Privacy Policy

1. Who is responsible for your data

SAM IT PARK, of Malgram, Bogura Sadar, Bogura, Bangladesh, operates ProxyHub (proxyhub.bd) and decides how the personal data described here is used. Questions about this policy go to support@proxyhub.bd.

2. What we collect

You give us

• Name, email address, mobile number and country, and a billing address where you add one.
• A company name, where you give one.
• Your password, stored only as a cryptographic hash. We cannot read it.
• What you write in support tickets.

Created when you use the service

• Invoices, payments and their status.
• Which services you hold, their addresses, ports and credentials.
• Traffic volumes per proxy, recorded hourly, which is what usage and billing are based on.
• Connection records for the addresses we serve, kept for security and abuse handling.
• Sign-in records: time, IP address and browser, used to protect the account.

Verification

Bangladeshi customers verify their mobile number by SMS. We store the number, the fact that it was verified, when, and a hashed one-time code that expires. The code itself is never shown in our logs.

The website

• With your permission, first-party analytics: pages seen, referrer, approximate country and device type. Visit counts are kept even without consent, with nothing that identifies a visitor.
• Where you accept marketing cookies, advertising measurement through Meta (Facebook) and tag management through Google Tag Manager. Accepting is optional and can be withdrawn.
• Cookies we set: a consent choice, a visitor id for analytics, and sign-in tokens. Advertising cookies are set only after you accept them.

3. What we do not collect

• Full card numbers, CVV codes or mobile wallet PINs. Payments are taken on the payment provider's own page; we receive only the result, an amount and a reference.
• The content of your proxy traffic. We do not inspect, store or sell what you browse or send.

4. Why we use it, and on what basis

• To provide the service you bought, create and deliver your credentials, and support you — because we have a contract with you.
• To bill you, take payment and keep accounting records — contract, and our legal obligations under tax and company law.
• To verify a mobile number and protect accounts from takeover and fraud — our legitimate interest in a safe service, and to meet our obligations.
• To handle abuse reports and keep the network usable for everyone — legitimate interest and legal obligation.
• To answer a lawful request from a competent authority — legal obligation.
• To measure advertising and send offers — only with your consent, which you may withdraw at any time.

5. Who we share it with

We do not sell personal data. We share only what a task needs, with:

• Payment providers who take your payment and confirm it to us.
• Our SMS provider, which delivers verification codes and notices to your number.
• Our email provider, which delivers invoices and notices.
• Upstream network partners, where the plan you bought is carried on their network.
• Meta (Facebook), where you accepted marketing cookies, for advertising measurement. Identifiers sent for this purpose are hashed.
• Government, law enforcement or a court, where a lawful request is made or where the law requires it.
• A professional adviser or auditor, under a duty of confidence.

Some of these providers are outside Bangladesh, so data may be processed abroad. We use providers that offer protection appropriate to the data.

6. How long we keep it

• Account details: while the account is open, and up to one year after it is closed.
• Invoices, payments and tax records: at least five years, as Bangladeshi tax and accounting rules require.
• Proxy usage records: twelve months.
• Connection and abuse records: up to twelve months, longer where an investigation or a legal claim needs it.
• Support tickets: three years.
• Analytics: thirteen months.

When a period ends, records are deleted or anonymised.

7. How we protect it

• Traffic to the site and to the client area is encrypted in transit.
• Proxy credentials and provider secrets are encrypted at rest with keys held only on our servers.
• Passwords are hashed, never stored in readable form.
• Access is limited to the staff who need it, and staff actions on customer records are logged.

No system is perfectly secure. If a breach affects your data we will tell you and the relevant authority as the law requires.

8. Your choices

• See or get a copy of the data we hold about you.
• Correct anything wrong — most of it from Profile in the client area.
• Ask us to delete your account and data, subject to the records we must keep for tax and legal reasons.
• Withdraw consent for analytics or advertising at any time, by changing your cookie choice on the site.
• Turn off marketing email from Profile, while keeping the notices about invoices and your services, which are part of the contract.

Write to support@proxyhub.bd to use any of these. We reply within thirty days. If you are not satisfied, you may complain to the appropriate authority in Bangladesh.

9. Children

The service is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.

10. Changes

We may update this policy. The current version is always on this page with the date it was last updated. Where a change materially affects you we will tell you by email or in the client area.

11. Contact

SAM IT PARK — ProxyHub Malgram, Bogura Sadar, Bogura, Bangladesh support@proxyhub.bd · 09611 677170