Privacy Notice
Last updated 2026-09-25
The short version
We ask for an email address. We do not log what you do on the VPN, we do not build an advertising profile of you, and we do not sell anything about you to anyone. The longer version below is the detail that statement rests on.
1. Who is responsible
STEM CONNECT LTD (company number 11584953), registered office 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom, is the data controller. Contact: support@veystrix.net.
2. What we collect
To give you an account: your email address, and the times you signed in. Sign-in uses one-time links, so we do not hold a password for you.
To take payment: Stripe holds your billing details and card. We keep only Stripe's identifiers, your plan, its status and the renewal date. We never see your card number.
To give you VPN access: our network provider holds a VPN account and its credentials. We keep the identifiers linking your Veystrix account to it. We do not keep your VPN password — it is shown to you once and can be reset.
When you use Guard or the free tools: by default we keep the verdict, the signals found and a one-way hash of what you submitted — not the text itself. Your IP address is stored only as a salted one-way fingerprint, used to apply free-usage limits. The password checker never sends your password anywhere: it is hashed in your browser and only the first five characters of that hash are sent to the Pwned Passwords service.
Automatically: ordinary server logs (request, time, status) kept for a short period for security and troubleshooting.
3. What we do not collect
We do not log your browsing, the sites you visit, your DNS queries or the content of your traffic through the VPN. We do not use advertising or tracking pixels without your consent.
4. Why we are allowed to hold it
To perform our contract with you (your account, payment, VPN access); our legitimate interests in running a secure service (abuse prevention, rate limits, security logs); consent where you give it (marketing email, non-essential cookies); and legal obligations (tax and accounting records).
5. Who else processes it
| Who | What they do | Where |
|---|---|---|
| Stripe | payments and subscriptions | EU / US |
| Our VPN network provider | operates the VPN servers and accounts | multiple countries |
| Mailgun (Sinch) | sends our email | EU |
| Anthropic | powers Guard's written explanations | US |
| Microsoft Azure | hosts our application and database | South Africa |
Our servers are hosted in South Africa, so your data is transferred outside the UK. That transfer is covered by the appropriate safeguards, including standard contractual clauses with our providers.
6. How long we keep it
Account and subscription records for as long as you have an account, then up to seven years where tax law requires. Security-check results are kept so you can see your own history and are deleted when you delete your account. Server logs are kept for a short operational period.
7. Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or ask us to restrict it. Email support@veystrix.net and we will respond within one month. If you are unhappy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk.
8. Changes
If we change this notice materially we will tell you by email and show the new version here with its date.