Privacy Policy

1. Information We Collect

Personal Information

When you create an InstaTunnel account, we collect:

• Email address (for account creation and communication)
• API keys (automatically generated for authentication)
• Payment information (processed securely through Stripe for paid plans)

Usage Data

To provide and improve our service, we collect:

• Tunnel creation and usage statistics
• Request logs and analytics (anonymized)
• IP addresses (for security and performance optimization)
• Device and browser information
• Error logs and diagnostic data

Tunneled Data

Important: InstaTunnel acts as a proxy service. We do not store, log, or inspect the content of data passing through your tunnels. We only collect metadata such as:

• Request counts and timestamps
• HTTP status codes
• Request paths and methods
• Data transfer volumes

2. How We Use Your Information

We use your information to:

• Provide the Service: Create and manage your tunnels, process payments, provide customer support
• Improve Performance: Monitor service health, optimize routing, prevent abuse
• Communicate: Send important service updates, security notifications, and billing information
• Analytics: Understand usage patterns to improve features (using aggregated, anonymized data)
• Security: Detect and prevent fraud, abuse, and security threats

3. Data Sharing and Disclosure

We never sell your personal information. We may share data only in these limited circumstances:

• Service Providers: Trusted third parties who help us operate our service (Stripe for payments, AWS for hosting)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets (with prior notice)

Third-Party Services

We use these trusted services:

• Stripe: Payment processing (covered by Stripe's privacy policy)
• Amazon Web Services: Cloud hosting and infrastructure
• Resend: Email delivery service
• Cloudflare: CDN and DDoS protection

4. Data Security

We implement industry-standard security measures:

• End-to-end encryption for all tunnel traffic
• TLS/SSL encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Regular security audits and vulnerability assessments
• Limited access controls and employee training
• Automated backup and disaster recovery procedures

5. Data Retention

We retain data for different periods based on type and purpose:

• Account Data: Until you delete your account
• Usage Analytics: Up to 2 years for service improvement
• Payment Records: 7 years for tax and legal compliance
• Security Logs: Up to 1 year for security monitoring

6. Your Rights and Choices

Access and Control

You have the right to:

• Access and download your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of non-essential communications

Account Deletion

You can delete your account at any time through your dashboard settings. This will:

• Immediately terminate all active tunnels
• Delete your personal information within 30 days
• Cancel any active subscriptions
• Retain anonymized usage data for analytics

7. Cookies and Tracking

We use minimal cookies and tracking:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Anonymous usage statistics (you can opt out)
• No Advertising: We don't use cookies for advertising or cross-site tracking

8. International Data Transfers

InstaTunnel operates globally with servers in multiple regions. Your data may be processed in:

• United States (primary data center)
• European Union (GDPR compliance)
• Other regions where we operate tunnel servers

We ensure appropriate safeguards are in place for all international transfers.

9. Children's Privacy

InstaTunnel is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of the sale of personal information (we don't sell data)
• Right to non-discrimination for exercising privacy rights

11. GDPR Compliance

For users in the European Union, we comply with the General Data Protection Regulation:

• Lawful basis for processing (legitimate interest, contract, consent)
• Data minimization and purpose limitation
• Right to portability and erasure
• Data Protection Officer contact: privacy@instatunnel.my

12. Changes to This Policy

We may update this privacy policy from time to time. When we do:

• We'll notify you via email for material changes
• We'll update the "Last updated" date at the top
• The new policy will take effect 30 days after notification
• Continued use of the service constitutes acceptance

13. Contact Us

If you have questions about this privacy policy or your data: