Privacy notice

01Who we are

Oxynus provides managed proxy access: one account, one API and one bill, delivered over the networks of our infrastructure partners.

Oxynus is operated by OxynusAI. The legal entity, its registered address and, where required, a representative will be named here before any paid service starts. Until then, privacy questions go through the contact form.

02What we collect

Only what running your account needs:

• Account: your name, email address and a password hash (never the password itself).
• Security: session records with IP address and browser user agent; IP addresses in security logs (failed sign-ins, rate limits) and in the audit log of sensitive actions; two-factor secrets for staff accounts.
• API keys: stored as one-way hashes. We show a key once, when you create it.
• Orders and billing: quotes, orders, payment status, ledger entries and receipts.
• Proxy resources: connection details (stored encrypted), status, expiry and usage readings.
• Messages: what you send through the contact form or the support chat.

03Your proxy traffic

Your proxy traffic does not pass through Oxynus application servers. It travels from your software through the proxy network operated by our infrastructure partners, and from there to the sites you request.

We therefore do not see or log the pages you visit or the content you send. We record usage totals (for example, gigabytes used) to show your balance and bill you.

The network operator can see connection metadata — your connecting IP address, times, volumes and destinations — and, for unencrypted protocols such as plain HTTP, the content. Destination sites see the exit IP and whatever your requests contain. A proxy is not an anonymity service.

04Who we share data with

We do not sell personal data and we do not use it for advertising. We share it only with:

• Network infrastructure partners: the technical details needed to set up a resource (product, quantity, location and an internal reference). We do not send them your name or email address. If that ever changes, this notice will say so before it happens.
• Payment gateway: a hosted gateway processes payments and receives what it needs for that payment. We never see card numbers, wallet private keys or seed phrases. No live payment gateway is connected yet.
• AI provider: support chat messages, as described below.
• Google (Google Tag Manager and Google Analytics): only if you allow analytics in the cookie banner — which pages you visit, your browser and device type, and an approximate location derived from your IP address. Advertising features are switched off.
• Hosting and email delivery providers that run the service for us.
• Authorities, when the law requires it, or to investigate abuse that violates our acceptable use policy.

05Support chat (AI)

The support chat in your portal is an AI assistant, not a person. To answer, it reads your own account data — orders, resources and usage — and nothing from other customers. It cannot buy, change or cancel anything.

Your messages and the relevant account data are sent to our AI provider, DeepSeek, which processes them on servers in the People's Republic of China under its own terms. Do not paste passwords, API keys or proxy credentials into the chat.

Conversations are stored with your account so you can return to them, and are deleted automatically after the retention period set by Oxynus (currently 90 days). You can delete a conversation yourself at any time from the chat's conversation list.

06Cookies

We use a session cookie and a security token cookie to keep you signed in and protect forms; these are necessary. One cookie records your cookie choice. One optional cookie remembers your language, set only if you allow it.

Analytics is optional and off by default. Only if you allow it, we load Google Tag Manager and Google Analytics, which set cookies (named _ga and _ga_…) to count visits and see which pages are used. You can change your choice at any time under “Cookie settings” at the bottom of every page; turning analytics off deletes those cookies. We use no advertising cookies.

07How long we keep it

• Account data: while your account exists.
• Sessions: they expire after 120 minutes of inactivity.
• Orders, payments and ledger entries: for as long as accounting and tax law requires.
• Support chat: deleted automatically after the retention period above.
• Contact form messages: until they are resolved; we delete them on request.
• Security and audit logs: as long as needed to protect the service and investigate abuse.

08Your rights

Depending on where you live (for example, under the GDPR), you can ask to access, correct, export or delete your personal data, and object to or restrict how we use it. Some records, such as invoices, we must keep by law even after you close your account.

Write to us through the contact form. We answer within 30 days. You can also complain to your local data protection authority.

09Security

Connections use TLS. Passwords and API keys are stored as hashes; infrastructure and proxy credentials are encrypted at rest. Staff accounts require two-factor authentication, and sensitive staff actions are audited. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

10International transfers

Oxynus serves customers worldwide, so data may be processed outside your country — including by the AI provider in China noted above, and by Google in the United States if you allow analytics. Where the law requires safeguards for such transfers, we will put them in place before paid service starts.

11Children

Oxynus is a business service and is not meant for anyone under 18.

12Changes

When this notice changes, the date at the top changes too. If a change is significant, we will tell signed-in customers before it takes effect.