This Privacy Policy ("Policy") describes how Hero Proxies ("Hero Proxies," "Company," "we," "us," or "our") collects, uses, stores, and discloses ("process" or "processing") personal data when you use our services ("Services"), including when you visit our website at heroproxies.com ("Site"), interact with our Discord community, or otherwise communicate with us.
This Policy is effective as of the date shown above. By using our Services, you acknowledge and agree that Hero Proxies may process your personal data as described in this Policy. If you do not agree with this Policy, please do not use our Services.
1. Types of Information We Collect
1.1 Personal Data
We collect information that identifies, relates to, or is reasonably capable of being associated with you ("Personal Data"). The table below describes the categories of Personal Data we collect:
| Category | Examples | Sources |
|---|---|---|
| Identifiers | Name, email address, IP address, Discord ID, Discord username, account credentials | Directly from you; from Discord (via OAuth); automatically collected |
| Account Information | Username, hashed password, profile image, email verification status, account creation date | Directly from you; from Discord (via OAuth) |
| Commercial Information | Purchase history, bandwidth balances, transaction records, Stripe customer ID | From our payment processor (Stripe); generated through your use of Services |
| Internet Activity | Browser type, device information, user agent, pages visited, interactions with the Site | Automatically collected through cookies and analytics |
| Usage Data | Bandwidth consumption, proxy usage statistics, service usage patterns | Generated through your use of Services |
1.2 Payment Information
We do not collect or store your payment card information. All payment processing is handled entirely by our third-party payment processor, Stripe. We receive only a Stripe customer ID and transaction confirmation details. To learn more about Stripe's privacy practices, please see Stripe's Privacy Policy.
1.3 Information We Do NOT Collect
We do not collect:
- Payment card numbers, CVV codes, or bank account details
- Government-issued identification numbers (SSN, passport, etc.)
- Racial or ethnic origin, religious beliefs, or political opinions
- Health, genetic, or biometric information
- Precise geolocation data
- Personal data from anyone known to be under 18 years of age
1.4 If You Do Not Provide Personal Data
Certain Personal Data is required to create an account and use our Services. If you decline to provide required information, we may not be able to provide the Services to you. We will inform you at the time of collection if specific information is required.
2. Usage Data and Technical Information
2.1 Automatic Collection
When you access our Site or use our Services, we automatically collect certain technical information, including:
- Log Data: IP address, browser type, operating system, referring URLs, pages viewed, and timestamps
- Device Data: Device type, unique device identifiers, and hardware settings
- Session Data: Authentication tokens, session duration, and user agent strings
2.2 Cookies
Cookies are small text files stored on your device that help us provide and improve our Services.
Essential Cookies: We use essential cookies to:
- Maintain your authenticated session
- Remember your preferences
- Ensure security of your account
These cookies are necessary for the Site to function properly and cannot be disabled. We do not use advertising or marketing cookies.
2.3 Analytics
We use Cloudflare Web Analytics and may use similar privacy-focused analytics services to understand how users interact with our Site. These tools collect aggregated, anonymized, or pseudonymized data about page views, visitor counts, and general usage patterns. This data is used solely to improve our Services and is not used for advertising or sold to third parties.
You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain features of the Site.
2.4 Do Not Track Signals
Some browsers include the ability to transmit "Do Not Track" (DNT) signals. We do not currently process or respond to DNT signals. To learn more about DNT, visit allaboutdnt.com.
3. How We Use Your Information
We process your Personal Data for the purposes described below. For users in the European Economic Area (EEA), we have identified the legal basis for each processing activity.
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Create and manage your account | Identifiers, Account Information | Contract performance |
| Provide and deliver our Services | Identifiers, Commercial Information, Usage Data | Contract performance |
| Process payments and billing | Identifiers, Commercial Information | Contract performance |
| Send transactional communications (receipts, password resets, verification emails) | Identifiers, Account Information | Contract performance |
| Respond to support requests | Identifiers, Account Information, Usage Data | Contract performance; Legitimate interest |
| Prevent fraud and ensure security | Identifiers, Internet Activity, Session Data | Legitimate interest |
| Analyze and improve our Services | Internet Activity, Usage Data | Legitimate interest |
| Comply with legal obligations | All categories as required | Legal obligation |
| Enforce our terms and protect our rights | Identifiers, Account Information, Usage Data | Legitimate interest |
We do not sell your Personal Data to third parties.
3.1 Limitation of Purpose
We will use your Personal Data only for the purposes for which we collected it. If we need to use your data for a materially different purpose, we will notify you and, where required, obtain your consent.
4. Disclosure to Third Parties
We may disclose your Personal Data to third parties for legitimate business purposes. When we do so, we require recipients to protect your data and use it only for the specified purposes.
4.1 Service Providers
We use the following third-party service providers:
| Provider | Purpose | Data Shared |
|---|---|---|
| Cloudflare | Hosting, content delivery, security, database, analytics | All Site traffic and usage data |
| Stripe | Payment processing | Email, name, billing information |
| Discord | OAuth authentication, community support | Discord ID, email (if authorized), username |
| Resend | Transactional email delivery | Email address, name |
| Proxy Infrastructure Providers | Proxy service delivery | Generated credentials (not Personal Data) |
4.2 Other Disclosures
We may also disclose your Personal Data:
- To comply with applicable laws, regulations, or legal processes
- To respond to lawful requests from government authorities
- To protect and defend our rights, property, or safety
- In connection with a merger, acquisition, or sale of assets (you will be notified of any such change)
- With your consent or at your direction
4.3 No Sale of Personal Data
We do not sell, rent, or trade your Personal Data to third parties for their marketing purposes.
5. International Data Transfers
Hero Proxies is based in the United States. Your Personal Data may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from your country of residence.
By using our Services, you consent to the transfer of your information to the United States and other jurisdictions. For users in the EEA, we rely on Standard Contractual Clauses and other lawful transfer mechanisms where required.
6. Data Retention
We retain your Personal Data for as long as reasonably necessary to:
- Provide the Services and maintain your account
- Comply with legal obligations (e.g., tax and financial records)
- Resolve disputes and enforce our agreements
- Protect against fraud and abuse
When you delete your account, we will delete or anonymize your Personal Data within 30 days, except where retention is required by law or for legitimate business purposes (such as maintaining financial records for tax compliance).
To determine appropriate retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized disclosure, the purposes for processing, and applicable legal requirements.
7. Security
We implement appropriate technical and organizational measures to protect your Personal Data, including:
- Encryption of data in transit (TLS/HTTPS)
- Secure password hashing
- Access controls and authentication requirements
- Regular security assessments
- Limiting access to Personal Data to authorized personnel
Your responsibility: You also play an important role in keeping your information safe. Use a strong, unique password for your account. Do not share your login credentials with others. Be cautious when accessing your account on public or unsecured networks.
Despite our safeguards, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.
If we become aware of a security incident affecting your Personal Data, we will notify you and any applicable regulatory authorities as required by law.
8. Your Privacy Rights
8.1 Rights for All Users
Regardless of your location, you have the right to:
- Access: Request a copy of the Personal Data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your Personal Data
- Portability: Request your data in a portable, machine-readable format
- Opt-out: Opt out of marketing communications at any time
8.2 California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request information about the categories and specific pieces of Personal Data we have collected, the sources, the purposes, and the categories of third parties with whom we share it
- Right to Delete: Request deletion of your Personal Data, subject to certain exceptions
- Right to Opt-Out of Sale: We do not sell your Personal Data
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
California's "Shine the Light" law permits California residents to request information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. We do not disclose Personal Data to third parties for their direct marketing purposes.
8.3 Virginia Residents (VCDPA)
If you are a Virginia resident, the Virginia Consumer Data Protection Act provides you with:
- Right to Know: Confirm whether we are processing your Personal Data
- Right to Access: Access the Personal Data we process about you
- Right to Correct: Correct inaccuracies in your Personal Data
- Right to Delete: Delete Personal Data you have provided or that we have obtained
- Right to Data Portability: Obtain a copy of your Personal Data in a portable format
- Right to Opt-Out: Opt out of processing for targeted advertising, sale, or profiling
8.4 Texas Residents (TDPSA)
If you are a Texas resident, the Texas Data Privacy and Security Act provides you with:
- Right to Access: Confirm whether we are processing your Personal Data and access that data
- Right to Correct: Correct inaccuracies in your Personal Data
- Right to Delete: Delete Personal Data you have provided or that we have obtained
- Right to Data Portability: Obtain a copy of your Personal Data in a portable format
- Right to Opt-Out: Opt out of processing for sale, targeted advertising, or profiling
8.5 Exercising Your Rights
To exercise any of your privacy rights, please contact us at privacy@heroproxies.com with the subject line "Data Privacy Rights."
Verification: To protect your privacy, we may need to verify your identity before responding to your request. We may ask you to provide information that matches our records.
Response Time: We will respond to your request within 45 days. If necessary, we may extend this period by an additional 45 days (for a total of 90 days), in which case we will notify you of the extension and the reason.
No Fee: We do not charge a fee for processing reasonable requests. However, we may charge a reasonable fee or decline requests that are manifestly unfounded, excessive, or repetitive.
You may exercise your rights up to twice per calendar year.
9. Children's Privacy
Our Services are intended for users who are at least 18 years of age. We do not knowingly collect Personal Data from anyone under 18. We do not intentionally allow users under 18 to use our Services.
If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us at privacy@heroproxies.com. If we learn that we have collected Personal Data from someone under 18, we will delete that information as soon as possible.
10. Links to Other Sites
Our Site may contain links to third-party websites or services that are not operated by us. If you click on a third-party link, you will be directed to that party's site. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.
We encourage you to review the privacy policy of every site you visit. This Policy applies only to our Services.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes:
- We will update the "Last updated" date at the top of this page
- For material changes, we may notify you by email or by posting a prominent notice on our Site
Your continued use of our Services after any changes become effective constitutes your acceptance of the updated Policy. If you do not agree with the changes, please stop using our Services.
12. Contact Us
If you have any questions, comments, or concerns about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us at:
Email: privacy@heroproxies.com
We aim to respond to all inquiries within 45 days.
13. Supplemental Information for EEA Users
This section provides additional information for users located in the European Economic Area (EEA) as required by the General Data Protection Regulation (GDPR).
13.1 Data Controller
Hero Proxies is the data controller responsible for your Personal Data collected through the Services. For questions about this Policy or to exercise your rights, contact us at privacy@heroproxies.com.
13.2 International Transfers
We are headquartered in the United States, which may not provide the same level of data protection as countries in the EEA. When we transfer Personal Data outside the EEA, we ensure appropriate safeguards are in place, including:
- EU Standard Contractual Clauses approved by the European Commission
- Other lawful transfer mechanisms as required
You have the right to request a copy of the safeguards we use for international transfers by contacting us.
13.3 Your GDPR Rights
Under the GDPR, you have the following rights:
- Right of Access: Obtain confirmation of whether we process your Personal Data and receive a copy of that data
- Right to Rectification: Request correction of inaccurate or incomplete Personal Data
- Right to Erasure: Request deletion of your Personal Data in certain circumstances (the "right to be forgotten")
- Right to Restriction: Request that we restrict processing of your Personal Data in certain circumstances
- Right to Data Portability: Receive your Personal Data in a structured, commonly used, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
- Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time (without affecting the lawfulness of prior processing)
13.4 Exercising Your GDPR Rights
To exercise your GDPR rights, contact us at privacy@heroproxies.com with "GDPR Request" in the subject line.
We will respond within 30 days. For complex or multiple requests, we may extend this period by up to 60 additional days, in which case we will notify you.
We may request information to verify your identity before processing your request. No fee is charged for reasonable requests.
13.5 Right to Lodge a Complaint
If you believe we have violated your privacy rights, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your residence, place of work, or where the alleged violation occurred. However, we encourage you to contact us first so we can attempt to resolve your concerns.