Privacy Policy

1.1 Account Information

When you register, we collect your name and email address. If you add them in your settings, we also keep your phone number, company, and billing address. We record how you first found us (the referring page, landing page, and campaign tags in the link). Passwords are hashed with Argon2id before being stored in our database; we never store passwords in plain text and cannot recover them.

1.2 Billing Information

Payment information is processed by PCI-compliant third-party payment processors (including PayPal). We do not store your full credit card number or payment details on our servers. We retain billing records including transaction amounts, dates, and plan names. Card payments are processed by Authorize.Net and PayPal payments by PayPal; we keep the card brand, last four digits, and expiry date, never the full number. For Bitcoin payments we keep the transaction ID, the receiving address, the amount, and the sending addresses, which we read from the public blockchain.

1.3 Usage Metadata

We collect metadata about your use of our proxy services, including:

• Bandwidth consumed (upload and download totals)
• Number of active proxy connections
• Proxy authentication method used (IP whitelist or username/password)
• Timestamps of connections
• Proxy server locations accessed

We also keep connection records. For rotating, residential, and SOCKS5 connections a record holds the time and duration, the proxy username or whitelisted address used, the IP address you connected from, the exit IP address used, the destination host name and port, and the bytes sent and received. For residential connections, where the exit address is assigned by our upstream network partner, the record names that partner and the session used instead of the exit address. For static HTTP proxy connections, the record holds the time and duration, the username or whitelisted address, the IP address you connected from, the proxy IP address used, the destination host name and port, the destination's IP address, the response status, and the bytes returned.

We do not inspect, log, store, or analyze the content of traffic passing through our proxies. Connection records and usage metadata, the records we keep beyond a few days, never include page contents, paths, query strings, request headers, or form data. Separately, short-lived server logs, kept for about 14 days, can include the path of an unencrypted http:// request (never its query string, and nothing inside an HTTPS connection).

1.4 Technical Information

We automatically collect certain technical data when you use our services, including your IP address, browser type, operating system, and pages visited on node4.io. We record the IP address, browser, and country used to create your account and for each sign-in attempt, and a device identifier derived from browser characteristics. We look up the approximate location and network of sign-up addresses with an IP geolocation provider. This is used for security monitoring, fraud prevention, and improving our services.

1.5 Support Communications

If you contact our support team, we retain records of those communications to assist you and improve our services.

We use the information we collect to:

• Provision and manage your proxy services
• Process payments and send billing receipts
• Send service notifications, including account alerts and plan expiry warnings
• Respond to support requests
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations
• Send promotional emails (only with your consent, unsubscribe available at any time)

We do not sell your personal information. We share information only with:

• Payment processors (Authorize.Net and PayPal): for payment processing. Bitcoin payments run on our own BTCPay Server.
• Cloudflare: for website delivery, security, and traffic measurement; it handles every request to node4.io
• Our residential network partner: carries residential proxy connections and receives the targeting and session details needed to route them
• IP geolocation provider (ipinfo.io): receives sign-up IP addresses to look up their location and network, for fraud prevention
• MXroute: hosts our support mailboxes
• Resend: for transactional and marketing email delivery
• Sentry: for error monitoring and application stability
• Railway: our cloud infrastructure provider, which hosts our servers and database
• Google Analytics: for website traffic and usage analytics (see section 7)

All third-party providers are contractually required to protect your data and use it only to provide their services to us. We may also disclose information, including account details, billing records, sign-in history, and connection records, in response to valid legal process such as a subpoena, court order, or warrant, where otherwise required by law, or to protect the rights and safety of Tekari LLC or others.

We retain your account information while your account is open and after it is closed, so that we can meet our legal, tax, and fraud-prevention obligations. Usage metadata, connection records, and sign-in history are retained for up to 12 months. Your sign-up details, the proxy IP addresses assigned to you and when, and billing records (including Bitcoin transaction records) are kept with your account, and billing records for at least 7 years as required by law. You may request deletion of your account and associated data by contacting support@node4.io; we will delete what we are not required to keep.

We implement industry-standard security measures including encrypted connections (TLS/SSL), hashed passwords, access controls, and regular security monitoring. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, delete, or export your data. To exercise any of these rights, contact us at support@node4.io. We will respond within 30 days.

We use essential cookies to maintain your session and authentication state. These are required for the service to work and cannot be turned off from within the application.

We also use Google Analytics to understand how visitors find and use our website: which pages are viewed, which sources bring visitors, and where people leave. Google Analytics sets its own cookies (named _ga and _ga_<id>) and processes this data on our behalf. It records page addresses, approximate location derived from IP address, browser and device type, and referring source. Our analytics tag is configured for measurement only; we do not run advertising or remarketing tags on this site, and we do not use this data to build advertising profiles or target ads.

We do not sell this data, and we do not use advertising cookies. You can opt out at any time by installing Google’s browser opt-out add-on, by enabling your browser’s tracking protection, or by using any content blocker, none of which affect your ability to use the service or your proxies. You can also disable cookies entirely in your browser settings, though that will break session and authentication features.

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us at support@node4.io and we will delete it promptly.

Your information may be stored and processed in the United States or other countries where our service providers operate. By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your home country.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on our website. The effective date at the top of this policy indicates when it was last updated.

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at: