Privacy Policy

At Cola VPN, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our VPN services.

We understand that privacy is fundamental to our users, and we have designed our service with privacy-first principles to ensure your online activities remain private and secure.

2.1 Personal Information

When you create an account, we may collect:

• Email address for account creation and communication
• Payment information (processed securely by third-party payment processors)
• Support communications and feedback

2.2 Technical Information

We may collect limited technical information:

• Connection timestamps and session duration
• Bandwidth usage for service optimization
• Device type and operating system for compatibility
• App version for support and updates

2.3 What We DON'T Collect

We use the information we collect for the following purposes:

• Service Provision: To provide and maintain our VPN service
• Account Management: To manage your account and subscriptions
• Customer Support: To respond to your inquiries and provide assistance
• Service Improvement: To analyze usage patterns and improve our service
• Security: To detect and prevent fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing (encrypted and secure)
• Customer support services
• Infrastructure and hosting services

4.2 Legal Requirements

We may disclose information if required by law or to:

• Comply with valid legal processes
• Protect our rights and property
• Ensure user safety and security

We implement industry-standard security measures to protect your information:

• Encryption: AES-256 encryption for all VPN traffic
• Secure Protocols: OpenVPN, IKEv2, and WireGuard protocols
• No-Log Architecture: Technical infrastructure designed to not store user activity
• Regular Audits: Security assessments and vulnerability testing
• Secure Infrastructure: Servers in secure data centers with physical protection

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your information only as long as necessary:

• Account Information: Retained while your account is active
• Payment Records: Retained for tax and legal compliance (typically 7 years)
• Support Communications: Retained for 2 years for service improvement
• Technical Data: Aggregated and anonymized data may be retained indefinitely

When you delete your account, we will delete your personal information within 30 days, except where retention is required by law.

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your information
• Objection: Object to certain types of processing

To exercise these rights, please contact us at privacy@colavpn.com. We will respond to your request within 30 days.

Our services operate globally. Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place:

• Adherence to international privacy frameworks
• Contractual protections with service providers
• Compliance with applicable data protection laws

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a prominent notice in our app

Your continued use of our service after any changes constitutes acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy or our privacy practices, please contact us: