CoVPN collects minimal amount of data to offer you a fast and reliable VPN & Proxy service.We collect:Total bandwidth concumed and time connected to our VPN serviceDevice-specific information like OS version, hardware model, and IP address to optimize our network connection to you. We do not store or log your IP address after you disconnect from the VPN.
Our VPN product will never store or log your IP address beyond the duration of your VPN session, and we always delete your IP address after you disconnect from the VPN.We do not keep logs of your online activities and never associate any domains, or applications that you access while the CoVPN VPN is connected with you, your device, or your email.Creating an account is always optional – we never require you to register or otherwise provide us any contact information to download or use our products.
While we always de-identify your IP address while connected to the VPN, remember that no VPN provider can control what other apps collect from your device or what cookies other websites or third parties place in your browser. For more information about how to exercise choices with respect to certain third party cookies, please see the Third Party Advertising section below.
When the CoVPN VPN is connected, we encrypt all of the traffic between your device and our servers, using TLS 1.2 with perfect forward secrecy (ECDHE), 128-bit/256-bit AES GCM data encryption technology. ChaCha20 Poly1305, among other currently secure algorithms, is also available and configurable for performance.
Your web traffic on unsecured networks such as public Wi-Fi at cafés, airports, etc. is always securely encrypted when the CoVPN VPN is connected.
Personal Information you choose to give us. Personal Information we automatically collect when you use our Services.You can be assured that the Personal Information we may collect, including your email, IP address, username, or unique mobile ID, is never associated with any online activities you engage in while the CoVPN VPN is connected. Additionally, when the CoVPN VPN is connected, your IP address is stored in encrypted format for the duration of the session and is deleted after you disconnect from the VPN.
Personal Information You Choose to Give Us. When you interact with our Services, we collect the Personal Information that you choose to share with us. For example, if you purchase a subscription to CoVPN’s Pro plans, and/or sign up to create an account, you may provide us with an email address and payment information. Remember that creating an account is always optional – we never require you to register or otherwise provide us any account-related information to download or use our products.
Personal Information We Collect Automatically When You Use the Services
When you download the CoVPN app, connect to the CoVPN VPN, or visit our websites, we and our third party service providers collect information about you or your device automatically. Here’s a fuller explanation of the types of Personal Information collected when you use our Services:
When you launch the CoVPN app, before you connect to the VPN, we and our service providers collect device-specific information, such as the unique mobile ID, hardware model, operating system version, language, and network information. We may also use, but never log or store, your IP address to derive your approximate (city-level) location. We use this information to provide and improve the Services, troubleshoot, and perform analytics on our services. Our service providers may collect IP addresses for marketing attribution purposes.
When you connect to the CoVPN VPN, we collect your IP address, immediately encrypt it and store it only for the duration of your VPN session. Your IP address is deleted after you disconnect from the VPN. We do not associate your IP address with your online activities and we do not store or log your IP address after you disconnect from the VPN.
We do not attribute any specific website visits or app usage to any specific user. We do not keep logs of your online activities and never associate any domains or applications that you use with you, your device, or email. Websites visited via our servers are aggregated and stored to: (1) Perform analytics on our services, including measuring whether our users, in aggregate, are able to successfully access certain websites or apps; (2) Troubleshoot service issues and improve service quality.
When you visit our websites
Your IP address may be collected when you visit our websites, but is not stored beyond your visit to our website. We may use your IP address to derive your approximate (city-level) location. Again, we delete the IP address after you leave our website. Please see the “When you use CoVPN” section above to learn more about how we treat your IP address when you use our VPN products.
When you visit our websites, we may collect device-specific information, such as the unique mobile ID, hardware model, operating system version, browser type, language, internet service providers and mobile network names. We only use it to provide and improve the website, troubleshoot, and perform analytics.
Information collected when you visit our website is in no way associated with your online usage when you’re connected to our VPN products.
To our third party service providers who provide services such as website hosting, payment processing, data analysis, information technology and related infrastructure provision, customer service, email delivery, fraud prevention, online advertising, auditing, and other services.
When you launch the CoVPN app, we may also use your IP address, which we automatically delete after you disconnect from the VPN, to derive your approximate (city-level) location. When you are connected to the CoVPN VPN, advertisers are prevented from seeing your IP address, however if you are using the free version of CoVPN we may share this approximate (city-level) location. If you are using the Pro CoVPN Pro version this approximate city-level location will not be collected and will not be shared.
To a potential or actual acquirer, successor, or assignee as part of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in bankruptcy or similar proceedings).
Again, we do not require you to provide us with any contact information in order to download or use our VPN product, we do not log or store your IP address after you disconnect from the VPN, and we do not keep logs on your online activities. Therefore, we generally do not have Personal Information to share with law enforcement, and generally do not have the data to provide in response to law enforcement requests.
However, we may share what Personal Information we do have if required to do so by law or in the good faith belief that such action is appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; © to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.
If you use the Pro Pro version of CoVPN no information is shared with advertisers.
We may use and disclose aggregate information that does not identify or otherwise relate to an individual for any purpose, unless we are prohibited from doing so under applicable law.
In short, we use your Personal Information to provide you with amazing products and services that we are constantly working to improve. Here are some of the ways we do that:
To operate, maintain, enhance and provide features of the Services, provide services and information that you request, respond to comments and questions, and otherwise provide support to users.
Understand and analyze aggregate usage trends, improve the Services, and develop new products, services, features, and functionality.
Contact you for administrative and informational purposes. This may include providing customer service or sending communications, including changes to our terms, conditions, and policies.
For marketing purposes, such as sending marketing messages, or campaign attribution and optimization for user acquisition.
For our business purposes, such as audits, security, fraud monitoring and prevention.
To enforce our Terms of Service or other legal rights.
If you are located in the European Economic Area, we only process your Personal Information based on a valid legal ground, including:
When we need your Personal Information to provide our services, including for account registration, to respond to your inquiries, or for customer support;
We have a legal obligation to use your Personal Information (such as to enforce our terms and conditions);
When we or a third party have a legitimate interest in using your Personal Information. In particular, we have a legitimate interest in using your Personal Information to troubleshoot issues, perform product improvement, conduct business analytics, conduct and optimize user acquisition, serve non-personalized ads, and otherwise monitor and improve the safety, security, and performance of our Service. We only rely on our or a third party’s legitimate interests to process your Personal Information when these interests are not overridden by your rights and interests;
If you otherwise consent to the processing of your Personal Information.
Turning the CoVPN VPN on encrypts all of the traffic between your device and our servers using TLS 1.2 with perfect forward secrecy (ECDHE), 128-bit/256-bit AES data encryption, and HMAC message authentication. This means that your web traffic on unsecured networks such as public Wi-Fi at cafés, airports, etc. will be securely encrypted by CoVPN. We also maintain administrative, technical and physical safeguards that are intended to appropriately protect Personal Information against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the Personal Information in our possession.
As stated above, we do not retain your IP address beyond your VPN session and do not log your online activities. We take measures to delete your Personal Information or keep it in a form that does not allow you to be identified when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrollment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.
Marketing Communications. We do not require that you provide us with your email or any contact information to use our Services. But if you do provide us an email, from time to time you may receive marketing email messages from us consistent with your choices. If you no longer want to receive such emails from us on a going forward basis, you may opt-out via the “unsubscribe” link provided in each such email. Please be aware that, even after you opt out from receiving commercial messages from us, you may continue to receive necessary administrative messages regarding the Services.
Your Data Protection Rights (EEA). If you are located in the EEA, you have the right to request access and receive information about the Personal Information we maintain about you, to update and correct inaccuracies in your Personal Information, to restrict or object to the processing of your Personal Information, to have the information blocked, anonymized or deleted, as appropriate, or to exercise your right to data portability to easily transfer your Personal Information to another company. Those rights may be limited in some circumstances by local law requirements. In addition to the above-mentioned rights, you also have the right to lodge a complaint with a competent supervisory authority subject to applicable law.
Where required by law, we obtain your consent for the processing of certain Personal Information collected by cookies or similar technologies, or used to send you direct marketing communications, or when we carry out other processing activities for which consent may be required. If we rely on consent for the processing of your Personal Information, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the processing before your consent withdrawal.
To update your preferences, ask us to remove your information from our mailing lists, delete your account or submit a request to exercise your rights under applicable law, please contact us as specified in the “Contact Us” section below.
The Services are not directed to individuals under the age of sixteen (16), and we request that they not provide personal information through the Services. If we find out that a child under 16 has provided personal information, we will take steps to delete that information.
CoVPN uses servers hosted in multiple locations. Please note that we may be transferring your information outside of your region for storage and processing around the globe. By using the Services you consent to the transfer of information to countries outside of your country of residence, which may have data protection rules that are different from those of your country.