Privacy Policy

SECvpn does not log VPN traffic content and does not inspect the content of your VPN traffic. We process the minimum operational data needed to provide subscriptions, enforce one-device limits, operate VPN nodes, prevent abuse, and support customers.

Who operates SECvpn

SECvpn is operated by SMSoft. Contact: support@smsoft.cc.

Data we may process

• Account data such as username and password hash.
• Subscription data from Google Play, including product ID, purchase token status, entitlement state, and subscription timestamps.
• Device data such as generated device ID/fingerprint, device name, platform, and one-device registration status.
• VPN provisioning data such as assigned WireGuard client name, VPN IP, selected node, plan, speed/quota metadata, and status.
• Connection metadata such as observed public source IP address, connection/provisioning time, latest handshake time, transfer counters, and node/client status where needed for service operation, abuse prevention, quota enforcement, and support.
• Support and abuse reports you send to us.
• Security logs for login, account, billing, provisioning, revoke, and device reset actions.

Data we do not intentionally collect

• We do not log the content of websites, apps, messages, files, or traffic payloads passing through the VPN tunnel.
• We do not sell personal data.
• We do not use advertising trackers in the SECvpn Android MVP.
• We do not publish the private admin panel to the public internet.

Why we process data

• To provide VPN account login and subscription access.
• To enforce one active device per subscription.
• To provision, enable, disable, or revoke WireGuard client access.
• To prevent spam, SMTP abuse, port scanning, DDoS, credential attacks, open proxy abuse, illegal activity, and IP reputation damage.
• To handle billing entitlement, support, security, troubleshooting, and legal compliance.

Google Play Billing

SECvpn uses Google Play Billing for Android subscriptions. Google may process payment and subscription data under Google's own policies. SECvpn receives purchase token/subscription status data needed to verify entitlement.

VPN disclosure

When enabled, SECvpn routes device internet traffic through SECvpn VPN nodes. Android displays a system VPN permission dialog before connection. The app also shows a prominent VPN disclosure before requesting system VPN permission.

Retention

Operational records may be retained as needed for account operation, abuse prevention, IP reputation protection, customer support, billing disputes, security, backups, and legal compliance. Deleted accounts may remain in backups until backup rotation completes.

Data deletion

You can request deletion from inside the app or by following Data Deletion. Some records may be retained where required for security, abuse prevention, billing, dispute handling, or legal obligations.

Changes

We may update this policy as the service changes. The effective date will be updated when material changes are published.