Privacy Policy
1. About This Policy
Hyperlink Software Technology LLC (referred to as "the Company", "we", "us" or "our") is a limited liability company registered in Wyoming, United States. We are responsible for the personal information described in this policy.
Protecting your privacy is the product, not a side effect of it. This Privacy Policy describes what information we collect when you visit this website or use our applications and services, including FaysoVPN and Fayso Private Browser (together, the "Services"), how we use it, who we share it with, and what you can ask us to do about it. This Privacy Policy forms part of our Terms of Use. If you do not agree with it, please do not use this website or the Services.
This policy does not apply to websites, products or services operated by third parties, even where we link to them or where you reach them through our Services.
FaysoVPN and Fayso Private Browser are still in development and have not been publicly released. Where this policy describes a feature that does not exist yet, we say so rather than implying it is already running.
2. Our No-Logs Commitment
We do not monitor, record or store what you do through the VPN tunnel. We do not log:
- the websites, domains or IP addresses you connect to;
- your browsing history or search activity;
- your DNS queries;
- the content of your traffic;
- the volume of data you transfer.
Our VPN servers are configured not to log connection activity, and we do not store the originating IP address of your device in our own systems. We cannot tell anyone which sites a given user visited, because we do not hold that information.
We would rather be precise than sweeping, so here is what that commitment does not cover. Our infrastructure providers process the network details needed to route a connection, which includes the IP address your device reaches us from. This website's host keeps standard access logs in the ordinary course of serving the site. We also record the connection events described in section 3, which tell us that a device connected and for how long, but never what it connected to.
3. What We Collect
Our Services are designed for anonymous use. You register an account that is not tied to your real identity, and providing an email address is optional. We collect only what the Services need in order to work, in the following categories.
Account information
A username, a password, and, if you choose to give one, an email address. We do not collect your real name, phone number, postal address, date of birth or gender at any point. Passwords are never stored in readable form; we keep only a one-way bcrypt hash.
Device information
A device identifier supplied by your operating system, and your device model name. We use these to license the software to your device, apply your plan entitlement, and support your device if something goes wrong.
Connection events
A record that a device connected to or disconnected from the service, with a timestamp. These records are linked to your device identifier, not to your activity, and they do not reveal what you connected to. We use them to operate the service, apply your plan entitlement, measure free trial usage, understand demand so that we can scale our infrastructure, and diagnose network problems that would otherwise hurt your experience.
Payment information
If you buy a subscription, payment is taken by a third-party payment provider. Your card details go directly to that provider and are never stored on our systems. We receive confirmation that a payment succeeded or failed, together with the subscription details we need to give you access and issue receipts.
Communications
Anything you send us, including messages prepared through the contact form on this website and emails you send to our support address. If you email us, we receive whatever you chose to write, including your email address, and we keep it for as long as we need it to deal with your enquiry.
Website access logs
This website uses first-party analytics to help us understand which pages are visited and the general locations from which visitors reach us. For each visit, we record the requested page, time, referring website domain, browser and device category, country, region, city, and a masked network address. We do not store the visitor's full IP address. A one-way daily visitor identifier helps us estimate unique visitors without following a visitor from one day to the next.
Website analytics records are kept separate from FaysoVPN accounts, devices and connection events. We do not use them to identify a visitor, monitor activity inside our applications, or learn what a person does through a VPN connection. We retain these analytics records for no more than 30 days. Our website host may also keep standard request logs to serve the site reliably and defend against denial-of-service attacks, vulnerability scans and similar activity.
4. What We Do Not Collect
No analytics, advertising or crash-reporting software of any kind is built into our applications, on any platform, so no third party receives information about how you use them.
Some features need to read information from your device in order to work. The clearest example is split tunnelling, where the application reads the list of applications installed on your device so that you can choose which of them bypass the VPN tunnel. That list is used on your device, is never transmitted to us, and is never stored on our servers. It is information we can see but do not take.
We do not sell, rent or trade personal information, we do not share it with advertisers or data brokers, and we do not build advertising profiles.
5. How We Use Information
We use the information described above only to:
- provide, operate, maintain and improve the Services;
- create and administer accounts, recover lost passwords and verify account actions;
- apply your plan entitlement, measure free trial usage, and process subscription payments;
- send you service messages, such as verification codes, password reset codes and important announcements about the Services;
- respond to your enquiries and provide customer support;
- keep the Services secure and detect fraud, abuse and other unlawful activity;
- analyze aggregate usage so that we can size our infrastructure and improve the website and applications;
- comply with our legal obligations and enforce our Terms of Use.
6. Legal Bases for Processing
Where the law requires us to identify a legal basis for processing personal information, we rely on the performance of our contract with you, our legitimate interests in operating and securing the Services, your consent where you have given it, and compliance with our legal obligations.
7. How We Share Information
We never sell, rent or trade your personal information. We share it only in the situations set out below, and only to the minimum extent needed.
Third-party service providers
We rely on third-party service providers to run parts of our business. Each receives only the information necessary to perform its function, and we do not authorize any of them to use your information for their own marketing. These providers fall into the following categories:
- email delivery providers, which receive your email address and the contents of account verification and password reset messages;
- DNS providers, which resolve domain names for you. These queries are encrypted and sent through the VPN tunnel, so they are not visible to your internet provider or your local network;
- cloud infrastructure and hosting providers, which run our application servers, host this website and, in the course of delivering the service, process connection details including the IP address your device reaches us from, along with the website access logs described in section 3;
- database and storage providers, which hold the account data described above;
- payment providers, which handle purchases and recurring payments.
If you would like to know which providers we use for a particular purpose, contact us using the details in section 16.
Our applications also contact a third-party connectivity-check address through the tunnel in order to confirm that the connection is working. No account information is sent with that check.
Some service providers act on their own account rather than on our instructions. In those cases their own terms and privacy policies govern their relationship with you.
Legal requirements
We will disclose information to law enforcement agencies or courts where we are legally obliged to do so. Any official request must follow the proper legal procedure to be recognized under applicable law, and we cannot hand over information that we do not hold.
Business transfers
If we are acquired by, merge with, or sell assets to another company, personal information may be transferred as part of that transaction. We will require the recipient to honor this policy or give you notice of any material change.
Professional advisers
We may disclose information to our lawyers, accountants, auditors and insurers where necessary.
8. International Data Transfers
We are based in the United States. Our application servers, VPN servers and database are all located in the United States. If you use the Services from outside the United States, the information you give us is transferred to and processed there, and may also be processed in other countries where our service providers operate. Those countries may have data protection laws that differ from the laws where you live.
9. How Long We Keep Information
We keep personal information only for as long as we need it to provide the Services, comply with our legal obligations, resolve disputes and enforce our agreements, after which it is deleted or anonymized.
10. Security
We take data security seriously and maintain technical, physical and administrative safeguards designed to protect information against unauthorized access, disclosure, alteration and destruction. These include encrypting traffic between our applications and our servers, encrypting VPN traffic in transit, storing passwords only as one-way bcrypt hashes, resolving DNS over an encrypted connection inside the tunnel, and excluding application data from device cloud backups.
No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security. You should use your own judgment about what you send through any service, including ours.
11. Your Rights and Choices
Depending on where you live, you may have the right to ask us to give you access to the personal information we hold about you, correct it, delete it, provide a copy in portable form, restrict or object to certain processing, or withdraw a consent you previously gave. You can also unsubscribe from any non-essential email at any time.
You can edit your details or delete your account in the application, or contact us using the details in section 16 and we will help. We will respond within the period required by the law that applies to you and, where none applies, within 30 days. We will never treat you differently or degrade your service because you exercised a right.
If you are not satisfied with our response, you may have the right to complain to your local data protection authority.
12. Cookies and Similar Technologies
This website sets no cookies of its own. It uses the limited first-party analytics described in section 3, but contains no advertising scripts, tracking pixels or tag managers. We do not profile you and we do not track you across other websites. Our mobile applications do not use cookies.
The fonts on this site are served from our own servers rather than loaded from a font service, so this website makes no requests to third parties at all. Visiting it tells nobody but us that you were here.
Where we operate a signed-in dashboard, we use a small number of strictly necessary cookies to keep you logged in. They are not used for analytics or advertising.
13. Children
You confirm that you are at least 16 years old and have the legal capacity to use our products and services. The Services are not intended for children under 16, and we do not knowingly collect personal information from them. If we learn that we have collected such information, we will delete it. If you believe a child has given us personal information, contact us using the details in section 16.
14. Third-Party Sites and Services
Our Services may link to or work with websites and services operated by others. We do not control them and we are not responsible for their privacy practices. We encourage you to read their privacy policies.
15. Changes to This Policy
We may amend this Privacy Policy at any time. An amended policy takes effect when it is published on this page, and the date under "Last updated" at the top will change. Where a change is material we will give additional notice through the Services or by email. We recommend reviewing this page from time to time. Continuing to use the Services after a revised policy is published means that you accept it.
16. Contact Us
If you have questions about this Privacy Policy or our privacy practices, or you want to exercise any of the rights in section 11, contact us at:
Hyperlink Software Technology LLC
[email protected]