Privacy Policy

1. Who we are

SecureBreez (securebreez.com) is a VPN service for individuals, families and businesses. The service is provided by Helioster System, a proprietorship of Aman Awasthi, with GSTIN 23BUAPA6584L2ZK and Shops & Establishment Reg. No. INDO260807SE001326, registered at 129, Hira Bagh Colony, A.B. Road, Behind Kia Showroom, Opposite Scheme No. 78 (near Jayshri Kitchen), Indore, Madhya Pradesh 452010, India (“SecureBreez”, “we”, “us”).

For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary, and for the purposes of the EU General Data Protection Regulation and the UK GDPR we are the controller of the personal data described in this policy.

This policy explains what we collect, why, how long we keep it, who we share it with and the rights you have. It applies to our website, our apps and the VPN service. See also our GDPR & DPDP Act 2023 Notice and Cookie Policy.

2. Data we collect

We collect only what we need to run your account, take payment, keep the network healthy and meet our legal obligations.

3. What we never collect

We operate a strict no-activity-logs policy. When you are connected to SecureBreez, we do not log:

• your browsing history or the websites you visit;
• the content of your traffic;
• your DNS queries;
• the apps or services you use through the VPN.

We do not sell your personal data, and we do not use your VPN activity for advertising or profiling. We never store full card numbers; card details are handled directly by our payment processors.

4. How VPN traffic is handled

Your traffic is encrypted between your device and a VPN server and then sent on to its destination. The VPN network is operated by our infrastructure partner (a sub-processor) on our behalf, under contractual data-protection commitments that are consistent with this policy.

The only connection-related data processed is the short-lived metadata described above (session start and server), used to enforce the device limit and keep the network healthy. It is deleted on a short rolling basis and is never linked to the websites you visit or the content of your traffic.

We do not operate VPN servers located in India. See Transparency & Law Enforcement for why this matters.

5. Cookies

Our website uses strictly necessary cookies only by default. Optional analytics or marketing cookies are off unless you opt in, and you can change your choice at any time using the “Cookie settings” link in the footer. Full details are in our Cookie Policy.

6. Who we share data with

We share personal data only with service providers who help us run SecureBreez, and only to the extent they need it:

• Payment processors: Razorpay, Cashfree, PhonePe and CCAvenue (India); Paddle, acting as our reseller and merchant of record, and Stripe (international); CoinGate and BTCPay (cryptocurrency). They process payment details under their own privacy policies and legal obligations.
• Our infrastructure partner (a sub-processor), which operates the VPN network and provisions VPN credentials on our behalf.
• Email and communication providers that deliver account emails, invoices and support replies.
• Hosting and security providers that host our website and account systems.
• Professional advisers (accountants, lawyers, auditors) where necessary.
• Authorities, where we are legally required to, following the process in our Transparency page. Because we keep no activity logs, we can only provide the account data we hold.
• A successor business, if SecureBreez is sold or transferred, subject to this policy.

We require contractual data-protection commitments from every processor and do not permit them to use your data for their own purposes.

We do not sell, use or disclose to third parties any data about your use of the VPN service for any purpose. The only parties that receive personal data are the service providers listed above, acting on our instructions to provide the service. We do not sell personal data and do not use it for advertising or tracking.

Browser extensions

The SecureBreez browser extension routes browser traffic through our servers and stores only your sign-in token, chosen location and settings on your device. It does not collect browsing history or website content. SecureBreez's use of information received from the Chrome Web Store will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

7. International transfers

We are based in India and some of our service providers process data in other countries. Where we transfer personal data outside India, we do so in line with the DPDP Act and any restrictions notified by the Government of India.

Where personal data of people in the EU, EEA or UK is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where relevant) or another lawful transfer mechanism, together with additional safeguards where needed.

8. Security

We protect data with encryption in transit, hashed passwords, access controls limited to people who need them, and regular review of our providers. No system is perfectly secure, so we cannot guarantee absolute security, but if a personal data breach occurs we will notify affected users and the relevant authorities as required by law, including the Data Protection Board of India and, where applicable, CERT-In.

9. Retention

We keep personal data only as long as needed for the purposes above:

• Account data: while your account is active, then deleted or anonymised after closure.
• Billing records and invoices: as required by Indian tax law, typically 8 years under the CGST Act.
• Connection metadata: deleted on a short rolling basis.
• Support tickets: as long as needed to resolve your request and any follow-up.

We may keep data longer where needed to establish, exercise or defend legal claims, or where the law requires it.

10. Your rights

Under the DPDP Act, 2023 (India)

• Right to access a summary of your personal data and the processing activities;
• Right to correction, completion and updating of your data;
• Right to erasure of data that is no longer needed (subject to legal retention, such as tax records);
• Right to withdraw consent at any time, as easily as you gave it (this does not affect processing already carried out);
• Right to grievance redressal through our Grievance Officer, and then to complain to the Data Protection Board of India;
• Right to nominate another person to exercise your rights in the event of your death or incapacity.

Under the GDPR / UK GDPR

• Access, rectification, erasure, restriction of processing and data portability;
• Right to object to processing based on legitimate interests, and to direct marketing at any time;
• Right to withdraw consent where we rely on consent;
• Right to lodge a complaint with your local supervisory authority (for example, your EU member state data protection authority or the UK ICO).

To exercise any right, email Info@securebreez.com from the address on your account. We aim to respond within 30 days. More detail is in our GDPR & DPDP Act 2023 Notice.

11. Children

SecureBreez is not intended for anyone under 18 without the verifiable consent of a parent or lawful guardian. We do not knowingly collect personal data from children without such consent, and we do not track, behaviourally monitor or target advertising at children. If you believe a child has given us personal data without consent, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. For material changes we will notify you by email or in the app before they take effect, and ask for fresh consent where the law requires it.

13. Contact and Grievance Officer

Questions about this policy: Info@securebreez.com · +91 70671 55525 (Monday – Saturday, 10:00 – 19:00 IST (email support is answered 7 days a week)).

Grievance Officer: Aman Awasthi, Grievance Officer & Proprietor. Email: Info@securebreez.com, phone: +91 70671 55525. Address: 129, Hira Bagh Colony, A.B. Road, Behind Kia Showroom, Opposite Scheme No. 78 (near Jayshri Kitchen), Indore, Madhya Pradesh 452010, India. We acknowledge complaints within 24 hours and resolve them within 15 days. See the Grievance Officer page.