1. Scope and controller
This policy applies to the RelyVPN website, applications, VPN service, licenses, purchases, support channels, and related services. RelyTech LLC is responsible for the processing described here.
RelyTech LLC, Entity ID 0008105529
1209 Mountain Road Pl NE, Ste N
Albuquerque, NM 87110, USA
2. Important privacy facts
- You can start using RelyVPN without creating a traditional account or providing an email and password.
- The app creates device and license identifiers to provide access, associate entitlements, enforce device limits, restore purchases, prevent abuse, and provide support.
- We process client IP addresses, connection and node status, activity times, traffic-volume counters, and limited diagnostics where needed to operate and secure the service.
- We do not use the content carried through the VPN tunnel to build advertising profiles, and we do not sell service data to advertisers.
- Website analytics and referral measurement are optional and remain off until you grant the corresponding consent.
3. Data we process
| Category | Examples | Main purpose |
|---|---|---|
| Device and license | Device or license identifier, operating system, app version, license entitlement, associated devices, last-active time | Provide access, restore entitlements, enforce plan limits, support devices, prevent fraud |
| Network and connection | Client IP address, IP-derived country, selected or assigned node, connection state and time, traffic byte counters | Establish connections, route traffic, measure plan use, maintain capacity and security |
| Reliability and security | Crash, error, performance and diagnostic data; domain-correction reports that can include a domain, device ID and source IP; node health and aggregated popular-destination host, connection, user and byte counts | Diagnose failures, correct routing or domain issues, secure the service, plan capacity |
| Purchases and entitlements | Product, amount, currency, payment channel, order and transaction identifiers, device ID, subscription status, refund information, public blockchain transaction data | Process and reconcile payment, activate plans, prevent fraud, meet accounting duties |
| Support and user content | Email address when you contact us, support messages, attachments, community content, request history | Answer requests, troubleshoot, moderate, protect users and document resolutions |
| Website and consent | IP and access-log data, browser or device information, language preference, session country result, consent choices, page path, referral code, campaign events, and Device ID entered into a payment form | Deliver and secure the site, localize content, honor choices, measure performance and complete purchases |
We receive data from you and your device, our applications and servers, app stores, payment processors, support interactions, referral links, and public blockchain records. Payment-card credentials are handled by the applicable store or payment processor rather than stored as full card details by RelyVPN.
4. Website storage, analytics, and advertising measurement
Necessary storage keeps language and consent preferences and performs a session-level country check used for availability and legal controls. These functions operate without optional consent because the site cannot reliably provide the requested experience without them.
Google Analytics loads only after analytics consent. We configure the page-view event so that the reported page location and referrer contain only the origin and path, not query parameters. Google may then set analytics cookies and process browser, device, approximate-location, interaction, and performance information on our behalf.
Referral cookies, campaign attribution, funnel events, and related deduplication storage operate only after marketing consent. The X advertising pixel also loads only after marketing consent. When enabled, it reports page views, download-button clicks, and server-verified purchase conversions (a server-generated anonymized conversion identifier, the amount, and the currency) to X Corp., which may set its own cookies under its own policies. We do not send names, email addresses, VPN traffic contents, or plain order numbers to X. Withdrawing marketing consent stops further X Pixel activity in this browser. If we add a materially different advertising technology, we will update this policy and request consent where required before enabling it.
See the Cookie and Tracking Policy or use the “Privacy choices” control at the bottom of the site to accept, reject, or withdraw optional consent.
5. Purposes and legal bases
- Contract: provide VPN connections, licenses, purchases, restoration, and requested support.
- Legitimate interests: secure the service, prevent fraud and abuse, diagnose faults, maintain capacity, keep business records, and improve reliability, balanced against user rights.
- Consent: optional analytics, referral and campaign measurement, and any other processing for which consent is requested.
- Legal obligation: tax, accounting, sanctions, consumer-protection, lawful-process, and regulatory duties.
- Vital or public interests: only where applicable law permits or requires processing to protect people or address a serious threat.
7. Retention
| Data | Retention approach |
|---|---|
| Consent and language preference | Until you change the choice or clear browser storage |
| Session country result | For the current browser session |
| Referral cookie | 30 days after it is set, unless withdrawn or cleared sooner |
| Marketing event deduplication | 24-hour logical expiry; withdrawn marketing consent triggers deletion from browser storage |
| Google Analytics user-level event data | According to the configured property setting, no longer than 14 months; aggregate reports may remain longer without the same user-level identifiers |
| Website access logs | Ordinarily up to 30 days in active log rotation; limited security or backup copies may remain longer where reasonably necessary |
| Device, connection, diagnostic, and security data | Only as long as needed for live service, troubleshooting, security, fraud prevention, dispute handling, or aggregation; raw detail is deleted or de-identified when those needs end |
| License, transaction, refund, and support records | For the relationship and then as required for restoration, accounting, tax, fraud, legal claims, and mandatory recordkeeping |
When an exact period cannot be fixed in advance, we use the data’s sensitivity, purpose, security risk, active plan or dispute status, and legal requirements to determine it. We may preserve data subject to a valid legal hold and delete or de-identify it when the hold ends.
8. International processing
RelyTech LLC is based in the United States, and providers or VPN nodes can operate in other countries. Data may therefore be processed outside your country, where laws may differ. Where required, we use contracts, transfer safeguards, access controls, and data minimization, and we assess additional measures appropriate to the transfer.
9. Your choices and rights
Depending on your location, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent; appeal a decision; or complain to a data-protection or consumer authority. You may also ask for information about categories, sources, purposes, and recipients.
Use the Data Requests and Deletion page or email rely_support@relyvpn.com. Because no email account is required, we may need a Device ID, License ID, transaction reference, support reference, or other limited information to locate records and verify that a request concerns you. We will not request more information than reasonably necessary.
You can withdraw optional website consent at any time. Withdrawal does not affect processing already completed lawfully. You can cancel subscriptions through the billing platform and review refund instructions in the Refund and Cancellation Policy.
10. Children
The Service is not directed to children under 13. Where local law requires a higher age for independent consent, a parent or guardian must authorize the processing. If you believe a child provided data without appropriate permission, contact us so we can investigate and delete it where required.
11. Security
We use technical and organizational safeguards designed to protect data, including encryption in transit where appropriate, access controls, monitoring, minimization, and security reviews. No service can guarantee absolute security. Protect Device IDs, License IDs, devices, payment accounts, and support communications from unauthorized access.
12. Changes and contact
We may update this policy for product, legal, security, or operational changes. We will revise the effective date and provide reasonable notice of material changes through the website, app, or support channel.
Privacy questions, complaints, and requests may be sent to rely_support@relyvpn.com or submitted through the Data Requests and Deletion page.