// legal document

Privacy Policy

Effective Date: January 1, 2025 Last Updated: March 2025 Version 2.4
// table of contents
  1. Information We Collect
  2. How We Use Your Data
  3. No-Log Policy
  4. Data Sharing
  5. Security Measures
  6. Your Rights
  7. Cookies & Tracking
  8. Data Retention
  9. Children's Privacy
  10. Contact Us
Our commitment: Virax VPN was built on a single principle — your online activity belongs to you alone. This policy explains what minimal data we handle, why, and how we protect it. We do not track, log, or sell your browsing activity. Ever.
01

Information We Collect

Virax VPN collects the bare minimum information required to provide and improve our service. We distinguish between two categories:

📋
Account Data
Email address, hashed password, and subscription status. Required to manage your account and deliver the service.
Operational Data
Aggregate bandwidth usage (not per-session), app version, and crash reports. Used solely to maintain performance.
💳
Payment Data
Processed entirely by our payment provider. We never store full card numbers or financial credentials on our servers.
🚫
What We Do NOT Collect
IP addresses, DNS queries, browsing history, traffic destinations, connection timestamps, or session data.
02

How We Use Your Data

The limited data we collect is used exclusively for the following purposes:

  • Authenticating your identity and managing your subscription
  • Processing payments and sending billing-related communications
  • Diagnosing technical issues and improving app stability
  • Responding to support requests you initiate
  • Complying with applicable legal obligations
  • Preventing fraud and abuse of the service

We do not use your data for advertising, profiling, or any purpose beyond what is listed above.

03

No-Log Policy

Virax VPN operates under a strict and independently audited zero-log policy. When you connect to our servers, we do not record:

Data Type Logged? Notes
Your IP address NEVER Not stored, not transmitted, not accessible
VPN server IP assigned NEVER Ephemeral, cleared on disconnect
DNS queries NEVER Resolved via our encrypted resolver
Browsing history NEVER Zero visibility into destinations
Connection timestamps NEVER Session metadata is discarded
Bandwidth per session AGGREGATE Monthly total only, not per-session
Our zero-log policy has been independently verified by Cure53 security auditors. The full audit report is available on our website.
04

Data Sharing

Virax VPN does not sell, rent, or trade your personal data. We may share limited information only in these circumstances:

  • Service Providers: Trusted third parties (e.g. payment processors, hosting providers) who are contractually bound to use data only for the defined purpose
  • Legal Requirements: If compelled by a valid court order in our jurisdiction — though since we hold no logs, there is nothing meaningful to provide
  • Business Transfers: In the event of a merger or acquisition, subject to the same privacy obligations

Because of our no-log architecture, even in cases of legal compulsion, we are technically unable to disclose browsing history, connection records, or identifying network information.

05

Security Measures

We employ industry-leading security practices to protect all data in transit and at rest:

🔐
AES-256 Encryption
All VPN tunnels use AES-256-GCM encryption with Perfect Forward Secrecy.
🛡️
WireGuard Protocol
State-of-the-art VPN protocol with a minimal attack surface and formal verification.
🔏
Zero-Knowledge Auth
Passwords are hashed with Argon2id. We never store plaintext credentials.
🕵️
Regular Audits
Independent security firms audit our infrastructure and code annually.
06

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Correct inaccurate or incomplete account information
  • Erasure: Request deletion of your account and associated data
  • Portability: Receive your data in a machine-readable format
  • Restriction: Limit how we process your data in certain circumstances
  • Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact our privacy team at the address below. We respond within 30 days.

07

Cookies & Tracking

Our website uses minimal cookies. We do not use third-party advertising or behavioral tracking cookies.

  • ESSENTIAL  Session authentication and security tokens — strictly necessary
  • FUNCTIONAL  Language and display preferences — can be disabled
  • ANALYTICS  Anonymous, aggregated page visit counts via self-hosted Plausible

The Virax VPN application itself contains zero tracking SDKs, analytics libraries, or advertising frameworks.

08

Data Retention

We retain your account data for as long as your account is active, plus a 30-day grace period after cancellation to allow for reactivation.

After account deletion, all identifiable account data is permanently erased within 7 business days. Anonymized aggregate statistics (with no link to any individual) may be retained for service improvement.

Payment records are retained for the duration required by financial regulations in our jurisdiction (typically 7 years), held by our payment processor, not by us.

09

Children's Privacy

Virax VPN is not directed at children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

If you believe a child has provided us with their information, please contact us immediately and we will delete it promptly.

10

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, reach out to our dedicated privacy team.

Privacy Team — Virax VPN

We typically respond within 2 business days. For urgent matters, include "URGENT" in your subject line.

privacy@viraxvpn.com