Privacy Policy
Oris Security LTD - CruxVPN
3rd Floor 86-90 Paul Street
EC2A 4NE London, UK
care AT cruxvpn.net
Service Use
No log of the use of CruxVPN Service exist or is kept. CruxVPN is completely unable to identify any of its connected users at any given time.
Customers subscribe to the service for a number of devices and install and configure the application in each of the devices. The VPN activities are not logged and CruxVPN is unable to know weather a customer is connected or any details of the customer's activities, such as:
- no logging of connections, timestamps or durations
- no logging of originating IP addresses
- no logging of internet traffic
- no logging of DNS requests
- no logging of bandwidth used
For each VPN exit, CruxVPN knows only the total number of connected users (without being able to identify any of these users), the total use of bandwidth, and the geolocated city of the connected users IP address (without being able to identify any IP address). IP addresses are geolocated in a non-invasive manner (such as a MaxMind DB). This information is known instantly for quality purposes, and it is not stored. It is consumed by human agents only with no automation or processing involved.
CruxVPN will respond to law enforcement requests (such as court orders, DMCA for copyright material, governments, UN or any regulator) by including the legal team. CruxVPN will work to keep exit IPs white-listed, and together with authorities when explanation on no logging policy is needed. CruxVPN is ready to shut-down operations in any country and on its entirety, so that customers privacy is kept. Legal requests and answers will be transparent to the public on the announcements page.
Service Payment
CruxVPN is continuously seeking payment methods that are not traceable back to the customer, and making the effort to have clear educational documentation, and to process these payments. There is also constant monitoring of jurisdictions, laws and regulations to stay compliant to all that apply, and obeying anti-money laundry.
The service can be paid without any personal information given to CruxVPN - not even email is needed. Unfortunately some payment methods and jurisdictions will require customers personal information, but these providers will not know the customer's CruxVPN Account ID.
For external payment processors, CruxVPN will store the transaction identifier for 40 days, so that refunds can be given within 30 days of purchase. After that, the identifier will be permanently deleted. This identifier is not processed by any automation and it is not given to any third-party.
Newsletter subscribers
Subscribers to the newsletter will provide their email addresses that will be stored in the UK.
Customer Care
Personal information received via customer care channels will be permanently destroyed. If the information is needed for answering the request, it will be recorded in the UK, only whilst the analyst is solving the enquiry. Customer Care time to answer is 48 hours.
Right to own information
People can send DSARs via email to care AT cruxvpn.net . Customers have the right to be forgotten and the right to object to stored personal data, if there is any.
Amendments
Changes to Policy will be notified before taking effect. Notifications will be on website home, on our announcements page and via newsletter.
Questions and feedback on this article, please: