Privacy Policy
Last updated: January 2025
Our commitment
Ekho VPN is built on a simple principle: your digital life is your business. This Privacy Policy explains what data we collect, why we collect it, and how we protect it. The short version: we collect as little as possible and never sell or share your personal data.
Information we collect
To create an account, we collect your email address and a password (stored as a secure hash). We do not collect your name, phone number, payment card details (handled by third-party processors), browsing history, connection logs, IP addresses, DNS queries, or any other traffic-related data.
Zero-log policy
We operate a strict zero-log policy. We do not log your VPN traffic, connection timestamps, session durations, bandwidth usage per user, or IP addresses assigned during a session. Our infrastructure is designed so that no activity logs are ever created.
Usage data
We may collect minimal anonymized technical data for service reliability purposes — such as aggregate server load metrics. This data cannot be used to identify you or your activity.
Payments
Payments are processed through established third-party payment providers. We receive only transaction confirmation and your subscription status. We do not store full card numbers or other sensitive payment data.
Data sharing
We do not sell, rent, or share your personal data with third parties. We do not use your data for advertising. We will comply with valid legal orders only if required by the laws of our jurisdiction, and we will notify you if legally permitted to do so.
Data security
Passwords are stored as strong cryptographic hashes. Account sessions are managed using JWT tokens with appropriate expiration. We use TLS for all data in transit between clients and our infrastructure.
Data retention
We retain your account data only as long as your account is active. You can request deletion of your account and associated data at any time by contacting our support team.
Your rights
You have the right to access the data we hold about you, request correction of inaccurate data, request deletion of your account, and withdraw consent where processing is based on consent. To exercise these rights, contact us at the address below.
Contact
For privacy-related inquiries, contact us at privacy@ekhovpn.com. We will respond within 30 days.