Privacy Policy

1. What we collect

To run your account we store: your chosen username, email address, salted+hashed password (we never see your plaintext password), wallet balance and transaction history, subscription history, optional Telegram ID if you link it, anonymized device fingerprint of installs tied to your account, IP address at the time of login or download (for fraud prevention), and download-lock records for delivered packages.

2. Why we collect it

• Account access: username, email, password hash.
• Billing: wallet balance, payments, subscription periods.
• Fraud prevention: device fingerprint, IP, security event logs.
• Service delivery: download-lock records to enforce one-per-version policy.
• Customer support: contact via email or Telegram if you opt in.

3. What we do NOT collect

We do not collect or store: payment card numbers (handled by Paddle), cryptocurrency wallet private keys (handled by Cryptomus), photos or videos from your device, contact lists, location data beyond IP geolocation, or any data from third-party apps installed on your iPhone.

4. Sharing

We do not sell or rent user data to third parties. We share data only with: (a) Paddle and Cryptomus, our payment processors, strictly for transaction completion; (b) law enforcement when compelled by valid legal process; (c) our hosting provider (AlexHost) for server operation. Aggregated, anonymized usage statistics may be shared for internal analytics.

5. Data retention

Account data is kept while your account is active and for up to 90 days after deletion or termination, after which we anonymize records used for fraud-prevention and security logs. Payment records are retained for 7 years for tax and accounting purposes as required by law.

6. Security

Passwords are stored using salted hashing (Werkzeug PBKDF2). Communications are encrypted in transit (HTTPS / TLS 1.2+). Our customer database is on a dedicated server with restricted access, daily encrypted backups, and intrusion-detection monitoring. We do not store decryption keys for any encrypted content delivered to users.

7. Your rights

You may at any time: (a) export your account data by contacting support; (b) request deletion of your account, which removes personally identifying fields and anonymizes remaining records; (c) update your email address from the customer portal; (d) revoke linked Telegram by contacting support.

8. Cookies

vcampro.online uses minimal session cookies and localStorage for: (a) keeping you signed in to your customer portal; (b) remembering your selected language; (c) basic CSRF protection. We do not use third-party advertising or behavioral tracking cookies.

9. Children

vCam Group is not directed at children under 16. We do not knowingly collect data from anyone under 16. If we learn we have, we delete it immediately.

10. Contact

Privacy questions: support@vcampro.online. Updates to this policy are published on this page with a revised date.