Rosanyx VPN
Privacy Policy
How Rosanyx VPN handles account, subscription and operational data.
1. Who we are
Salvador Carrasco Olmedo, trading as Rosanyx VPN, Spanish tax ID 20079483T, with professional address at Calle Cortijo el Pino, 3, 18816 Castril, Granada, Spain, is the data controller. Privacy requests may be sent to privacy@rosanyx.com and legal notices to legal@rosanyx.com.
2. Information we process
We may process account data (email, internal user ID, password hash, creation date and account status), subscription data (plan, status, dates, payment provider and necessary transaction identifiers), device data (internal identifier, device name, operating system, app version and last activity), proportionate security events and information submitted to support.
3. Rosanyx VPN No-Logs Policy
Browsing activity and operational data are different. Rosanyx is designed not to retain browsing history, visited URLs, transmitted content, searches, historical DNS queries or complete browsing destinations. We do process the minimum technical data needed to run the service, including node health, active peer state, aggregate performance, app version, incidents and subscription status. We do not claim that no account or operational data exists.
4. Purposes and legal bases
Data is used to provide the contract, authenticate accounts, administer subscriptions, secure the service, answer support requests and meet valid legal obligations. Consent is used only where appropriate, including optional marketing. The definitive mapping of each purpose to its legal basis requires legal review.
5. Payments and processors
Rosanyx does not store complete card details. Payments may be processed by Stripe, Google Play or Apple when enabled, under their own privacy terms. VPS, transactional email, CDN, analytics and support providers will be listed only after they are contracted. International transfers must be reviewed according to the final providers.
6. Retention
Account, subscription, security, support and billing retention periods are TO_BE_DEFINED. Data will be kept only for the period required for its purpose and applicable obligations. VPN peers and short-lived sessions expire automatically according to operational configuration.
7. Your rights
Subject to the GDPR and applicable law, you may request access, rectification, erasure, restriction, portability or object to processing, and withdraw consent without affecting prior lawful processing. You may also complain to the competent supervisory authority, including the Spanish Data Protection Agency where applicable.
8. Security and contact
Reasonable measures include TLS, password hashing, access controls, least privilege, protected backups, security monitoring and vulnerability management. No system can promise absolute security or anonymity. Contact privacy@rosanyx.com for privacy matters.
Need clarification? legal@rosanyx.com