Privacy Policy
Last updated: December 28, 2024
Longtou, LLC ("Company", "we", "us", or "our") operates ReelsVPN ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
Account Information
When you create an account, we collect:
- •Email address
- •Name (if provided)
- •Organization name (if applicable)
- •Authentication tokens and session data
Payment Information
We use Stripe to process payments. When you subscribe, Stripe collects your payment card information directly. We do not store your full credit card number on our servers. We receive from Stripe:
- •Billing address
- •Last four digits of your card (for display purposes)
- •Payment status and transaction history
Usage Information
To provide and bill for our Service, we collect:
- •Bandwidth consumed: Total data transferred through your connection keys
- •Server assignments: Which VPN servers your keys are assigned to
What We Minimize
We are committed to your privacy. Our VPN servers are configured to minimize data collection. We do not routinely collect or log:
- •Browsing history: Websites you visit through the VPN
- •DNS queries: Domain name lookups
- •Traffic content: The content of your communications
- •Original IP addresses: Your originating IP address when you connect
Technical Information
When you visit our website, we may automatically collect:
- •Browser type and version
- •Device type
- •Pages visited on our marketing site
2. How We Use Your Information
We use the information we collect to:
- •Provide, operate, and maintain the Service
- •Process payments and manage your subscription
- •Enforce bandwidth limits and subscription tiers
- •Communicate with you about your account and the Service
- •Respond to customer support requests
- •Detect and prevent abuse, fraud, and violations of our Terms of Service
- •Improve and optimize the Service
- •Comply with legal obligations
3. How We Share Your Information
We may share your information with:
- •Payment Processors: Stripe processes your payment information directly under their own privacy policy
- •Infrastructure Providers: We use cloud hosting services to operate our VPN servers
- •Legal Requirements: We may disclose information if required by law, subpoena, or court order
We do not sell your personal information to third parties.
4. Law Enforcement Requests
If we receive a valid legal request (such as a subpoena or court order), we will comply with applicable law. We can only provide information that we actually possess at the time of the request:
- •What we may provide: Account information (email, name), subscription status, aggregate bandwidth usage
- •What we generally do not have: Browsing history, DNS queries, traffic content, or originating IP addresses, as our systems are configured to minimize collection of this data
5. Data Retention
- •Account data: Retained until you request deletion of your account
- •Usage records: Retained only as long as necessary for billing and support purposes, then deleted or aggregated
- •Payment records: Retained as required by law and for accounting purposes
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit, secure database connections, and access controls for our infrastructure.
7. Your Rights and Choices
You have the right to:
- •Access: Request a copy of the personal information we hold about you
- •Correction: Update or correct your account information
- •Deletion: Request deletion of your account and associated data
- •Cancellation: Cancel your subscription at any time
To exercise these rights, please contact us at [email protected].
8. Cookies and Analytics
We use cookies and similar technologies for:
- •Session management: Essential cookies to keep you logged in
- •Security: Cookies to prevent cross-site request forgery and other attacks
- •Analytics: We use analytics tools to understand how users interact with our Service and to improve it
We do not use advertising cookies or sell data to advertisers. You can disable cookies in your browser settings, but this may affect your ability to use the Service.
9. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.
10. International Users
Our Service is operated in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.
11. Additional Rights for EU/UK Users
If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR:
- •Legal Basis: We process your data based on: (a) contract performance (to provide the Service), (b) legitimate interests (to improve and secure the Service), and (c) your consent (where applicable)
- •Right to Access: Request a copy of your personal data
- •Right to Rectification: Request correction of inaccurate data
- •Right to Erasure: Request deletion of your data ("right to be forgotten")
- •Right to Portability: Receive your data in a structured, machine-readable format
- •Right to Object: Object to processing based on legitimate interests
- •Right to Restrict Processing: Request limitation of processing in certain circumstances
- •Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time
International Transfers: Your data is transferred to and processed in the United States. We take steps to ensure your data is protected in accordance with this Privacy Policy regardless of where it is processed.
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights.
To exercise any of these rights, contact us at [email protected].
12. Additional Rights for California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- •Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
- •Right to Delete: Request deletion of your personal information
- •Right to Opt-Out: We do not sell personal information, so this right does not apply
- •Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise these rights, contact us at [email protected]. We will verify your identity before processing your request.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy, please contact us at:
Longtou, LLC
Email: [email protected]