Privacy policy
Last updated 15 November 2026
This policy explains what personal information Frescoa collects, why, and your rights. We aim to collect the minimum needed to run a secure, accountable proxy service.
What we collect
- Account data — name, email, company name, hashed password, and plan and billing status.
- Connection metadata — for each proxied connection: time, account and API key, exit country and node, destination hostname and port, bytes transferred, duration, result code, your client IP and any session id you set.
- Usage aggregates — bandwidth and request counts per hour, key and country, for billing and your dashboard.
- Website data — a session cookie that keeps you signed in, and standard server logs.
What we don't collect
We do not decrypt HTTPS traffic and do not store the contents, paths, headers or bodies of requests passing through the proxy.
Why we use it
- To provide, meter and bill the Service.
- To enforce limits and detect, investigate and prevent abuse, fraud and security incidents.
- To send service emails (verification, password resets, usage alerts).
- To comply with legal obligations.
Retention
Connection metadata is kept for 30 days, then deleted. Usage aggregates and invoices are kept for as long as needed for billing, tax and accounting purposes. Account data is kept while your account is open and deleted or anonymised after closure unless the law requires otherwise.
Sharing
We share data only with processors that help run the Service (cloud hosting, email delivery, payment processing, IP-geolocation lookups of our own infrastructure IPs) under appropriate agreements, or when legally required. We do not sell personal information.
Your rights
Depending on where you live (for example under POPIA or the GDPR), you may have rights to access, correct, delete or export your data, and to object to certain processing. Contact privacy@frescoa.com.
Security
Passwords and API keys are stored hashed; infrastructure links are encrypted; access to production data is restricted. No system is perfectly secure — please report vulnerabilities to security@frescoa.com.