Privacy Policy

This policy explains what personal data Leastslow, 1765 Greensboro Station Place 9th Floor, Tower 1, Mclean, VA, 22102 ("Leastslow", "we", "us") collects when you use our website, our dashboard and our proxies, and what we do with it. We are the controller of that data.

1. What we collect

Account

• Your name and email address.
• Your sign-in details. We never store your password in a readable form. If you sign in through a third party such as Google, we receive the basic profile details it shares with us, such as your name and email address, and no password.

Security and technical data

Technical information about how you reach the website and the dashboard, such as your IP address, browser and device details and the times of your visits. We use it to keep your account secure, to protect the service against abuse and automated attacks, and to find and fix problems.

Orders and billing

• What you ordered, the amounts, your invoices and the history of your payments.
• The references our payment providers give us for you and your payments. We do not receive or store your full card number or its security code, those stay with the payment provider.

How you set up your proxies

The proxy credentials, allowlists, denylists, names and tags you create in the dashboard. Credentials are stored securely.

Use of the proxies

To deliver the service, apply your access settings and deal with abuse, our network processes technical data about connections made through your proxies. We do not sell this data and we do not use it for advertising.

When you contact us

The messages you send us by email or on our Discord server, and the contact details that come with them.

Cookies and analytics

This website sets no cookies and runs no advertising trackers. To see how many people visit and which pages they read, we use a privacy-friendly analytics service that works without cookies and does not follow you across other sites. The dashboard uses only the cookies that are essential for it to work, such as keeping you signed in.

2. Why we use it

• To provide the service you asked for (performance of our contract with you): creating your account, taking payment, delivering and renewing your proxies, applying your credentials and access lists, and answering your requests.
• To keep the service secure and prevent abuse (our legitimate interest): protecting accounts and the service, investigating abuse, fixing errors, and contesting unfounded payment disputes.
• To meet our legal obligations: keeping accounting and tax records, and answering lawful requests from authorities.
• To send you service messages: email verification, password resets, and notices about your account, billing and changes to our terms. We do not send marketing email unless you have asked for it.

3. Who we share it with

We do not sell your personal data. We share it only with the service providers that help us run the service, each of which receives only what it needs:

• Payments: Stripe, NOWPayments.
• Sign-in: Google, only if you choose to sign in with it.
• Hosting and infrastructure: Vercel, Cloudflare, Upstash.
• Email and service operations: Resend, Sentry.
• Website analytics: Plausible.

We may also disclose data when the law requires it, to establish or defend legal claims, to a bank or payment provider when contesting a payment dispute, or to a successor if our business is sold or merged, under the same commitments as in this policy.

4. Where it is processed

Our providers may process data in countries other than yours, including the United States. Where data leaves the European Economic Area or the United Kingdom, we rely on the safeguards the law provides for, such as adequacy decisions and standard contractual clauses.

5. How long we keep it

• Account data and your proxy settings: for as long as your account exists.
• Orders, invoices and payment records: for as long as accounting and tax law requires, even after your account is closed.
• Security and technical data: only for as long as needed to run and protect the service and to handle abuse.

After that, data is deleted or made anonymous.

6. How we protect it

We use technical and organisational measures appropriate to the risk to protect your data against loss, misuse and unauthorised access, and we limit access to it to the people who need it to run the service. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

7. Your rights

Depending on where you live, you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, where we have no legal reason to keep it;
• restrict or object to certain uses of your data;
• receive your data in a portable format;
• lodge a complaint with your local data protection authority.

To use any of these, write to support@leastslow.com from the email address of your account. We answer within one month.

8. Children

The service is not meant for anyone under 18, and we do not knowingly collect data from them. If you believe a minor has created an account, tell us and we will remove it.

9. Changes to this policy

We may update this policy. The current version is always on this page with the date it was last changed. If a change significantly affects how we use your data, we will tell you by email or in the dashboard before it applies.

10. Contact

Questions about your data: support@leastslow.com. The rules for using the service are in our Terms of Service.