Privacy Policy

1. Introduction

OutRay ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tunneling service, website, CLI tools, and plugins.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Profile picture (if using OAuth)
• Organization and team information

Usage Information

When you use our Service, we automatically collect:

• Tunnel connection metadata (timestamps, duration)
• Request counts and bandwidth usage
• IP addresses and geographic location
• Device and browser information
• CLI and plugin versions

Traffic Data

We do not inspect, store, or log the content of your HTTP/TCP/UDP traffic. Traffic passes through our servers in real-time and is not retained. We only collect metadata necessary for billing, debugging, and abuse prevention.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process payments and manage subscriptions
• Send service-related communications
• Monitor and improve performance
• Detect and prevent abuse or fraud
• Comply with legal obligations
• Provide customer support

4. Information Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Third parties that help us operate (hosting, payment processing, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account information for as long as your account is active. Usage logs and analytics are retained for up to 90 days. You may request deletion of your data at any time by contacting us or deleting your account.

7. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Object to or restrict processing
• Withdraw consent

To exercise these rights, contact us at privacy@outray.dev.

8. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how you use our website. You can control cookie preferences through your browser settings.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses where required.

10. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and updating the "Last updated" date. Your continued use of the Service constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at privacy@outray.dev.