Privacy Policy
Effective Date: May 2, 2025
Comonad Limited (Company Number: 15713725) ("we", "us", "our") respects your privacy and is committed to protecting the personal data we process when you use the Proxed.AI service (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal data, as well as your rights regarding that data.
1. Data We Collect
When you use the Service, we may collect the following personal data:
- Account Information: Such as your name, email address, company name (if applicable), and payment information (processed by our third-party payment processor).
- Usage Data: Information about how you interact with the Service, including IP addresses, browser type, device information, pages visited, features used, and API request metadata (like timestamps, status codes, endpoint paths, partial keys for identification/rate-limiting, but not full request/response bodies or full sensitive credentials passed through the proxy).
- Configuration Data: Information you provide to configure the Service, such as target API endpoints and security settings. Note that we do not store full API keys or sensitive credentials required for your target APIs in a retrievable format; you are responsible for managing these securely.
- Communication Data: Information you provide when you contact us for support or other inquiries.
2. How We Use Your Data
We use the personal data we collect for the following purposes:
- Providing and Maintaining the Service: To operate, secure, and improve the Service, process transactions, authenticate users, and provide customer support.
- Product Improvement: To analyse usage patterns, understand user needs, troubleshoot issues, and enhance the features, functionalities, and user experience of the Service.
- Communication: To send you administrative information, service announcements, security alerts, and support messages. We may also send marketing communications if you opt-in or where permitted by law.
- Compliance and Protection: To comply with legal obligations, enforce our Terms & Conditions, and protect the rights, safety, and property of Proxed.ai, our users, and others.
3. Legal Basis for Processing
We process your personal data on the basis of:
- Contractual Necessity: To fulfil our contract with you to provide the Service.
- Legitimate Interests: For our legitimate interests, such as improving the Service, ensuring security, preventing fraud, and communicating with users, provided these interests are not overridden by your data protection rights.
- Consent: Where required by law, such as for certain marketing communications or the use of non-essential cookies.
- Legal Obligation: To comply with applicable laws and regulations.
4. Data Sharing & Disclosure
We may share your personal data with:
- Service Providers: Trusted third parties who assist us in operating the Service (e.g., cloud hosting providers, payment processors, analytics providers, email service providers), under strict confidentiality and data protection obligations.
- Legal or Regulatory Authorities: Where required by law, legal process, or governmental request, or to protect our rights, safety, or property, or that of our users or the public.
- Business Transfers: In connection with a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality arrangements.
We do not sell or rent your personal data to third parties.
5. International Transfers
Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. Where we transfer your personal data outside of the United Kingdom or the European Economic Area, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on an adequacy decision, to protect your personal data in accordance with applicable laws.
6. Data Retention
We keep your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including providing the Service, complying with our legal obligations, resolving disputes, and enforcing our agreements. Account information is typically retained for as long as your account is active and for a reasonable period thereafter. Usage data may be retained for shorter periods or aggregated and anonymised for analytical purposes.
7. Your Rights
Subject to applicable data protection laws, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct any inaccurate or incomplete data.
- Erasure: Request the deletion of your personal data under certain circumstances.
- Restriction: Ask us to restrict the processing of your data in certain situations.
- Objection: Object to our processing of your data based on legitimate interests.
- Data Portability: Request a copy of your personal data in a structured, commonly used, and machine-readable format.
- Withdraw Consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, please contact us using the details below.
8. Security Measures
We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, destruction, or alteration. These measures include encryption, access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. You are also responsible for maintaining the security of your account credentials, as outlined in our Terms & Conditions. We are not responsible for breaches resulting from your failure to secure your credentials or for the actions of third parties outside our direct control.
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us so we can remove it.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on our website or communicated through the Service, and the "Effective Date" will be updated accordingly. By continuing to use the Service after changes are made, you acknowledge and agree to the updated Policy.
Contact Us
If you have any questions, concerns, or wish to exercise your data protection rights, please contact us at: [email protected]
If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority (such as the Information Commissioner's Office in the UK).
By using the Proxed.ai Service, you acknowledge that you have read, understood, and agree to the processing of your personal data as described in this Privacy Policy.