10Children
The Service is not intended for anyone under 18, and we don't knowingly collect personal data from children.
11Changes to this policy
We'll post any updates on this page with a new date. If changes are significant, we'll let you know by email or in the dashboard before they take effect.
12Contact
For privacy questions or requests, contact support@riftip.com.