Legal

Privacy Policy

Effective: October 20, 2026 · Applies to the artemisx.net website, the account pages, the ArtemisX VPN Lite app and ArtemisX's VPN, Proxy and VPS services.

1. Summary

2. Who handles your data

ArtemisX (“we”) operates the artemisx.net website, the account pages, the ArtemisX VPN Lite app and the servers behind them, and decides why and how the personal data described here is processed (the data controller and processor under Vietnam's Decree 13/2023/ND-CP). Business and contact details are in section 14.

This policy is our notice of personal data processing under Article 13 of Decree 13/2023/ND-CP. By signing up, buying or using the services after reading it, you consent to the processing described below for those purposes.

3. Data we process

We do not collect your phone number, date of birth, identity documents, contacts, GPS location or list of apps. Split tunnelling (choosing which apps use the VPN) reads your app list on the device so you can choose; that list never leaves the device. The free VPN tier works without an account; we then hold no account or device of yours, but the source IP and server logs in section 4 are still recorded.

The app keeps your sign-in session, server list, favourites and free-tier allowance on the device. Uninstalling the app removes them.

4. Logs on the VPN and proxy servers

The routing software on our VPN servers (sing-box) writes an operational log line for each connection: the time, the source IP address (yours), the exit server, and the destination (the domain name or IP and port you connect to). On paid plans each line also carries your account id, because personal connection keys are named after the account. The free tier uses a shared key, so its log lines carry no account id.

That log lives in the server's own logging system. We extract only the source IP, exit server and connection count into our database (the “source IP” row in section 3, kept 30 days). Destinations and account ids are not loaded into the database. The raw log on the server is overwritten once its storage allowance is full; we have not yet set a fixed retention period for it, and will update this section when we do.

Our proxy servers also keep operational logs, which may include the source IP and destination of a connection, and count daily usage for each proxy plan (section 3).

We use these logs to operate the service, fix faults, detect abuse under the Acceptable Use Policy, and answer valid legal requests from competent authorities. We do not assemble them into your browsing history, use them for advertising or sell them.

5. What we do not do

• We do not read, store or decrypt the content of traffic passing through the VPN tunnel or the proxies.
• We do not sell, rent or trade personal data.
• We embed no third-party advertising, behavioural-analytics or crash-reporting SDKs in the app or the website.
• We do not build advertising profiles or target you with your data.
• We never receive or store your card number, bank account, or PayPal/Google password.

6. Purposes and legal bases

• Performing our contract with you: creating your account, provisioning and renewing services, enforcing device limits, metering proxy usage, processing payments, support.
• Your consent (Article 11, Decree 13/2023/ND-CP): Google sign-in, VAT invoice requests, the referral program, the sales chat. You can withdraw it at any time (section 10).
• Legal obligations: keeping accounting records, issuing invoices, tax duties; cooperating with competent authorities under the Law on Cybersecurity and related laws.
• Protecting the service and others: recording source IPs and operational logs to stop spam, attacks and fraud through our infrastructure; rate-limiting the chat.

We do not process sensitive personal data as defined in Article 2 of Decree 13/2023/ND-CP, other than payment transaction data (amount, gateway, transaction id) to the extent an order needs it.

7. Recipients and processors

We share data only with the parties below, and only what each needs for its part of the work. Each processes data under its own policy.

8. Transfers outside Vietnam

Our VPN servers are in Singapore. Supabase, Cloudflare, Google, PayPal, Telegram, DeepSeek, IPRoyal, Webshare and the other parties in section 7 process data on infrastructure outside Vietnam. The data in sections 3 and 4 is therefore transferred to and stored outside Vietnam. We transfer only what each stated purpose needs, and follow Vietnamese legal procedures for cross-border transfers of personal data.

9. How we protect data

• Connections between the app, the website and our servers are encrypted (HTTPS/TLS). Account passwords are stored hashed.
• Each account can read only its own data (enforced in the database). Admin staff reach data only through role-checked functions, for support, reconciliation and abuse handling.
• Proxy passwords are stored in a readable form so you can view them again in your account. Do not reuse one elsewhere; you can change it by reissuing.
• If a personal data breach occurs, we notify the competent authority within the period the law sets and tell you if you are affected.

No system is perfectly secure. If you find a vulnerability, report it to support@artemisx.net.

10. Your rights and how to use them

Under Decree 13/2023/ND-CP you have the right to: be informed about processing; give or refuse consent; access, view and correct your data; withdraw consent; request deletion; request restriction of processing; request a copy of your data; object to processing; complain, denounce or sue; claim compensation for damage; and protect yourself as the law allows. If you are in the EU/EEA or the UK, you have comparable rights under the GDPR, including data portability and complaint to your local supervisory authority.

Do it yourself on the Account page: view and change your name, change your password, view and remove devices, view orders and wallet history, turn auto-renewal on or off.

Everything else (a copy of your data, deletion, restriction, objection, withdrawing consent): email support@artemisx.net from the email address you registered with and say what you want. If you use the free tier without an account, tell us the IP address and time range concerned.

• We may ask for more information to confirm you are the data subject before acting.
• We respond to and carry out requests within 72 hours of receiving a valid request, unless the law allows a different period; if we need longer, we tell you why.
• Withdrawing consent does not affect processing already done. For data needed to provide a service, withdrawing consent may mean we can no longer provide that service; we will explain the consequence before acting.
• Some data must be kept even if you ask for deletion, such as accounting records, or where another law requires it.

If you disagree with how we handle your data, you can complain to us first, to Vietnam's personal data protection authority (the Department of Cybersecurity and High-Tech Crime Prevention, Ministry of Public Security), or bring a claim as the law provides.

11. Deleting your account

There is no self-service delete button in the app or the account pages yet. Ask as described in section 10, or use the “Data request” link in the account footer. When an account is deleted:

• Deleted: profile, devices, VPN keys, plans, proxy details and proxy usage, support requests linked to the account, referral links.
• Kept: orders, invoice details and wallet history, to the minimum accounting and tax law requires; some Google Play payment error records, unlinked from the account.
• Expire on their own: VPN source IPs (30 days) and server logs (section 4). Support requests sent by email or Telegram without an account are deleted when you ask for them specifically.

Any wallet balance left at deletion is handled under the Payments and Refund Policy.

12. Children

The services are not intended for anyone under 16. We do not knowingly collect children's data. If you are a parent or guardian and know a child has given us data, contact us and we will delete it.

13. Changes to this policy

When this policy changes, the effective date at the top changes with it. Changes that widen the data or purposes of processing are announced by email or in the app before they apply. All policies and their effective dates are on the Legal page.

14. Contact

• Email: support@artemisx.net
• Phone: 0916902211
• Telegram: t.me/ArtemisXSupportBot