United States state privacy notice

The short version

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We run no analytics and load no script from anywhere else, so there is nothing most opt-out rights would switch off. This page still says, the way a U.S. state privacy law asks, what we collect, why, who else sees it, the rights those laws grant, and how to use them.

What we collect, and where it comes from

What the privacy policy lists is the complete account of what we hold; this section names the same things in the categories a state privacy law uses.

• Identifiers: your email address or account number, kept only in a form we cannot read back, and the language you use.
• Commercial information: your membership, your payments, your payment provider reference and the date of your last successful payment, a payment dispute, a refund our team started in Telegram, the note to close a paid plan and a gift code you redeem, each holding exactly what the privacy policy lists for it. Card and wallet details never reach us.
• Device and connection information: the devices you add, their encrypted connection keys, and, only while a device is connected, that it is connected and where; this is deleted the moment you disconnect.
• Communications: a message you send us, and a record that a message was sent to you, of which kind and when, holding no address and no content of its own.

We do not collect precise geolocation, browsing or destination history, biometric information, health information, or any other sensitive personal information beyond the account identifier above. Everything on this list comes directly from you, or, for the connection line, automatically from the device you connect from while it is connected.

Why we use it

To run your account and connection, to bill a paid plan, to answer you when you write to us, to keep the service secure and prevent abuse, and to meet a legal obligation such as a valid request described on the law enforcement guidelines.

Who else sees it, and why that is not a sale

Who else handles anything names every company that sees part of what we hold: a payment provider, the company that delivers our email, the network that serves this website and our service, and Telegram if you link it. Each sees only what its own part of the job needs, under its own obligation to us, for the purpose we hired it for. None of that is a sale, and none of it is sharing for cross-context behavioral advertising.

We do not sell or share personal information

We have not sold personal information, and have not shared it for cross-context behavioral advertising, in the twelve months before this notice or at any time before that. We run no advertising business and no profiling of any kind, so there is no toggle on this page to turn either one off.

The Global Privacy Control signal

We honor Global Privacy Control automatically, for every visitor, without an account or a cookie banner to set it through: since nothing on this website loads from anywhere else and it tracks nothing across sites, the signal has nothing left to switch off. The same check that keeps that true runs against every page on every release, before it ships.

Your rights under a U.S. state privacy law

Where a state's law grants it, you can ask what we hold about you, ask for a copy of it, have it corrected, have it erased, opt out of a sale or of sharing for cross-context behavioral advertising, which we do not do to begin with, and ask that our use of any sensitive personal information be limited, which for the same reason we do not collect. Exercising any of these never changes your price or your service.

How to ask

Write to support@kazavpn.com, from the email address on your account where you have one; we confirm who you are the same way Your data and your rights describes, and answer within forty-five days, with one further forty-five days when a request genuinely needs it, and the reason for the delay given within the first period.

You can name someone else to ask on your behalf. Have them write to us with your written permission attached; for a request that changes or erases your data, we may still confirm directly with you before we act on it.

If we turn a request down

We say why in the same reply, and how to appeal it. Someone who did not make the first decision reviews an appeal, and answers within forty-five days. If the appeal is turned down too, we tell you how to take the matter to your state's attorney general or other privacy regulator.

Who this page is for

This page states the rights a U.S. state privacy law grants a resident of that state. A reader anywhere else already has the same practical rights under the privacy policy and Your data and your rights; nothing on this page takes anything away from them.

Contact

Questions about this page: support@kazavpn.com.