This is the translated version of the AdGuard VPN Privacy Policy. View the original document
AdGuard VPN Privacy Policy
August 7, 2024
Summary
We do not share or sell your personal information. We are strongly committed to protecting user privacy and being as transparent as possible.
- We don’t collect logs on VPN servers and don’t know what websites you visit.
- We collect only the information necessary for our products and services to function properly.
- You are not required to share your personal data with us. You can delete your information by deleting your AdGuard account at my.adguard-vpn.com or by sending us a request at privacy@adguard-vpn.com.
Who we are
ADGUARD SOFTWARE LIMITED (“We”, “Our” or “Us”) collects and processes your data in accordance with this Privacy Policy and in compliance with the applicable data protection laws. This Policy provides you with the necessary information regarding your rights and our obligations and explains how, why and when we process your personal data. Our general principle is to collect only the information that is necessary to provide you with full functionality of our products and services. We strictly follow the principle of “minimization” when processing your data.
ADGUARD SOFTWARE LIMITED is a company registered in Limassol, Cyprus, registered office is at Anexartesias and Athinon 79, Nora Court Flat/Office 203-205, 3040 Limassol, Cyprus. ADGUARD SOFTWARE LIMITED acts as the data controller when processing your data.
If you have any questions about this Privacy Policy or if you want to exercise any of your rights, please contact us at privacy@adguard-vpn.com.
Please read this Privacy Policy thoroughly.
If you do not agree with our policies and practices described in this Privacy Policy, please do not use our software and services, do not visit our website, and do not provide your information to us.
What data we process
We process different data depending on the situation. You can learn details about what data we process in this section.
Some data that we receive and process may be treated as personal data (“Personal Data”) in accordance with the laws of certain territories and countries. When we use terms “personal data" or “personal information”, we mean any information relating to an identified or identifiable natural person, excluding any anonymized and depersonalized data where your identity is absent or has been removed and cannot be recovered.
When you are using our website
When you visit our website adguard-vpn.com and its subdomains. For more information about what data is collected, how it is collected, and how you can manage it, please see the Privacy Policy of AdGuard Websites.
Account registration. We process your email address and a hash of the password which you provide to us at the registration. That ensures that you can retrieve your password if needed.
Sending messages. We can use your email address to make announcements, inform you of updates and new features in our software or services, provide you with advice, or to communicate with you when reporting errors.
You can also provide us with your consent to process your email for sending marketing messages about our other software or services. You can withdraw your consent any time by unsubscribing from our newsletters via AdGuard Account or by clicking the “Unsubscribe” button or link in the newsletter itself.
Cookies. We use our cookies to personalize the content of AdGuard VPN website, such as setting the default language. None of the information we may acquire through the use of cookies is considered Personal Data as it does not allow us to identify you. You can always disable cookies in your web browsing software or clear existing cookies, but please note that some of our services may not function properly without the use of cookies. Please refer to the Privacy Policy of AdGuard Websites.
Buying a subscription. We process your email address for billing and payment purposes. If you purchase a subscription to AdGuard VPN, we’ll need to know your contact details to send you information about the purchase.
We’ll also use your email address to create an account for you. This account will allow you to manage your purchased subscription.
We conduct all transactions via Paddle.com Market Ltd and PayPro Global, Inc. to enable payments if you purchase a subscription to use our software and services.
The data processed depends on the payment provider and may include the following:
- Email address
- Country of residence
- Zip or postal code
- (If you use a bank card to make a purchase) Number, name, expiration date, and the security code associated with the bank card
For the exact data that the payment provider collects about you, please see the corresponding privacy policy: Paddle’s Privacy Policy, PayPro Global’s Privacy Policy.
When you are using our software
Sign-in / Account registration. When signing in to connect the installed app to your account or registering a new account, you need to provide your email address and create a password to initially create a VPN connection. We process this essential data to provide you with the AdGuard VPN service.
Using our software. When you choose to use our app, you will provide us your data, including Personal Data. This information, which we must process to ensure the full functionality of AdGuard VPN services, depends on the operating system for which the software is designed. For details, please refer to the corresponding privacy notices.
- For AdGuard VPN for Windows: adguard-vpn.com/privacy/windows.html
- For AdGuard VPN for Android: adguard-vpn.com/privacy/android.html
- For AdGuard VPN for Mac: adguard-vpn.com/privacy/mac.html
- For AdGuard VPN for iOS: adguard-vpn.com/privacy/ios.html
- For AdGuard VPN Browser Extension: adguard-vpn.com/privacy/extension.html
Usage information. When you use our VPN service, we need to make sure that you stay within the agreed-upon limits. Therefore, we collect data on your traffic usage. This is done for two reasons: to prevent misuse of our service and to know when a user’s subscription has expired. When the subscription expires or is canceled, the free limit is reactivated and without knowing your previous data usage we cannot properly enforce the rules that limit using the free version.
We store only the number of bytes used by the account, it is not associated with locations. Traffic usage data is stored for 90 days.
Additionally, we collect information on the number of instances of our software that have an active VPN connection for both the free and paid versions. We receive this information from our VPN servers through which you establish a VPN connection. This is also done for the same reason — to make sure the user stays within the agreed-upon limits.
Diagnostic / Device information. However, if you experience problems using our software and you give us your consent, we will collect and process some diagnostic information for crash reports and some information about the device used to run our software in order to help you. The exact information we collect and process depends on the AdGuard VPN software you are using. For details, please refer to the corresponding privacy notices.
What legal bases we use to process your Personal Data
We use different legal bases to process Personal Data depending on the type of data, the purposes, and circumstances of processing.
Consent. We process your Personal Data if you have provided us with your consent to use your personal data for certain purposes. For example, to send you marketing messages or to help you troubleshoot problems with using our software. You can withdraw your consent any time without affecting your use of our software.
Performance of a contract. We process your Personal Data when it is necessary to fulfill our contractual obligations to you, including providing the functionality of our software and services or at your request prior to entering into a contract with you.
Legal obligations. We process your Personal Data where it is necessary for compliance with our legal obligations, such as to exercise or defend our legal rights, or for taxation purposes.
Legitimate interest. We process your Personal Data when we pursue our legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms of data subjects.
Where we process your Personal Data
We store your Personal Data in our own data center located in Frankfurt. Your Personal Data may be processed by our employees, who can only access your data through their job duties on a need-to-know basis. If you have questions or would like to know from which countries your Personal Data may be accessed, you can write to us at privacy@adguard-vpn.com.
For data transfers to other countries, we always implement appropriate safeguards to ensure that your Personal Data always remains safe and that your rights are respected:
- The country or the third party is recognized as providing adequate protection.
- A valid transfer mechanism is used, such as the Standard Contractual Clauses, and supplementary measures are implemented where necessary.
- The transfer has your explicit consent.
- The transfer is necessary for the performance of a contract with you or to take steps requested by you prior to entering into that contract.
If you would like a copy of the Standard Contractual Clauses used, please contact us at privacy@adguard-vpn.com.
To determine if a non-EU country has an adequate level of data protection, please visit the European Commission website.
How we use your Personal Data
Retaining your data
We retain Personal Data for as long as necessary to provide you with our products and services, or until you withdraw your consent to share this information.
Your rights
In some countries and regions, you may have certain rights in relation to your Personal Data under applicable data protection laws.
If you wish to exercise your rights with respect to your Personal Data, please contact us at privacy@adguard-vpn.com. We will consider and act upon any request in accordance with applicable data protection laws. We may ask you to further confirm your identity and will respond to you within the time period specified by applicable data protection law. Please note that in certain cases stipulated by applicable data protection law, we may charge you a reasonable fee for processing your request or refuse your request.
You are entitled to exercise the following rights in relation to your Personal Data:
Right of access: The right to obtain all your Personal Data we store. In some cases, the right of access may be limited for technical reasons, including if the data has been anonymized and cannot be linked to any data subject.
Right to erasure or right to be forgotten: The right to completely delete your Personal Data. You can do this at will via AdGuard Account, or by sending a request to privacy@adguard-vpn.com.
Right to rectification: The right to correct any incomplete or inaccurate Personal Data about you. We will do so as quickly as possible, unless there is a valid reason not to, in which case you will be notified.
Right to restriction: The right to impose restrictions on processing of your Personal Data.
Right to object: The right to object to processing of your Personal Data.
Right to data portability: The right to receive provided Personal Data in a structured, commonly used and machine-readable format and to transmit that data to another controller. You can export all Personal Data that we hold about you to a local file from your AdGuard Account at my.adguard.com.
Right not to be subject to a decision based solely on automated processing, including profiling.
Right to withdraw a consent where the data processing is based on the consent.
Right to lodge a complaint with a data protection authority. You can find contact details of our data protection authorities at www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/contact_en/contact_en?opendocument.
When we receive your Personal Data from a third party, we will use reasonable efforts to inform you about it.
Safeguarding measures
We make every possible effort to protect you and your Personal Data from unauthorized access, alteration, disclosure or destruction. We implement and maintain the following technical and security measures:
System access controls: We take reasonable measures to prevent Personal Data from being used without authorization. These controls shall vary based on the nature of the processing undertaken and may include, among other controls, authentication via passwords and/or two-factor authentication, documented authorization processes, documented change management processes and/or logging of access on several levels.
Data access controls: We take reasonable measures to ensure that Personal Data is accessible and manageable only by properly authorized staff. Direct database query access is restricted and application access rights are established and enforced to ensure that persons entitled to use a data processing system only have access to the Personal Data to which they have privilege of access; and that personal data cannot be read, copied, modified or removed without authorization in the course of processing.
Storing data in a data center: Personal information is stored in our own data center located in Frankfurt. This is secure: the data center does not demand that we collect any data about your traffic or your use of our products and services. If they request us to start doing so, we will stop working with this provider and find an alternative.
Transmission controls: We take reasonable measures to ensure that it is possible to check and establish to which entities the transfer of Personal Data by means of data transmission facilities is envisaged so Personal Data cannot be read, copied, modified or removed without authorization during electronic transmission or transport.
Input controls: We take reasonable measures to make it possible to check and establish whether and by whom personal data has been entered into data processing systems, modified or removed.
Data backup: We regularly back up our databases to protect Personal Data from accidental destruction or loss when hosted by us. The data is also encrypted so that it cannot be used if lost.
Logical separation: Personal Data is logically segregated on our systems to ensure that Personal Data collected for different purposes can be processed separately.
Consequences of not providing your Personal Data
You are not obligated to provide your Personal Data to us. However, as this information is required for us to provide you with our services or respond to your requests, we will not be able to offer our services without it.
Age limitations
To the extent not prohibited by applicable law, we do not allow the use of our Services, Products, and Website by persons under the age of 18. If you learn that someone under the age of 18 has unlawfully provided us with Personal Data, please contact us at privacy@adguard-vpn.com. We will take steps to delete such information.
Changes to this Privacy Policy
We may change this Privacy Policy from time to time and inform you of some important changes. Laws, regulations and industry standards evolve, which may require these changes, or we may make changes to our business. We will post the changes on this page and encourage you to review our Privacy Policy to stay informed.
