Privacy Policy

Last updated: September 30, 2026

Broxy ("we", "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to your use of broxy.ai and any related services (the "Service").

1. Information We Collect

1.1 Information you provide

Account info: name, email, business name, billing address, phone number, tax ID if applicable.
Payment info: processed directly by Stripe. We do not store full credit card numbers; we receive a tokenized reference from Stripe.
Support communications: messages you send us, including ticket attachments.

1.2 Information collected automatically

Usage data: our hosting provider's request logs record the IP address, browser type, page requested, time and referrer, and keep them for a short period for security and debugging. Our own visit counts store none of these (see 1.5).
Service usage: bandwidth consumed, sessions, error logs (no proxy payload content).
Cookies: your account sign-in; a short-lived cookie that ties a fresh order to the browser that paid for it; the advisor's daily-limit cookie (see 1.3); and, for the site owner only, the dashboard sign-in. No advertising or analytics cookies.

1.3 AI advisor questions

The advisor on our homepage forwards your typed question (and the conversation's prior turns) to a large-language-model provider — Google (Gemini) or Groq — to generate the recommendation. No account, payment, or proxy-credential data is ever included. We set an anonymous cookie to enforce the daily question limit and keep a daily counter; don't type personal or sensitive information into the advisor.

1.4 How you found us

When you arrive from an ad, a forum post or another site, your browser keeps a small note for us in its own storage: the campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the ad network's click ID if there is one (such as Google's gclid or Reddit's rdt_cid), a short "ref" code from a forum or partner link, the name of the site that sent you (just the domain, never the page), the first page you landed on, and when. We use it for one thing: to see which ads and posts bring customers, so we can stop paying for the ones that don't.

The note stays in your browser for 30 days and is only sent to us if you buy something; then it is saved with that order. It holds no name, email, IP address or device ID, and there are no third-party trackers or pixels on this site. If you came from an ad, we may give that ad network back its own click ID with the time and value of the order, so it can count the sale. If your browser sends Global Privacy Control, we don't keep click IDs at all. Clearing this site's data in your browser deletes the note.

1.5 Counting visits

We count how many times each page of this site is viewed, and how many different visitors come each day. This uses no cookies and stores nothing in your browser. Your IP address is not stored: your connection (IP address and browser type) is turned into a one-way code that changes every day, so visits on different days can't be linked to each other, and the codes are deleted after two days. If another site sent you here, we record only its domain name (such as reddit.com), never the page you came from. What we keep is daily totals: views per page, visitors per day, and visits per referring site.

1.6 What we do NOT collect

We do not log, inspect, or store the URLs, request bodies, or response bodies that you route through your proxies. Your traffic content is yours.

2. How We Use Information

To provide, maintain, and improve the Service.
To process payments and prevent fraud.
To see which ads, posts and links bring customers (see 1.4).
To count visits to the site, as daily totals (see 1.5).
To send transactional emails (receipts, security alerts, service notifications).
To respond to support inquiries.
To comply with legal obligations and enforce our Terms and AUP.

3. Sharing

We do not sell your personal information. We share it only with:

Service providers: Stripe (payments), our hosting provider, our upstream proxy suppliers (limited to what's required to provision your proxy), AI model providers (Google Gemini / Groq — advisor questions only, as described in 1.3), and transactional email providers. Each operates under contractual data-protection terms.
Ad networks: only if you arrived from one of their ads — their own click ID, with the time and value of the order it led to, so they can count the sale (see 1.4). Nothing else about you.
Legal authorities: when required by valid legal process (subpoena, court order) or to protect rights, property, or safety.
Business transfers: in connection with a merger, acquisition, or sale of assets, in which case you will be notified.

4. Your Rights

Depending on where you live (GDPR, CCPA, etc.), you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion (subject to legal retention obligations like tax records).
Object to or restrict certain processing.
Receive a portable copy of your data.
Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@broxy.ai from the address on your account.

5. Data Retention

We retain account and billing information for as long as your account is active, plus the time required by tax and accounting laws (typically 7 years in the U.S.). Server logs are retained for 30 days for security and debugging.

6. Security

We use HTTPS everywhere, hashed credentials, encrypted backups, and least-privilege access controls. No system is 100% secure, but we follow industry-standard practices and notify affected users in the event of a material breach.

7. Children

The Service is not directed at children under 18 and we do not knowingly collect data from them. If you believe a child has provided us data, email privacy@broxy.ai and we will delete it.

8. International Transfers

Broxy operates from the United States. By using the Service from outside the U.S., you consent to the transfer of your data to the U.S. and to U.S. legal jurisdiction over that data.

9. Changes

We may update this Privacy Policy from time to time. Material changes will be announced by email or on this page with a new "Last updated" date.

10. Contact

Questions or requests? Email privacy@broxy.ai.