🔒 Privacy Policy
Last updated: September 26, 2025
This Privacy Policy explains how OutboundGateway ("we", "us", "our") collects, uses, and protects your personal data when you use our service. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for your personal data is:
OutboundGateway
Email: mail@outboundgateway.com
2. Data We Collect
We only collect the minimum data necessary to provide the service:
- Account information: email address, password (stored securely in hashed form)
- Operational metadata: connection IP, timestamps, error/debug logs (kept temporarily)
- Billing details: handled securely by our payment processor (e.g. Stripe). We do not store full payment card data
We do not inspect, log, or store the contents of your traffic. All data flows through our proxy using end-to-end encryption (SSL/TLS).
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual necessity – to provide the proxy service you subscribe to
- Legitimate interest – to ensure network security, prevent abuse, and debug technical issues
- Legal obligations – to comply with EU tax and accounting laws
4. How We Use Your Data
Your data is used for:
- Creating and managing your account
- Providing authentication and secure access to the proxy
- Processing payments and managing subscriptions
- Detecting and preventing abuse, fraud, or technical issues
5. Data Sharing
We only share your personal data with trusted third parties necessary for service delivery:
- Payment processors (e.g. Stripe) for billing
- Hosting providers (e.g. Hetzner, OVH) for running the proxy infrastructure
We do not sell or rent your personal data to third parties.
6. Data Retention
- Account information is kept as long as your subscription is active
- Connection logs are automatically deleted within 30 days
- Billing records are retained for the legally required period under EU tax law
- If you delete your account, your personal data will be erased unless retention is required by law
7. Your Rights under GDPR
You have the following rights:
- Access – to request a copy of your personal data
- Rectification – to correct inaccurate or incomplete data
- Erasure – to request deletion of your personal data
- Restriction – to limit how we process your data
- Portability – to receive your data in a structured, machine-readable format
- Objection – to object to processing based on legitimate interests
To exercise your rights, contact us at mail@outboundgateway.com
8. International Transfers
If we transfer your data outside the European Economic Area (EEA), we ensure adequate safeguards (such as EU Standard Contractual Clauses) are in place.
9. Security
We use industry-standard security measures, including encryption and hashed passwords, to protect your personal data against unauthorized access or disclosure.
10. Changes to this Policy
We may update this Privacy Policy to reflect changes to our practices or for legal reasons. Updates will be posted on this page with a new "last updated" date.
11. Contact
If you have any questions about this Privacy Policy, contact us at:
OutboundGateway
Email: mail@outboundgateway.com