Privacy and Cookie Policy

This Privacy Policy explains how ProxyHub ("Company", "we", "our", "us") collects, uses, retains, and protects personal data when Users ("User", "you") access or use our services provided through the website proxyhub.it, the client area app.proxyhub.it, and the official Telegram support account @proxyhubcloud.

We are committed to protecting personal data and processing it in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

By using the Service, the User confirms that they have read and understood this Privacy Policy.

The Data Controller of personal data is ProxyHub. For any privacy-related matter, Users may contact us through:

Country: Italy

Email: info@proxyhub.it

Telegram (support): @proxyhubcloud

Depending on how the User interacts with our support, we may collect the following categories of personal data:

3.1 Data Provided by the User

• Account data: email address, password (stored only in hashed form, never in plain text), and name and profile photo if you choose to provide them.
• Sign in with Google, if you use it: your Google account identifier and the verified email address Google shares with us. We never receive your Google password.
• Preferences: language, client area theme, and email notification choices.
• Telegram user ID and/or username, if you contact us through Telegram support.
• Information relating to purchase and Service configuration requests.

3.1a Account Security Data

• Sign-in sessions: device and browser type, IP address, sign-in date, and last activity. They are used to show you your signed-in devices, alert you to sign-ins from new devices, and protect your account.
• Two-step verification, if you turn it on: the authenticator app secret key and the recovery codes, the latter stored only in hashed form.
• Verification codes sent by email: they are not stored in the database; they are checked through a signed technical cookie that expires after a few minutes.

3.1b Reviews and free tools

• Reviews, if you choose to write one: the rating, text and display name you provide. They are linked to your account, checked before publication and shown on the website only with the display name, never your email. You can edit them from the client area and they are deleted together with your account.
• Proxy checker: the proxy details you enter (host, port, username and password) are used only to run the check you request and are neither stored nor logged.
• DNS leak test: we record the IP addresses of the DNS servers that resolve the test's probe names, only to show you the result; this data is deleted automatically within 15 minutes.
• What is my IP: your IP address and browser data are read on the spot and shown only to you, without being stored. The WebRTC test, which runs only if you press the button, contacts a public Google STUN server, which sees your IP address as in any connection.
• Proxy converter: conversion happens entirely in your browser; the data isn't sent to our servers.

3.1c Website chat

• If you write to us through the website chat, we record your messages, support's replies, the language, the page you write from and, if you provide it or are signed in, your email. A technical cookie (ph_chat) links the chat window to your conversation.
• Messages are forwarded to the support team through Telegram (Telegram Messenger Inc.), which processes them as the messaging service provider. If you left your email and are no longer on the page, the reply is also sent to you by email.
• Conversations with no activity for 12 months are deleted automatically.

3.2 Technical and Usage Data

Connection information: Technical information relating to the connection to the Service, including source IP addresses, destination IP addresses where technically necessary, timestamps, connection data, and usage statistics.

Operational logs: Proxy usage data and connection logs (technical logs).

Activity metadata: Timestamps (dates and times) and activity metadata relating to use of the Service.

Consumption statistics: Information relating to traffic consumption, volume of data transferred, and technical statistics necessary for managing the Service.

ProxyHub does not monitor or store the content of communications, the requests made, or the data exchanged by Users through the Service. The collection of technical data is strictly limited to the metadata necessary for the management, security, and proper operation of the infrastructure.

Such technical data may be associated with the User's Customer Profile solely for purposes of technical support, verification of the Service's proper functioning, infrastructure security, and prevention of abusive or non-compliant use.

3.3 Payment Information

• Payment transaction identifiers (payment ID, cryptographic transaction hash, invoice reference).

ProxyHub does not store or process credit card numbers or sensitive payment details. Payments are made in USDT on the TRON (TRC20), BNB Smart Chain (BEP20), Polygon, and Ethereum (ERC20) networks to ProxyHub addresses; to verify them we consult public blockchain data through lookup services (block explorers and public nodes). For each top-up we record the network, amount, transaction hash, status, and dates, as well as the movements of the prepaid balance (top-ups, purchases, and renewals).

For payments made via cryptocurrencies, ProxyHub may process public blockchain transaction identifiers, such as the transaction hash and associated blockchain addresses, solely for purposes of payment verification, accounting management, and fraud prevention.

3.4 Identity Verification (KYC) Data

In the cases described in our Terms and Conditions and in our internal Anti-Money Laundering and Counter-Terrorist Financing (AML/CTF) Policy — in particular where justified for reasons of security, fraud prevention, or regulatory compliance (for example, where a single payment or a series of related payments equals or exceeds USD 5,000, or where suspicious activity is detected) — we may require the User to complete an identity verification (KYC) form and to provide the following data:

• Legal first and last name (as shown on the identity document);
• Date of birth and nationality;
• Passport / identity document number and a copy of a valid state-issued identity document;
• Country of residence and home address;
• Email address and Telegram ID/username associated with the profile;
• The intended purpose of use of the Service and the main platforms/websites to be accessed through the Proxy.

This data is processed solely for the purposes of verifying the User's identity, preventing fraud, ensuring the security of the Service, regulatory compliance, and protecting ProxyHub's infrastructure. The processing is based on the performance of a contract (Article 6(1)(b) GDPR), on ProxyHub's legitimate interest in security and abuse prevention (Article 6(1)(f) GDPR), and, where required by applicable law, on compliance with legal obligations (Article 6(1)(c) GDPR). The results of the verification may also be used for international sanctions screening. Any refusal to complete the verification will result in suspension or termination of the Service in accordance with the Terms and Conditions.

Personal data is processed for the following purposes:

• Providing, managing, and maintaining the Proxy Service;
• Managing Customer profiles and technical support;
• Managing access to the account and its security (two-step verification, device list, new sign-in alerts);
• Sending service emails (verification codes, payment confirmations, renewals, expiry reminders) and, only if you choose so in Settings, emails about news and offers;
• Processing payments and preventing fraudulent transactions;
• Ensuring security, network stability, and abuse prevention;
• Monitoring technical use of the Service in order to ensure the proper functioning of the infrastructure and prevent improper or harmful use;
• Complying with applicable legal obligations;
• Verifying Users' identity and carrying out due diligence (KYC) and sanctions screening;
• Detecting and preventing use of the Service for prohibited activities, including through technical analysis and monitoring of connection log metadata to identify attempts to access destinations known for fraud, phishing, or other harmful activities;
• Communicating with Users regarding the Service.

We process personal data on the basis of one or more of the following legal grounds under Article 6 of the GDPR:

• Performance of a contract (Art. 6(1)(b) GDPR);
• Compliance with a legal obligation to which the controller is subject (Art. 6(1)(c) GDPR);
• ProxyHub's legitimate interest, such as network security, fraud prevention, and improvement of the Service (Art. 6(1)(f) GDPR);
• The data subject's consent, where explicitly required (Art. 6(1)(a) GDPR).

Personal data is retained only for as long as strictly necessary to achieve the purposes described in this Policy, including any legal, accounting, or compliance obligations.

The retention period is determined by applying principles of proportionality and data minimization, taking into account operational needs, infrastructure security, abuse prevention, dispute management, and the protection of ProxyHub's rights.

Account data (email, name, photo, preferences, two-step verification) is retained while the account is active. Sign-in sessions expire after 30 days, or earlier when you sign out, sign the device out, or change your password.

When you delete your account from Settings › Data and privacy, we immediately erase your profile, photo, sessions, two-step verification, and preferences, and we switch off your Proxies. Top-ups and balance movements are retained, without name or email address, for the period required by accounting and tax obligations (in Italy, generally ten years).

Proxy usage logs and technical connection logs are retained for the period strictly necessary for purposes of network security, prevention and investigation of abuse, detection of fraudulent activity, dispute management, protection of ProxyHub's rights, and compliance with any legal obligations. In any event, such data will not be retained for a period exceeding two (2) years from the time it is recorded, unless a longer retention period is required or permitted by applicable law.

Website chat conversations are kept for 12 months after the last activity, then deleted automatically.

ProxyHub applies periodic review and deletion procedures for data no longer necessary for the purposes indicated above.

Such logs may include technical information such as IP addresses, timestamps, connection data, information relating to traffic consumption, and technical metadata necessary for the management and security of the Service. ProxyHub does not record or retain the content of communications or data exchanged by Users through the Service.

After this period has elapsed, the data is deleted or anonymized, unless its further retention is required or permitted by applicable law.

Any technical backup copies that may contain such data may be retained for a limited period, solely for purposes of security, operational continuity, and IT system recovery, in accordance with internal technical retention cycles, after which they are deleted.

Data relating to identity verification (KYC), sanctions screening results, and related compliance documentation is retained for a maximum period of five (5) years from the end of the business relationship or from the date of the relevant transaction (or for a longer period if required by competent authorities), after which it is securely deleted.

We may share personal data, only where strictly necessary, with:

• Payment service providers;
• Google, if you choose to sign in with Google;
• The email service provider used to send Service emails;
• Blockchain lookup services (block explorers and public nodes), to which we only send ProxyHub's wallet addresses and never your personal data;
• Server infrastructure, hosting, and cybersecurity service providers;
• Identity verification (KYC) service providers, where used to support the verification process;
• Providers of technical tools used for the security of the Service, infrastructure monitoring, abuse prevention, and operational system management;
• Competent authorities, law enforcement, judicial authorities, and other public bodies, where required by applicable law, legal obligations, or a valid order of the competent authority.

ProxyHub does not sell, transfer, or otherwise commercialize Users' personal data to third parties.

Personal data may be processed outside the European Economic Area (EEA) where necessary for the technical provision of the Service, including infrastructure, hosting, cybersecurity, or other technology providers used by ProxyHub.

In such cases, ProxyHub ensures the adoption of appropriate safeguards in accordance with GDPR requirements, such as European Commission adequacy decisions, Standard Contractual Clauses (SCCs), or other transfer mechanisms recognized by applicable law. ProxyHub also assesses, where necessary, the technical and organizational measures adopted by the providers involved in order to ensure an adequate level of protection for personal data.

Under the GDPR, Users have the right to:

• Access the personal data we hold about them;
• Request correction of inaccurate data;
• Request deletion of their personal data (where legally permitted);
• Request restriction of processing or object to it;
• Request data portability;
• Lodge a complaint with a data protection supervisory authority.

Requests may be submitted through our official Telegram support chat or by email to info@proxyhub.it.

You can exercise some rights directly from the client area: in Settings › Data and privacy you can download a copy of your data (JSON file) and delete your account at any time; in Settings › Profile you can correct your name, email, and photo; in Settings › Notifications you can choose which emails you receive.

ProxyHub implements appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or accidental destruction. However, no method of digital transmission or storage is 100% secure, and we cannot guarantee absolute security.

These measures include encrypted connections (HTTPS), passwords stored only as hashes (scrypt), revocable sessions, optional two-step verification, and email alerts for new sign-ins and for changes to password, email, and two-step verification.

Access to personal data is limited exclusively to authorized personnel and to the technical providers necessary for the provision of the Service, in accordance with the principle of necessity and access minimization.

ProxyHub may use automated systems for purposes of security, fraud detection, abuse prevention, and technical monitoring of the Service.

Such systems may automatically analyze technical data and metadata, including connection logs, destination IP addresses, usage patterns, and risk indicators, in order to identify potentially harmful activity or activity not compliant with these Terms and Conditions.

Such systems do not automatically make decisions that produce legal effects or similarly significant consequences for the User within the meaning of Article 22 of the GDPR.

Any decisions resulting in the suspension or permanent termination of the Service are taken only following an assessment by authorized personnel. Immediate and temporary technical interventions, such as preventive restrictions or suspensions, remain possible where necessary to protect security, network stability, or to prevent abuse.

In the event of a personal data breach, ProxyHub will assess the nature, scope, and potential risks of the incident and will adopt appropriate technical and organizational measures to contain and manage the breach in accordance with applicable law.

Where required by applicable law, ProxyHub will notify the breach to the competent supervisory authority and will inform data subjects without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

The ProxyHub website uses only technical cookies and similar technologies that are necessary for it to work. We do not use profiling, advertising, or analytics cookies, and we do not share cookie data with third parties.

• ph_session (technical cookie, 30 days): keeps you signed in to your account. It contains a random code; the database only stores a fingerprint (hash) of it.
• ph_in (technical cookie, 30 days): tells the website you are signed in, to show you the link to the client area. It contains no personal data.
• ph_otp, ph_verified, ph_email_otp, ph_2fa, ph_totp_setup, ph_oauth (technical cookies, 5 to 30 minutes): used only during sign-up, password recovery, email change, two-step verification, and sign-in with Google.
• lang (cookie, 12 months): remembers the language you chose with the language switch or in Settings.
• ph_chat (technical cookie, 90 days): set only if you write in the website chat, it links the window to your conversation.
• Browser local storage: remembers that you dismissed the cookie notice and the sign-in method you last used. This data stays on your device and is never sent to us.

Visit statistics: we use Umami, installed on our own servers, to count visits in aggregate form (pages viewed, referrer, device type). It uses no cookies, doesn't collect full IP addresses or data that identify you, and respects your browser's "Do Not Track" setting.

Because these technologies are strictly necessary or only store your own preferences, they do not require consent. You can delete them at any time from your browser settings.

ProxyHub reserves the right to update this Privacy Policy from time to time to reflect legislative changes, technical updates, or business developments. Updated versions will be published on our official channels and will become effective immediately upon publication.