Privacy Policy

1. General Provisions

This Privacy Policy describes how Tor VPN (the Service) collects, stores, uses, transfers, and protects users personal data. This policy is prepared with regard to the laws of the Republic of Kazakhstan, including the Law "On Personal Data and Their Protection" and other applicable regulations.

2. What Data We Process

We process only the data necessary to provide and improve the Service:

• registration data (for example, email address and account identifier);
• payment and billing data (to the extent provided by payment providers);
• technical device and app data (client version, device type, connection time);
• support request data.

3. Processing Purposes

• providing access to the Service and maintaining user accounts;
• processing payments and refunds and preventing fraud;
• ensuring information security and service stability;
• handling user inquiries and communication;
• complying with applicable legal obligations.

4. Legal Basis for Processing

Personal data is processed based on user consent and, where applicable, when processing is necessary for performance of a contract, compliance with legal obligations, and protection of the Service legitimate interests while respecting users rights and freedoms.

5. Data Storage and Security

We implement reasonable organizational and technical safeguards to protect personal data against loss, unauthorized access, alteration, disclosure, or destruction. Data is stored no longer than necessary for the stated purposes and/or applicable legal retention periods.

6. Sharing with Third Parties

We may share data with third parties only to the extent necessary to operate the Service (for example, payment providers, hosting, and technical infrastructure), and in response to lawful requests from public authorities where required by law.

7. User Rights

Users may request access to their personal data, correction, restriction, deletion, and withdrawal of consent, subject to the scope and procedures established by applicable law.

8. Cross-Border Data Transfer

When distributed infrastructure is used, data processing may occur outside the Republic of Kazakhstan. In such cases, the Service applies measures to ensure a level of protection not lower than that required by applicable law.

9. Policy Updates

We may update this Policy from time to time. The current version is published on this page with the effective date.

10. Contact

For personal data inquiries: contact@tornetworks.shop.