Privacy policy

1. Who is the data controller?

ProxyMobile SAS, whose registered office is at 12 rue de la Gare, 69003 Lyon, France, is the controller for the processing described below. For any question about your data, write to legal@proxymobile.fr.

2. What data do we collect?

We do not keep the browsing history that transits through the proxy: not the sites visited, not the URLs, not the content exchanged. We count volumes and sessions only.

• Account data: email address, password hash (never the password itself), company name where you provide one, country and language.
• Billing data: order history, amounts and payment statuses. Card data never passes through our servers: it is processed exclusively by Stripe.
• Session data: session identifier, IP address used to connect to the site, user agent and timestamp. These elements serve account security.
• Usage data: exchanged data volume, in both directions, and the number of open sessions, per day and per subscription. These measurements are required to enforce quotas and draw your charts.
• Support messages: the content of requests sent through the contact form or by email.

3. Why, and on what legal basis?

• Performance of the contract: creating the account, providing the service, enforcing quotas, billing and support.
• Legitimate interest: service security, fraud and abuse prevention, technical logging and reliability improvements.
• Legal obligation: retaining invoices and responding to lawful requests from competent authorities.
• Consent: sending commercial information where applicable, revocable at any time.

4. How long do we keep your data?

• Account data: for the duration of the contractual relationship, then three years after the last contact for prospecting purposes, unless a legal obligation requires otherwise.
• Invoices and accounting records: ten years, in line with French commercial law.
• Detailed usage data: 35 days. Daily aggregates are kept for 13 months to draw the charts.
• Expired sessions: deleted after 40 days.
• Technical event log: 180 days.
• Support messages: three years from the last exchange.

5. Who can access your data?

Your data is accessible to the ProxyMobile SAS team, limited to what is needed to operate the service. We use technical processors:

• Cloudflare for hosting the site, the control plane and the database.
• Stripe for payment processing and subscription management.
• Resend for transactional emails such as confirmations, invoices and alerts.
• Our gateway hosting provider, a server located in France and operated by us.

6. Cookies and trackers

This site uses no advertising cookie, no third-party analytics and no social network tracker. No prior consent is therefore required for non-essential trackers, because there are none.

The only cookie set is pm_session: a strictly necessary session cookie, HttpOnly, Secure and SameSite=Lax, with a 30-day lifetime. It keeps you signed in to the customer portal; deleting it signs you out.

Our audience measurement relies on aggregated, anonymous data, namely server-side request counting, with no individual identifier.

7. Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction of processing, objection and portability, as well as the right to withdraw consent at any time. To exercise them, write to legal@proxymobile.fr stating your request. You will receive an answer within one month.

You may also lodge a complaint with the French data protection authority, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at cnil.fr.

8. Security

Passwords are stored as PBKDF2-SHA256 hashes with 210,000 iterations. Proxy passwords are stored as SHA-256 hashes and displayed in clear only once, at creation. Traffic with the site is encrypted in TLS. Access to operating systems is restricted and logged.

9. Legal requests and obligations

We may be required to retain or disclose data in response to a request from a competent judicial or administrative authority, under the conditions laid down by law. The customer is informed where the law permits.

10. Changes to this policy

This policy may be updated to reflect a change in the service or in regulation. The last update date appears at the top of the page. In the event of a substantial change, customers are notified by email.