🔒 Privacy Policy

Last updated: September 26, 2025

This Privacy Policy explains how OutboundGateway ("we", "us", "our") collects, uses, and protects your personal data when you use our service. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is:

OutboundGateway
Email: mail@outboundgateway.com

2. Data We Collect

We only collect the minimum data necessary to provide the service:

  • Account information: email address, password (stored securely in hashed form)
  • Operational metadata: connection IP, timestamps, error/debug logs (kept temporarily)
  • Billing details: handled securely by our payment processor (e.g. Stripe). We do not store full payment card data

We do not inspect, log, or store the contents of your traffic. All data flows through our proxy using end-to-end encryption (SSL/TLS).

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual necessity – to provide the proxy service you subscribe to
  • Legitimate interest – to ensure network security, prevent abuse, and debug technical issues
  • Legal obligations – to comply with EU tax and accounting laws

4. How We Use Your Data

Your data is used for:

  • Creating and managing your account
  • Providing authentication and secure access to the proxy
  • Processing payments and managing subscriptions
  • Detecting and preventing abuse, fraud, or technical issues

5. Data Sharing

We only share your personal data with trusted third parties necessary for service delivery:

  • Payment processors (e.g. Stripe) for billing
  • Hosting providers (e.g. Hetzner, OVH) for running the proxy infrastructure

We do not sell or rent your personal data to third parties.

6. Data Retention

  • Account information is kept as long as your subscription is active
  • Connection logs are automatically deleted within 30 days
  • Billing records are retained for the legally required period under EU tax law
  • If you delete your account, your personal data will be erased unless retention is required by law

7. Your Rights under GDPR

You have the following rights:

  • Access – to request a copy of your personal data
  • Rectification – to correct inaccurate or incomplete data
  • Erasure – to request deletion of your personal data
  • Restriction – to limit how we process your data
  • Portability – to receive your data in a structured, machine-readable format
  • Objection – to object to processing based on legitimate interests

To exercise your rights, contact us at mail@outboundgateway.com

8. International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure adequate safeguards (such as EU Standard Contractual Clauses) are in place.

9. Security

We use industry-standard security measures, including encryption and hashed passwords, to protect your personal data against unauthorized access or disclosure.

10. Changes to this Policy

We may update this Privacy Policy to reflect changes to our practices or for legal reasons. Updates will be posted on this page with a new "last updated" date.

11. Contact

If you have any questions about this Privacy Policy, contact us at:

OutboundGateway
Email: mail@outboundgateway.com