Privacy Policy

1. Who we are

Basil Proxies is operated by Basil Solutions, ul. Popiełuszki 13, 20-052 Lublin, Poland (VAT 9461073473). For GDPR purposes, we're the data controller for the personal data described here.

2. What we collect

• Account info — name, email, and a hashed password (never stored in plain text).
• Discord info, if you connect it — your Discord user ID, username, and avatar.
• Preferences — language, timezone, and currency.
• A country, inferred from your signup IP — we don't store anything more precise than that.
• Usage totals — how much bandwidth you've used, by product, as periodic snapshots. We don't log the websites, domains, or destinations you access through a proxy.
• Payment identifiers — Stripe handles your card and billing address directly; we keep only what's needed to match a payment to your account.
• Security records — the IP address used at signup, login, and sensitive actions like enabling two-factor authentication, so we can flag unfamiliar logins to you.

3. Cookies

basilproxies.com itself doesn't set any cookies. Once you're signed in at app.basilproxies.com, we set a few: a session cookie so you stay logged in, a currency cookie so we remember your preference, a short-lived cookie during sign-in with Discord to secure that handshake, and, if you arrived via a referral link, a cookie that credits the referral for up to 12 months. None of this runs through a third-party ad or analytics network.

4. How we use it

To run your account and deliver the service, process payments and issue tax-compliant invoices, keep your account secure, credit referrals correctly, and email you about your account or orders.

5. Who we share it with

We don't sell your data, and we don't share it for anyone else's advertising.

• Stripe, for payment processing and billing.
• Our email provider, to send account and order emails.
• Cloudflare, for infrastructure and security — they see standard connection data to route traffic and block abuse.
• Discord, if you connect your account, and also when we send ourselves an internal order notification (including your name and email) so our team can act quickly if something goes wrong.
• Invoicing software, to issue proper tax invoices where required by law.
• The network partners who operate our residential, mobile, and ISP infrastructure — we share the account identifier and email needed to provision and maintain your proxy access. They don't get your payment details.

6. How long we keep it

We keep your account data for as long as your account is active. We don't currently run an automatic deletion schedule for historical activity or login records — if you close your account and want us to delete what we hold, email us and we'll do it by hand. Invoicing records are kept as long as Polish tax law requires.

7. Your rights

Under GDPR, you can ask us to show you what we hold on you, correct anything that's wrong, delete your data, or export it in a portable format. Email [email protected] — we don't have automatic self-service for this yet, so a real person handles it directly.

8. Security

We encrypt sensitive credentials, like two-factor recovery codes and proxy keys, at rest, and passwords are always stored as a hash, never in plain text. No system is perfectly secure, but we take reasonable steps to protect what we hold.

9. Children

The Service isn't for anyone under 18. We don't knowingly collect data from anyone under that age.

10. Changes to this policy

We may update this policy from time to time. Changes take effect when we post the new version here with an updated date above.

11. Contact

Questions about this policy or your data: [email protected].