Privacy Policy
Last updated: October 18, 2026 · Effective date: October 18, 2026
InfoSync Inc. (registered address: 7144 NW 122nd Ave, Parkland, FL 33076, USA; “InfoSync”, “we”, “us”) understands the importance of personal information to you. We comply with applicable US federal and state law, the GDPR where it applies, and other data protection laws, and we follow Section 5.4 of the Apple App Store Review Guidelines for VPN apps. This policy explains how we collect, use, store, share and protect personal information.
VPN Data Practices
This section explains, item by item, whether we collect each type of data when you use an InfoSync Connect VPN/acceleration connection, and how long we keep it. “No” means our systems do not write that record; “Yes” means we collect it, with the retention period stated. Retention periods follow the longest requirement among the jurisdictions our service touches; data is deleted or anonymised when the period ends, and records that the law requires us to keep survive account deletion until their statutory period expires. Connection session records are used only for concurrent-device limits, billing and troubleshooting, and are not used to analyse the content you access. See the table below and Sections 1.2 and 4.
| Data | Collected | Retention | Notes |
|---|---|---|---|
| Connection session record: account and device identifiers | Yes | 180 days | Concurrent-device limits, billing and abuse prevention |
| Connection session record: entry node and target node | Yes | 180 days | Routing and troubleshooting |
| Connection session record: session start / end time, duration, disconnect reason | Yes | 180 days | Concurrent-device limits, billing and troubleshooting |
| Traffic content (application data, packet payload) | No | Not retained | We do not store or inspect what you transmit |
| Websites visited / browsing history / URLs | No | Not retained | We do not record the addresses you visit |
| DNS query records | No | Not retained | We do not record the domains you resolve |
| Source IP (your original public IP) — VPN tunnel and connection records | No | Not retained | Your original IP is not written to connection records |
| Source IP (your original public IP) — account sign-in, sign-up and payment API requests | Yes | 180 days | Security and fraud prevention only |
| Assigned public IP (exit IP) | No | Not retained | We do not retain the exit IP linked to your account |
| Timestamp (account sign-in date and time) | Yes | 180 days | Account security and anomaly detection |
| Bandwidth / traffic volume (billing usage) | Yes | 10 years | Monthly / per-session totals only, no detail |
| Connected edge-node region (not a specific IP; aggregated and de-identified, not linked to an account) | Yes | 24 months | Routing and capacity statistics |
| Device information (hardware model, OS version, system-level device and app-instance identifiers, network type) | Yes | Account lifetime; deleted within 180 days after account deletion | Security, fraud prevention and compatibility |
| Crash logs and operation logs | Yes | 180 days | Crash and fault diagnosis |
| Account email (and public profile authorised through third-party sign-in) | Yes | Account lifetime; deleted within 180 days after account deletion | Registration, sign-in and support records |
| Payment information (card number, security code) | No | Not retained | Processed by Apple / Google / Stripe; we do not receive or store full card numbers |
| Purchase records (subscription status linked to your Apple ID / Google account) | Yes | 10 years | Provisioning, renewal, refund checks and statutory bookkeeping |
| Client version | Yes | Account lifetime; deleted within 180 days after account deletion | Compatibility maintenance |
| Support correspondence (emails and screenshots you send) | Yes | Deleted within 180 days after the case is resolved | Replies and after-sales support only |
Basis for the retention periods:
- IP addresses on account API requests, account sign-in times, security and operation logs, crash logs: 180 days. Article 21 of the Cybersecurity Law of the People’s Republic of China requires network logs to be retained for at least six months, which is the longest general log-retention requirement among the jurisdictions we touch.
- Device information (system-level device identifiers, hardware model, OS version) and client version: account lifetime, deleted within 180 days after account deletion, following the same longest log/record period.
- Connection session records (account and device identifiers, entry and target nodes, session start and end times): 180 days, the same basis as other logs (Cybersecurity Law of the People’s Republic of China, Article 21).
- Orders, payments, invoices and billing traffic volume: 10 years. Section 257 of the German Commercial Code and Section 147 of the German Fiscal Code require business records to be kept for 10 years, the longer of the applicable rules (US IRS requirements are generally 3–7 years).
- Aggregated and de-identified node-region statistics (no account-level personal information): 24 months. This data is not personal information and is kept for as long as operational analysis requires.
We do not sell or rent your data to any third party, and we do not share any user data with third parties for advertising; neither the service nor this website integrates third-party advertising SDKs, and your traffic content and access records are not used for ad targeting. Your internet traffic may be routed through our global edge nodes to different countries or regions, which is a necessary part of providing the acceleration service.
1. How we collect and use personal information
We collect only the information necessary to deliver the functionality, and we do not bundle collection simply because you agree to this policy.
1.1 Registration, sign-in and account management
You can create an InfoSync account with an email address and a password. We collect this information to complete registration and identity verification.
You may sign in with a third-party account (such as an Apple ID or Google account). We obtain the public profile that platform authorises (such as nickname and avatar) and link it to your InfoSync account.
Account deletion: use the account-deletion feature in the app where your version provides it, or email privacy@infosyncadx.com; we complete the request within 15 business days. Deletion is irreversible; after deletion your membership benefits lapse. We delete or anonymise your personal information within 180 days; orders, payment records and invoices that the law requires us to keep are retained until their statutory period expires (up to 10 years) and are used only for statutory purposes.
1.2 Connection acceleration (core function)
The core of InfoSync Connect is a secure data-transmission acceleration path. When you use it:
- we do not collect any data you transmit through our network, including the websites you visit, the public IP assigned to you, or the content of application traffic;
- we do not record your browsing history, DNS queries or original IP address in connection records, and we do not record the public IP assigned to you there. Account sign-in, sign-up and payment API requests do process IP addresses, for security and fraud prevention only — see Section 1.4;
- we do not store your traffic content or bandwidth usage detail. The start and end time of a connection, the entry and target nodes, and the associated account and device identifiers are kept as a connection session record for 180 days (see VPN Data Practices above).
Exceptions (necessary and minimised):
| Information | Purpose | Retained |
|---|---|---|
| Total traffic volume (monthly / per session) | Billing and plan limits | Yes (aggregate only) |
| Sign-in date and time | Account security and anomaly detection | Yes (deleted after 180 days) |
| Connected edge-node region (not a specific IP) | Routing and capacity statistics | Yes (anonymised aggregate) |
| Client version | Compatibility maintenance | Yes |
Your internet traffic may be routed through our global edge nodes to different countries or regions, which is a necessary part of providing the acceleration service. The item-by-item yes/no list and retention periods are in VPN Data Practices above.
1.3 Customer support
You can reach support through the feedback entry in the app or by email. We do not request camera, photo-library or microphone permissions for this purpose; if you attach a screenshot to an email, the attachment is used only to answer your question and is deleted within 180 days of resolution.
1.4 Security operations
To keep the service secure, we collect:
- Device information: hardware model, OS version, system-level device and app-instance identifiers, IP address (account API requests only, not VPN connection records), network type.
- Log information: crash records, operation logs and service fault information.
This information is used only to detect malicious software, prevent fraud, verify identity, maintain compatibility and improve service stability, and is not used for advertising. Your original IP and assigned IP are not recorded in the VPN tunnel or in connection records; IP addresses are processed only on account sign-in, sign-up and payment API requests and are kept for 180 days. Item by item: VPN Data Practices.
1.5 Legal exemptions
Please understand that, under laws and regulations, we may collect and use your personal information without your consent in the following circumstances: where directly related to national security or national defence; where directly related to public safety, public health or major public interests; where directly related to criminal investigation, prosecution, trial or enforcement of judgments; where necessary to protect the life, property or other major lawful rights and interests of you or another person but consent is difficult to obtain; where the information was made public by you; where collected from lawfully disclosed public information; where necessary to enter into or perform a contract at your request; where necessary to maintain the safe and stable operation of the software and services; where necessary for lawful news reporting; where necessary for academic institutions to carry out statistical or academic research in the public interest and the results are de-identified when provided externally; and other circumstances provided by laws and regulations.
2. Cookies and similar technologies
Our website is a set of static pages. It does not set or use cookies or similar tracking technologies, and it does not load third-party analytics or advertising scripts. Fonts and styles are loaded from this site, so browsing our pages does not transfer your IP address to a third party.
The InfoSync Connect client stores sign-in credentials and local settings on your device only, to keep you signed in; this local data is not used as a tracking identifier across apps. You can clear it in system settings or by uninstalling the app.
3. How we share, transfer and publicly disclose personal information
3.1 Sharing principles
We do not share your personal information without your consent. Shared data is limited to what is necessary for the purpose.
3.2 Sharing needed to deliver functions or services
- Payment processing: when you buy a plan through the website, payment is processed by Stripe. We do not obtain or store your card number. See the third-party platform list below.
We do not sell or rent your personal information to any third party, and we do not share your data with third parties for advertising or marketing. The service does not integrate third-party advertising, ad-aggregation or attribution SDKs, and device identifiers are used only for authentication, service operation, security protection and fault diagnosis.
3.3 Third-party platforms and payment services
We use the following third-party platforms for sign-in and payment. They process only the information necessary for the relevant function, and we rely on their data processing terms and require appropriate safeguards:
| Platform / service | Type | Operator | Information processed | Privacy policy |
|---|---|---|---|---|
| Apple IAP (third-party platform) | In-app subscription | Apple Inc. | Purchase records linked to your Apple ID | apple.com/legal/privacy |
| Google Play Billing (third-party platform) | In-app subscription | Google LLC | Purchase records linked to your Google account | policies.google.com/privacy |
| Sign in with Apple / Google Sign-In (third-party platforms) | Third-party sign-in | Apple Inc. / Google LLC | Public profile you authorise (nickname, avatar, email) | apple.com/legal/privacy · policies.google.com/privacy |
| Stripe | Website payment | Stripe, Inc. | IP address, payment device information, transaction information | stripe.com/privacy |
3.4 Transfer and public disclosure
We do not transfer your personal information to third parties unless you give explicit consent or a merger, acquisition or similar change occurs (in which case the successor must continue to comply with this policy).
We do not publicly disclose your personal information unless required by law or with your consent.
4. How we store personal information
Storage location: we store data in the United States and at global edge nodes. If you are in the EU or another region, we ensure transfers comply with GDPR requirements (such as Standard Contractual Clauses).
Retention: we keep data only for as long as necessary to provide InfoSync. Retention periods follow the longest requirement among the jurisdictions our service touches; when a period ends we delete or anonymise the data, and records that the law requires us to keep survive account deletion until their statutory period expires. Specific periods and their basis are in VPN Data Practices.
5. How we protect personal information
We protect transmission with AES-256 encryption and industry-standard encrypted tunneling protocols, collect data only to the minimum extent necessary for each function, and maintain a dedicated security team. Even with reasonable technical and organisational measures, transmission and storage over the internet cannot be free of risk, so please also protect your account and password.
6. How you manage your personal information
You have the following rights:
- Access and correction: view or change account information in [Settings] in the app.
- Deletion: request deletion by emailing privacy@infosyncadx.com.
- Withdrawing consent: turn permissions off in device settings, or uninstall the app.
- Account deletion: see Section 1.1. Data is deleted or anonymised within 180 days; orders, payment records and invoices that the law requires us to keep are retained until their statutory period expires (up to 10 years).
- Complaints: contact support@infosyncadx.com; we reply within 15 business days.
7. Minors
If you are under 16, please use our service under the guidance of a guardian. We do not intentionally collect personal information from minors.
8. Changes to this policy
We may revise this policy from time to time. Updates are published in the app and on https://www.infosyncadx.com/privacy, and are announced by in-app dialog or on this page.
9. Contact us
For questions, comments or data protection requests, contact us at:
- Customer support: support@infosyncadx.com
- Privacy contact (data protection requests only): privacy@infosyncadx.com
- Company address: InfoSync Inc., 7144 NW 122nd Ave, Parkland, FL 33076, USA
We reply within 15 business days after verifying your identity. Privacy requests should be sent to privacy@infosyncadx.com; that mailbox is handled separately from customer support.