Jawa the cat

Last updated: December 6, 2024

AzireVPN Privacy Policy

1. About This Privacy Policy.

This policy describes the information we collect from you, how we use that information and our legal basis for doing so. It also covers whether and how that information may be shared and your rights and choices regarding the information you provide to us. This Privacy Policy applies to the information that we obtain through your use of AzireVPN website and services.

2. Identification of the Data Controller.

AzireVPN is owned by Malwarebytes Inc., a global leader in real-time cyber protection. Our address is:

3979 Freedom Circle
12th Floor
Santa Clara, CA 95054, USA
privacy@malwarebytes.com

Personal Data
Purpose
Username and password
To use our services
Email

Recover the user’s account and/or password.

To send out marketing and other related communications.

Email and message are used to communicate with you, for example, when you ask for support, send us questions or comments, or report a problem.

Referral code
To give the person who referred you free time when you successfully purchase our service based on the referral.
Public keys
When you use our WireGuard service, these are used to authenticate you.
Tokens
An optional field used to describe the purpose of the generated token. This is for the user’s convenience.
Payment Identification Number
To track the status of your payment and to refund transactions.

We do not collect any Special Categories of Personal Data.

Automated Decision Making.

AzireVPN does not utilize Automated Decision Making about you with your Personal Data.

Retention period.

Where possible, we define the time period for how long your Personal Data is retained. Where we cannot define a time period, we list the criteria used to determine how long we retain that Personal Data.

Personal Data
Purpose
Token
Only as long as the token is active
Payment Identification Number
The payment relationship with the user's account is automatically removed after six (6) months.
Emails

Emails and content are deleted after 3 months of inactivity.

As long as your account as active and it is necessary for us to provide you services.

We will retain your information as long as your account is active, and as long as necessary to provide you with the services or as otherwise set forth in this Policy. We will also retain and use this information as necessary for the purposes defined in this Policy and to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements and protect AzireVPN's legal rights.

Rights Over Your Personal Data.

In addition to our commitment to transparency, we are also committed to rights you have over your Personal Data.

These rights include:

  • Access - You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information about the processing.
  • Rectification – You have the right to obtain the rectification of inaccurate personal data concerning you.
  • Erasure (“right to be forgotten) – You have the right to obtain the erasure of personal data concerning you under certain conditions.
  • Restriction of Processing – You can restrict processing of your Personal Data under certain conditions.
  • Right to Data Portability – Under certain conditions, you can receive the Personal Data in a in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance.
  • Right to Object – You can, on grounds relating to your particular situation, object to processing of your Personal Data.
  • In some circumstances, you can exercise some of these rights by signing in to your account.

7. Right to File a Complaint with a Supervisory Authority.

We hope that you would work with us to address any privacy concerns you have. You do have the right to file a complaint directly with a Supervisory Authority.

Depending on where you live, you would need to reach out to the applicable Supervisory Authority:

Swedish Data Protection Authority

Integritetsskyddsmyndigheten

Box 8114

104 20 Stockholm

Sweden

personuppgiftsincident@datainspektionen.se

European Data Protection Board list of Supervisory Authorities: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

8. Sharing of Personal Data with Authorized Parties.

We do not sell your Personal Data to third parties for marketing or advertising purposes. However, in the event of a merger, acquisition, or sale of all or part of our assets, your Personal Data may be transferred to the acquiring organization as part of that transaction. The acquiring organization’s authorized personnel would then have access to your Personal Data but would handle your Personal Data in accordance with this Privacy Policy.

In circumstances where we are required to provide information to one of our payment providers, we will replace the Personal Data with an anonymized information generated by our service.

9. International Data Transfers.

As we are a part of Malwarebytes, we abide by the Data Privacy Framework (“DPF”) for the European Union, Switzerland, and the UK. Adherence to principles within the DPF enables us to lawfully transfer Personal Data globally.

10. Links to Other Websites.

Our website may provide the ability to connect to other websites. These websites may operate independently from us and may have their own privacy notices or policies, which we strongly suggest you review. If any linked website is not owned or controlled by us, we are not responsible for its content, any use of the website, or the privacy practices of the operator of the website. We encourage you to read the privacy policies of any website you visit to understand how your personal data may be processed.

11. Security.

We take appropriate technical and organizational measures to protect your Personal Data. If you have any reasons to believe that your interaction with us is no longer secure and/or has been compromised, please contact us immediately. We take such reports seriously and will work promptly to address any security concerns.

12. Subprocessors.

This is a list of our subprocessors. The Privacy Policy will be updated when there are changes to the subprocessors. We encourage you to regularly check our website for the most up to date list of subprocessors.

Stripe, Inc.

PayPal (Europe) S.à r.l. et Cie, S.C.A.

CONFIRMO s.r.o.