In short
- We collect what we need to run your account, take payments, meter usage and prevent abuse.
- We do not read or store the content of the traffic you send through our proxies.
- We do not sell personal data.
- Measurement cookies and advertising tags are used only with your consent in the EU, EEA, UK and Switzerland, and you can switch them off anywhere under Cookie preferences.
- You can ask us to access, correct or delete your data at [email protected].
These documents cover every Nefo product
Proxies
IP addresses
- 24-hour Dedicated Residential IP
- Long-term Residential & Mobile IP
- Static Residential ISP IP
- Static Datacenter IP
Servers
1. Who is responsible
com).
2. Data we collect
- Account: email, name, language, password (stored only as a hash), and anything you add to your profile, such as company, time zone or Telegram handle. If you sign in with Google, GitHub or our Telegram bot, we receive your verified email, name and account ID from that service.
- Security: the IP address and country you signed up from, every sign-in attempt with its IP address and country, two-factor settings, and a log of important actions on your account with the IP address and browser used.
- Orders and payments: what you bought, amounts, payment method and payment references, your account balance history, and the IP address and browser used to place each order. From payment providers we receive what they pass back, such as a PayPal payer email, a Binance Pay payer ID or a crypto transaction reference. Card details are entered on our payment providers' own secure forms: we never receive or store your full card number.
- Service usage: bandwidth used per product and per proxy login, including the target location you chose; for mobile ports, data used per day, the exit IPs seen and your IP allow-list; for IP Vault, usage per IP; for servers, the server's IP, username, operating system, specifications, an encrypted root password and any SSH public keys you add. We never store SSH private keys we generate for you.
- Dedicated IPs: the static, ISP and IP Vault IPs assigned to you, their rental periods and any IP allow-lists you set.
- Support: messages you send us through the website chat, email or Telegram, with the email, IP address, country and page attached to a chat.
- Website visits: a first-party visitor ID, the pages you view, and how you reached us (campaign tag, referring site, referral link). See section 5.
3. Traffic through our proxies
We do not inspect or store the content of the traffic that passes through our proxies or servers. We measure its volume, time and the location you targeted, to bill you and to keep the network healthy, and our systems keep short technical logs about connections, such as rejected connection attempts.
Where an upstream network gives us a per-website breakdown of your usage, we fetch it live to show it in your dashboard and do not store it. You can turn this off under Settings → Privacy, after which we no longer request or show it.
4. Why we use your data
- To provide the Service under our contract with you: creating your account, delivering and billing products, metering usage, sending service emails and answering support.
- To meet legal obligations, such as keeping accounting records.
- For our legitimate interests: keeping accounts and the network secure, preventing fraud and abuse, responding to payment disputes with order and usage records, and understanding how visitors find and use our website.
- With your consent where the law requires it: our measurement cookies and advertising measurement (section 5), and any marketing email, which you can stop at any time.
7. International transfers
We are based in the United Kingdom. Our servers and some of our providers process data outside the UK, including in the European Economic Area and the United States. Where they do, we rely on the safeguards UK data-protection law provides for such transfers, such as adequacy regulations or standard contractual clauses with the UK's International Data Transfer Addendum.
8. How long we keep data
We keep account data while your account exists. Order, payment and invoice records are kept for as long as accounting and tax law requires. Security logs and usage statistics are kept for as long as they are useful for security, billing and dispute handling. Anonymous page views are deleted after 45 days. When a rental ends, the server or IP it held is released and its data is deleted.
9. Your rights
Depending on where you live, you can ask to access, correct or delete your personal data, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Write to [email protected] from your account email; we answer within one month.
When we delete an account, we remove or anonymise its personal data, except what we must keep by law (such as invoices) or need to settle an open payment or dispute. If you think we have not handled your data properly, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data-protection authority where you live.
10. Security
Passwords are stored only as hashes, server root passwords are encrypted, sign-ins are logged, and you can protect your account with two-factor authentication. No system is perfectly secure, so please use a strong, unique password and keep your API keys private.
11. Browser extension
The browser extension keeps one proxy credential and one scoped API key in your browser's local storage and sends them nowhere except nefo.net. While it is switched on, your browsing is routed through our proxy network and section 3 applies to it unchanged; while it is switched off, it routes nothing. Its only page script runs on nefo.net, to receive the connection key when you press Connect; it reads no other page and injects nothing. The Check button asks third-party IP lookup services which IP address you appear to come from; that request carries only the address you already show every site you visit, and we neither receive nor store the result. Revoking the key named "Browser extension" under API keys disconnects it immediately.
12. Phone app
The Nefo Proxy app for Android and iPhone sends your phone's traffic through the proxy you pick, using the phone's own VPN service; on Android you can also send only the apps you choose. Section 3 applies to that traffic unchanged: we do not inspect or store its content, and the app itself keeps no record of the sites or apps you use. With a proxy from another provider, that traffic goes to that provider and never reaches us.
The app keeps your proxy lines and settings on your phone and, if you sign in, one scoped API key, which it sends nowhere except nefo.net; signing in also shows your account email in the app. To show which IP websites see, the app asks nefo.net or a third-party IP lookup service through the proxy, so the request carries only the proxy's address. When you tap Report a problem, it sends us your message, the email address you enter (optional), the app and system (Android or iOS) versions, the phone model and a technical summary of the connection, without proxy passwords or the sites you visit. The app has no ads, analytics or tracking. Sign out in the app revokes its key at once, and uninstalling the app deletes everything it kept on your phone.
13. Deleting your account
To delete your Nefo account, including the account you use in the Nefo Proxy app, write to [email protected] from the email address on the account and ask us to delete it. We confirm the request and complete it within one month. Deleting the account ends every proxy, IP and server on it and revokes all of its API keys.
We then remove or anonymise the account's personal data. We keep only what we must: invoices and payment records for as long as accounting and tax law requires, and what we need to settle an open payment or dispute (section 9). To stop using the app without deleting your account, tap Sign out in the app, or revoke the key named "Phone app" under API keys.
14. Children
The Service is not for anyone under 18, and we do not knowingly collect their data.
15. Changes to this policy
We may update this policy. We announce material changes on the website or by email, and the date at the top always shows the latest version.
Questions about these documents? Write to [email protected]. To report abuse, write to [email protected].
Frequently asked questions
No. Nefo does not read or store the content of the traffic you send through its proxies. It collects what it needs to run your account, take payments, meter usage and prevent abuse.
No. The policy states that Nefo does not sell personal data.
In the EU, EEA, UK and Switzerland, measurement cookies and advertising tags are used only with your consent. You can switch them off anywhere under Cookie preferences.
Email the address given in the policy to ask for access, correction or deletion. Other contact routes are on the contact page.