Privacy Policy

1. General

This Privacy Policy (the «Policy») explains how Kovra (the service; «we», the controller of the data described here) collects, uses and protects information you provide when using the Service at kovravpn.com and through the Telegram bot @KovraVPN_bot. You can reach us through that bot or at [email protected].

By using the Service you accept this Policy. If you do not agree, you must stop using the Service.

2. Data We Collect

We collect only the data necessary to operate the Service:

• a Telegram identifier (user ID, username, name) if you register through the Telegram bot, or an email address if you register through the website;

• technical connection data: the IP address of your device at the time of payment and when connecting to a node, and the hardware identifier (HWID) your VPN app sends, which binds each subscription link to one device and is kept for up to 365 days or until you reset that device;

• subscription and payment metadata (plan, term, transaction identifiers);

• service logs of interactions with the bot and the website interface.

We do not request or store identity documents, photographs, or payment-card details.

3. No Activity Logs

We do not keep logs of the websites you visit, the content of your traffic, or your DNS queries. We store only aggregate technical metrics (such as traffic volume per account and last-connection time) needed for billing and abuse prevention.

4. How We Use Your Data

We use the information solely to: provide the Service you ordered (issuing configurations, activating devices, managing subscriptions); identify you when you contact support; process payments through our payment processors; protect the Service against fraud and abuse; and send you notifications about your account and the Service.

5. Legal Bases for Processing

Where the GDPR applies, we process your data on the following bases: performance of our contract with you (providing the Service); our legitimate interests (security, fraud prevention, and improving the Service); compliance with legal obligations; and your consent, where required.

6. Payments

Payments are processed by third-party payment processors, for cards and for cryptocurrency. We do not store card details or wallet credentials. A card statement may show the processor's merchant name rather than Kovra. Blockchain transactions are public by nature, and on-chain data is outside our control.

7. Sharing of Data

We do not sell your data. We share the minimum necessary data with payment processors to complete a transaction, with our hosting and analytics provider Vercel to run the website, with authorities where required by law through due process, and otherwise only with your explicit consent.

8. International Transfers

Kovra operates servers in multiple countries. Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers, such as standard contractual clauses or equivalent measures.

9. Data Retention

We keep your data only for as long as necessary to provide the Service and for a reasonable period afterwards to resolve disputes and meet legal obligations. After you delete your account, your data is deleted within 30 days, except data we are required to retain by law.

10. Your Rights

You may at any time: request information about the data associated with your account; request correction or deletion of your data; restrict or object to certain processing; request a copy of your data in a portable format; and withdraw consent where processing is based on consent.

To exercise these rights, contact us via the bot @KovraVPN_bot or at [email protected]. If the GDPR applies to you, you also have the right to lodge a complaint with your local data-protection supervisory authority.

11. Cookies and Analytics

The website uses technical cookies required for the interface and to keep you signed in. It also uses Vercel Web Analytics and Vercel Speed Insights from our hosting provider, Vercel: they count page views and measure page speed in aggregate and do not use cookies. If you arrive through a link with campaign tags (utm_…), the website keeps those tags in your browser's local storage and attaches them to sign-up and payment events in that analytics. We do not use advertising cookies.

12. Security

We apply reasonable technical and organizational measures to protect your data, including encryption of data in transit, access controls, and regular infrastructure updates. No transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Children

The Service is not directed to children. We do not knowingly collect data from anyone under the age required for valid consent in their jurisdiction (16 in much of the EU). If you believe a child has provided us data, contact us and we will delete it.

14. Changes to This Policy

We may update this Policy. The current version is published at kovravpn.com/privacy with its revision date. Continued use after publication constitutes acceptance.

15. Contact

For questions about the processing of your personal data, contact the data controller via the Telegram bot @KovraVPN_bot or by email at [email protected].