Privacy Policy

1. Who is responsible for your data

HONGKONG VIBEFINITY TECHNOLOGY LIMITED, Business Registration Certificate No. 77999303, of Room 701, Unit 108, 7/F, Tower B, New Mandarin Plaza, 14 Science Museum Road, Tsim Sha Tsui, Kowloon, Hong Kong, is the controller of personal data processed through the IPMusk website and dashboard.

For any privacy question, or to make a request about your data, write to support@ipmusk.com with “Privacy” in the subject line.

2. Data we collect

• Account data: email address, password hash, verification status, display and language preferences.
• Order and service data: products purchased, plan and term, traffic usage, assigned resources and their state.
• Support and abuse data: tickets, the messages you send us, abuse reports and the evidence supplied with them.
• Technical data: IP address, browser and device information, timestamps, and security and rate-limiting signals.
• Payment data: billing details are handled by the payment provider we use; we keep the transaction record, not your full card number.

3. Why we use it

• To create and run your account and deliver the proxy service you ordered.
• To authenticate sign-in, protect accounts and detect fraud or abuse.
• To answer support requests and investigate abuse reports.
• To bill correctly, meet accounting duties and keep transaction records.
• To maintain, secure and improve the service, and to send service notices such as verification, delivery and policy updates.
• To meet legal obligations and respond to lawful requests from competent authorities.

4. Cookies

We use strictly necessary cookies to keep you signed in, to protect forms and to keep your language choice. Without them the dashboard cannot work.

Where we use any measurement or preference cookie beyond that, it is limited to understanding how the site is used. You can block or delete cookies in your browser, but blocking the necessary ones will break sign-in.

5. Who we share it with

We do not sell personal data. We share it only with the providers we need in order to run the service, and only for that purpose: Cloudflare for hosting, data storage, abuse protection and email delivery; our upstream proxy supplier for provisioning and operating the resources you order; and a payment provider for processing payments.

We may also disclose data where the law requires it, to protect our rights or the safety of users, or in connection with a merger or transfer of the business, in which case the recipient stays bound by this policy.

6. International transfers

We operate from Hong Kong and use providers with global infrastructure, so your data may be processed outside your country of residence. Where a transfer is subject to data-protection law that requires safeguards, we rely on the appropriate mechanism, such as standard contractual clauses, together with confidentiality terms in our provider agreements.

7. Security

Proxy passwords and connection details are treated as secrets: they are encrypted by the application and kept out of ordinary logs, email and support content. Access to production data is restricted to the people who need it to operate the service.

Abuse reports use a one-way fingerprint of the reporter's source address for rate limiting instead of storing the raw address in the report.

No system is completely secure. Use a strong, unique password and tell us at support@ipmusk.com if you think your account has been accessed without permission.

8. Source-country control

We use Cloudflare's source-country signal to block requests coming from mainland China (CN), North Korea (KP), Turkmenistan (TM), Iran (IR), and Eritrea (ER). This is a network-level control applied to the request itself; we do not profile customers by nationality, billing country, selected proxy location or language.

9. How long we keep it

Account and order records are kept while your account is open and afterwards for as long as we need them for accounting, tax, security and legal-defence purposes. Support tickets and abuse records are kept for the period needed to handle repeat issues and to show how a case was decided. Technical and security logs are kept for a short operational period and then deleted or aggregated.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on it. Residents of the EEA, the UK, California and other jurisdictions with comparable laws can exercise the rights those laws provide.

Send requests to support@ipmusk.com. We will verify that the request comes from the account holder and reply within the period the applicable law requires. We may keep records we are legally obliged to retain even after a deletion request, and we will tell you when that applies.

11. Children

IPMusk is a business service and is not directed at children. We do not knowingly collect personal data from anyone under 18. If we learn that we hold such data, we will delete it. A parent or guardian who believes a child has given us data should contact support@ipmusk.com.

12. Changes to this policy

We may update this policy to reflect changes in the service or in the law. We will post the updated version here and, where a change materially affects you, notify registered users by email or in the dashboard before it takes effect.