1. Information we handle
VPDen (“we,” “us,” or “our”) operates vpden.com and the account services used by StayAtHomeBuddy and TravelBuddy devices. The information involved depends on which parts of the service you use.
- Account details: your email address, generated account username, password hash, verification status, and security settings. If you add a profile image or other optional account details, we store those too.
- Orders and delivery: your selected plan, purchase and payment history, shipping address, contact details you provide for delivery, assigned router assets, and tracking information.
- Payment references: payment-provider customer and transaction IDs, subscription status, and payment-method details such as card brand and last four digits. Card entry is handled through Stripe; VPDen’s account records do not store your full card number or card security code.
- Device and connection records: device and asset IDs, account association, public and tunnel IP addresses, approximate IP-based location, last check-in time, software-update results, account-assignment and transfer history, and subscription-authorization or first-connection records. These help show whether your device is online and whether its subscription permits access. Routine background check-ins normally happen about every ten minutes; setup, a manual status check, or first-connection reporting may contact the service sooner.
- Support and waitlist information: messages and attachments you send, and the email, home/travel locations, and optional industry information you submit to the waitlist.
- Technical records: website requests, IP addresses, browser or device information, errors, and security events may be processed by the website, hosting infrastructure, or service providers.
Device subscription check-ins report operational information, such as connection timestamps and IP addresses. They do not send the contents of your browsing to the account service. Normal subscription check-ins also do not upload saved Wi-Fi passwords or private VPN connection keys; those settings are held on the router. VPDen keeps the account, payment, device, and technical records described in this policy.
2. How we use information
We use information to create and secure your account; process payments; prepare, ship, and support hardware; associate routers with the right account; verify subscription access; deliver application updates; troubleshoot connection issues; prevent misuse; and meet applicable legal and accounting obligations.
If you join the waitlist, we use the details you submit to manage early access and contact you about the launch. You can ask us to remove you from the waitlist by emailing support@vpden.com.
Where data-protection law requires a legal basis, the basis depends on the activity: providing the service you request, meeting legal obligations, legitimate interests such as service security and support, or consent where required. You may withdraw consent for consent-based processing without affecting earlier processing.
3. Service providers and disclosures
We disclose information needed to operate the service to providers, including:
- Stripe for payments, billing, and payment-security checks.
- Shippo and delivery carriers for shipping rates, labels, delivery, and tracking.
- DigitalOcean and other hosting or email providers we use to operate the website, store service records, and send account or support messages.
- IPinfo for approximate IP-based location. Looking up a location sends the relevant public IP address to that provider.
- Map and website-asset providers when your browser loads maps, fonts, scripts, or styles, as explained below.
Authorized staff can access information needed for fulfillment, provisioning, and support. We may also disclose information when legally required, to protect rights and service security, or as part of a business transfer subject to applicable protections.
Providers may process information in countries other than where you live. Their privacy practices also apply to their services. Where applicable law requires safeguards for an international transfer, those requirements apply to the transfer.
5. Retention and security
How long information is retained depends on its purpose: maintaining an account and its device associations, providing support, fulfilling orders, handling disputes or fraud, and meeting legal or accounting obligations. Some order, payment, shipping, security, and audit records may need to be retained after an account closes. Copies in backups may remain until those backups are replaced.
We use safeguards including HTTPS, password hashing, account access controls, and device-specific credentials. The offline authorization stored on a router is signed by the server and includes device identity and access deadlines. Signed application-update messages also identify the intended device and compatible hardware. The service records update results so staff can troubleshoot delivery or recovery. Router credentials and local Wi-Fi or VPN configuration can remain on the physical device, so contact support before selling, returning, or transferring it. A change of account ownership does not automatically erase all router settings or old backups, and an unreachable router may retain previously issued offline authorization until its recorded deadline.
To ask about retention of your information or request deletion, use the contact details below. A request may be subject to identity verification and applicable retention requirements.
6. Your choices and requests
You can update available account details through the dashboard and contact support to request access, correction, deletion, or a copy of your information. Depending on where you live, you may also have rights to restrict or object to processing, withdraw consent, and complain to your local data-protection authority. The scope of these rights and any exceptions depend on applicable law.
We may ask for information needed to verify your request. Please do not email passwords, payment-card security codes, or router private keys. Canceling a subscription and deleting an account are separate actions; contact support if you want both.
The service is intended for adults and is not directed at children under 13. If you believe a child has provided personal information, contact us so we can investigate.
7. Contact and policy updates
For privacy questions or requests, email support@vpden.com with “Privacy request” in the subject.
We will update this page when our practices change and revise the date above. Where required, we will provide additional notice of material changes.