MS VPN
Privacy Policy
MS VPN is committed to safeguarding your personal information while providing a secure virtual private network (“VPN”) service. This Privacy Policy explains how we collect, use, and protect your data.
It also details our compliance with the National Automated Clearing House Association (“NACHA”) Operating Rules, particularly for Internet-Initiated/Mobile Entries (“WEB”), when processing Automated Clearing House (“ACH”) transactions.
1. No Logs of VPN Usage
We maintain a strict no-log policy regarding VPN session activities. We do not track or store IP addresses, connection timestamps, browsing activities, or any other data related to your VPN usage.
We maintain a strict no-log policy regarding VPN session activities. We do not track or store IP addresses, connection timestamps, browsing activities, or any other data related to your VPN usage.
2. System Design
Our infrastructure is intentionally configured to avoid generating detailed user activity logs. Any diagnostic data used to maintain performance is aggregated and cannot be traced back to individual users.
Our infrastructure is intentionally configured to avoid generating detailed user activity logs. Any diagnostic data used to maintain performance is aggregated and cannot be traced back to individual users.
In accordance with our no-log policy, we do not retain any data about your VPN usage. However, we collect the following information in connection with your account setup and WEB ACH payment transactions:
1. Account Information
- Name: First and last name
- Email: Used for account registration and service notifications
- Login Credentials: Username and password, stored securely using industry-standard encryption
2. WEB ACH Data
- Personal Identifiers:
- First Name
- Last Name
- Date of Birth
- Social Security Number (SSN)
- Contact Information:
- Address (Street)
- City
- State
- Zip Code
- Mobile Phone
- Banking Details:
- Bank Name
- Account Number
- Routing Number
- Technical Identifier: IP Address of the person signing the ACH authorization
3. Customer Support Communications
If you contact us via email or other support channels, we may collect information regarding your inquiry, which can include emails, chat logs, or call recordings.
If you contact us via email or other support channels, we may collect information regarding your inquiry, which can include emails, chat logs, or call recordings.
We process ACH debits and credits in compliance with NACHA Operating Rules for WEB entries, which govern Internet-initiated or mobile transactions:
1. Authorization
You authorize us to debit (and, if applicable, credit) your bank account in accordance with the information provided during sign-up. This authorization must be confirmed electronically, and we retain a copy for our records.
You authorize us to debit (and, if applicable, credit) your bank account in accordance with the information provided during sign-up. This authorization must be confirmed electronically, and we retain a copy for our records.
2. Record Retention
We retain proof of authorization (including any personal or financial data) for at least two (2) years from the termination of the authorization, as required by NACHA.
We retain proof of authorization (including any personal or financial data) for at least two (2) years from the termination of the authorization, as required by NACHA.
3. Security Measures
- We use robust encryption (e.g., TLS/SSL) to protect your payment and personal information during transmission and storage.
- Access to such data is restricted to authorized personnel with a legitimate business need and who are trained on data security and confidentiality.
4. Data Sharing
We may share relevant ACH payment details with our payment processor, your bank, or other financial institutions strictly for transaction verification and fulfillment, as required by NACHA.
We may share relevant ACH payment details with our payment processor, your bank, or other financial institutions strictly for transaction verification and fulfillment, as required by NACHA.
1. Account Creation and Maintenance
We use basic personal identifiers (e.g., name, email) to establish and manage your account, communicate service-related updates, and facilitate account support.
We use basic personal identifiers (e.g., name, email) to establish and manage your account, communicate service-related updates, and facilitate account support.
2. Payment Processing (ACH WEB)
We collect and store ACH data (e.g., SSN, bank account information) to verify your identity and process your subscription or other transactions. This is required to comply with NACHA standards and other relevant financial regulations.
We collect and store ACH data (e.g., SSN, bank account information) to verify your identity and process your subscription or other transactions. This is required to comply with NACHA standards and other relevant financial regulations.
3. Customer Support and Service Improvement
Information obtained through support interactions helps us diagnose issues, provide resolutions, and improve our overall Services.
Information obtained through support interactions helps us diagnose issues, provide resolutions, and improve our overall Services.
1. VPN Usage Data
We do not log user VPN sessions, so there is no usage data to retain or delete.
We do not log user VPN sessions, so there is no usage data to retain or delete.
2. ACH and Payment Records
We keep ACH WEB authorization records, including the personal and financial data listed above, for at least two years or for the duration required by law or financial regulations, whichever is longer.
We keep ACH WEB authorization records, including the personal and financial data listed above, for at least two years or for the duration required by law or financial regulations, whichever is longer.
3. General Account Data
Account information is retained as long as you maintain an active subscription and may be stored for a reasonable period thereafter to comply with legal or contractual obligations.
Account information is retained as long as you maintain an active subscription and may be stored for a reasonable period thereafter to comply with legal or contractual obligations.
We securely delete or anonymize data once it is no longer needed, unless legally required to do otherwise.
1. Encryption
All sensitive data, including your ACH and personal information, is encrypted in transit (e.g., TLS/SSL) and at rest using industry-standard protocols.
All sensitive data, including your ACH and personal information, is encrypted in transit (e.g., TLS/SSL) and at rest using industry-standard protocols.
2. Access Controls
We implement strict role-based access for employees, ensuring only those with a legitimate business need can view sensitive data.
We implement strict role-based access for employees, ensuring only those with a legitimate business need can view sensitive data.
3. Infrastructure Safeguards
Our servers are housed in secure facilities with physical access controls, firewall protections, and intrusion detection systems.
Our servers are housed in secure facilities with physical access controls, firewall protections, and intrusion detection systems.
We do not sell or rent your personal data to third parties. We only disclose your information as follows:
1. Service Providers
We engage third-party processors to assist with payment processing, data hosting, or customer support. These vendors are contractually obligated to maintain data confidentiality and security.
We engage third-party processors to assist with payment processing, data hosting, or customer support. These vendors are contractually obligated to maintain data confidentiality and security.
2. Legal Compliance
We may disclose information as required by law, court order, or other legal processes, including to fulfill regulatory requests or enforce our legal rights.
We may disclose information as required by law, court order, or other legal processes, including to fulfill regulatory requests or enforce our legal rights.
3. Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to consistent privacy and security standards.
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to consistent privacy and security standards.
1. Data Access and Correction
You may access or update your account information at any time by logging into your account or contacting our customer support.
You may access or update your account information at any time by logging into your account or contacting our customer support.
2. Deletion Requests
You can request deletion of your personal data by contacting us at . We will comply unless retention is required for legal, regulatory, or legitimate business reasons (e.g., NACHA-mandated recordkeeping).
You can request deletion of your personal data by contacting us at . We will comply unless retention is required for legal, regulatory, or legitimate business reasons (e.g., NACHA-mandated recordkeeping).
3. Opt-Out of Communications
If you receive promotional communications, you may opt out by following the instructions included in each message or by updating your account preferences.
If you receive promotional communications, you may opt out by following the instructions included in each message or by updating your account preferences.
We may update this Privacy Policy from time to time to reflect changes in our data practices or legal obligations. When we do, we will revise the “Effective Date” and may provide additional notice via email or a prominent announcement on our website.
If you have any questions regarding this Privacy Policy or wish to exercise any of your rights, please contact us at:
MS VPN Team:
Contents
