Privacy Policy

Who we are

ZKyNet is operated by 17204671 Canada Inc., a federally incorporated Canadian company. This policy describes how we handle data in connection with the ZKyNet tunnel management platform and this website.

• Privacy Officer: Privacy Officer, 17204671 Canada Inc.
• Email: privacy@zkynet.org
• Phone: 647.600.2330
• Address: 155-2 King Street West, Unit #299, Hamilton, ON L8P 4S0, Canada

What data we collect

Website

• Email address -if you sign up for early access or contact us through the support form. Used to send product updates and respond to inquiries.
• Form submissions -name and message content from the support contact form.

We do not use third-party analytics, tracking pixels, or advertising cookies on this website.

Platform (when launched)

• Account information -email address and authentication credentials required to use the service.
• Tunnel configuration metadata -connection parameters needed to manage tunnels (server addresses, protocol types). We do not inspect or store the content of traffic routed through tunnels.
• Usage metrics -aggregate connection counts and bandwidth used, for service operation and abuse prevention. These metrics are not linked to specific browsing activity or destinations.
• Abuse prevention data -rate limiting counters and connection pattern data used to maintain network integrity. This data is processed at the tunnel level and does not involve inspection of traffic content.

Payment data

When you purchase a subscription, your payment is processed by Stripe, Inc. ZKyNet does not store your full payment details. We receive only the last four digits of your payment method and the status of your subscription. Stripe may collect personal data including card details, billing address, IP address, and device information for payment processing, fraud detection, and analytics. You can learn more about Stripe's data practices at stripe.com/privacy.

How we use your data

• To provide and operate the tunnel management service
• To process payments and manage subscriptions
• To send product updates if you opted in via the early access form
• To respond to support inquiries
• To prevent abuse and maintain network quality
• To comply with applicable Canadian law

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-party service providers

We use the following third-party service providers to operate ZKyNet. Each provider processes only the data necessary for their specific function.

We do not use any third-party analytics, advertising, or tracking services.

International data transfers

ZKyNet is incorporated in Canada (17204671 Canada Inc.). User account data and tunnel infrastructure are hosted on servers located in France (European Union), operated by Contabo GmbH.

Certain service providers process limited data in other jurisdictions:

• Stripe, Inc. (payment processing) -United States
• Cloudflare, Inc. (DNS and domain services) -United States
• Proton AG (email services) -Switzerland

The European Union has recognized Canada as providing adequate data protection under the GDPR adequacy framework. Cross-border data transfers to US-based service providers are protected by Standard Contractual Clauses and applicable data processing agreements.

Data retention

• Account data -retained while your account is active. Deleted within 60 days of account cancellation or termination.
• Billing records -retained for 7 years as required by Canadian tax law.
• Email addresses -retained until you unsubscribe or request deletion.
• Support messages -retained for the duration needed to resolve your inquiry, then deleted within 90 days.
• Usage metrics -aggregate data retained for up to 12 months for service improvement.
• Abuse prevention data -retained for up to 30 days.
• Backups -retained for up to 60 days after deletion from active systems.

Data breach notification

In the unlikely event of a breach of security safeguards involving personal information under our control, we will:

1. Assess the breach to determine whether it creates a real risk of significant harm to any affected individual, considering the sensitivity of the information and the probability of misuse.
2. Report to the Privacy Commissioner of Canada as soon as feasible, providing a description of the circumstances, the information affected, the number of individuals affected, and the steps taken to mitigate harm.
3. Notify affected individuals as soon as feasible via email and website notice, providing sufficient information for them to understand the breach and take protective steps.
4. Notify any other organization if doing so could reduce the risk of harm.
5. Maintain records of all security incidents for a minimum of 24 months.

Your rights

Under Canadian privacy law (PIPEDA), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Withdraw consent for communications at any time
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, contact us at privacy@zkynet.org or use the unsubscribe link in any email.

Cookies and tracking

ZKyNet does not set any first-party cookies on this website. We do not use third-party analytics, advertising, or tracking services.

Our infrastructure provider, Cloudflare, may set a functional cookie (__cf_bm) for bot management purposes. This cookie is used solely by Cloudflare's security systems and is not used by ZKyNet to track or identify visitors. You can learn more about Cloudflare's cookies at Cloudflare's cookie documentation.

Security

We use industry-standard security measures to protect your data, including encrypted connections (TLS) for all data in transit and access controls for stored data. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable steps to protect the information we handle.

Changes to this policy

We may update this policy as the product develops. Material changes will be communicated at least 30 days in advance via email or website notice. The "last updated" date at the top reflects the most recent revision.

Contact

For privacy-related questions or to exercise your rights under PIPEDA:

• Privacy Officer: Privacy Officer, 17204671 Canada Inc.
• Email: privacy@zkynet.org
• Phone: 647.600.2330
• Address: 155-2 King Street West, Unit #299, Hamilton, ON L8P 4S0, Canada

You may also file a complaint with the Office of the Privacy Commissioner of Canada.