Privacy policy

1. What we collect

We follow data minimisation: we collect only what the service cannot run without.

• Email and a password hash, to sign you in.
• Order and payment history, to grant entitlements and keep accounts.
• Session records with IP and user agent, to protect your account.
• A device hardware identifier for the LiLi AI licence — it cannot identify a person.

2. What the VPN never records

No-logs is implemented technically, not just claimed (docs/05_VPN_INFRA.md).

• We do not store which sites you visit.
• We do not store DNS queries.
• We do not correlate outbound connections with users.
• Only aggregated traffic volume remains on the servers, for plan limits and abuse protection.

3. Encryption keys

The WireGuard private key is generated on your device and never reaches our servers. We store only the public key, which cannot decrypt traffic.

Exchange API keys in LiLi AI stay strictly local, in encrypted storage on your computer.

4. Sharing with third parties

We do not sell or share personal data with third parties for commercial purposes.

Payment providers receive the minimum data needed to process a transaction and issue a receipt.

5. Retention and deletion

Account data is kept while the account exists. On a deletion request the account and related personal data are removed, except records we must retain by law, such as payment documents.

6. Your rights

You can request a copy of your data, correct it or ask for deletion. Contact support from the email registered on the account.