Privacy Policy

Short version: We do not log your traffic. We do not sell your data. We collect only what is strictly necessary to provide and maintain your subscription.

1. Who We Are

Safyra ("we", "us", "our") operates the VPN service accessible at safyra.net and via the Telegram bot @Safyra_bot. We are a privacy-first service committed to protecting your personal information.

If you have any questions about this policy, contact us at [email protected].

2. Information We Collect

We collect the minimum information required to operate the service:

Account Information

Telegram user ID and phone number (provided when you start the bot via /start + contact share)
Subscription status and expiry date
Number of active device slots

Technical Data

Connection timestamps (when your VPN client last connected — not duration or destinations)
Device labels you assign voluntarily (e.g., "iPhone", "Laptop")
Unique client UUIDs generated for each device slot (cryptographic identifiers only)

Payment Data

For Telegram Stars payments: Telegram handles payment processing entirely. We only receive a confirmation flag.
For cryptocurrency payments: we receive the transaction hash and wallet address used. We do not store full payment credentials.

3. What We Do NOT Collect

We are technically and contractually committed to not collecting:

VPN traffic content — we do not inspect payloads
Websites you visit or services you access through the VPN
Your originating IP address as mapped to your traffic
DNS queries made through the tunnel
Bandwidth usage per user (we do not impose caps)
Browsing history of any kind

We operate a strict no-log policy for all VPN tunnel traffic. Our infrastructure is designed so that even if compelled by legal process, we have no traffic records to provide.

4. How We Use Your Information

The information we collect is used solely to:

Create and maintain your subscription account
Deliver your VPN configuration via Telegram
Send subscription expiry reminders and renewal notices
Provide customer support when you contact us
Prevent abuse (e.g., ensuring one UUID per device slot as per your plan)
Comply with legal obligations where applicable

We do not use your data for advertising, profiling, or sale to third parties.

5. Data Storage and Security

Your data is stored on servers in the European Union. We use industry-standard encryption in transit (TLS 1.3) and at rest. Sensitive credentials are stored in HashiCorp Vault — an enterprise-grade secret management system.

Access to production systems is restricted to authorized personnel only and protected by cryptographic keys.

6. Third-Party Services

We use the following third-party services to operate:

Telegram — for bot delivery, payment processing, and user communication. Telegram's Privacy Policy applies to data you share with Telegram.
Cloudflare — for DNS and DDoS protection. Cloudflare processes DNS queries for our domain; they do not see VPN tunnel traffic.
Cryptomus — for cryptocurrency payment processing. Their Privacy Policy applies to crypto transactions.

We do not use Google Analytics, Facebook Pixel, or any behavioral tracking tools on our services.

7. Data Retention

Active subscription data is retained while your account remains active. If you have not used the service for 12 months and have no active subscription, your account data is automatically deleted.

You may request immediate deletion of your data at any time — see Section 9 (Your Rights).

8. Legal Requests

If we receive a legally binding request for user data from a governmental authority, we will:

Notify you where legally permitted to do so
Provide only what is legally required — which, given our no-log architecture, is limited to account metadata only
Never provide VPN traffic records, because we do not have them

9. Your Rights

You have the right to:

Access — request a copy of all data we hold about you
Rectification — correct inaccurate data
Erasure — request deletion of your account and all associated data
Portability — receive your data in a machine-readable format
Object — object to processing of your data

To exercise any of these rights, contact us at [email protected] or message @Safyra_bot with the command /delete_account.

10. Cookies

Our website (safyra.net) uses only technically necessary cookies. We do not use tracking cookies, advertising cookies, or analytics cookies. No consent banner is required because we do not deploy non-essential cookies.

11. Children's Privacy

Our service is not directed at users under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Telegram bot at least 14 days before taking effect. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related inquiries:
Email: [email protected]
Telegram: @Safyra_bot