This policy explains what personal data BOBO VPN collects, why, and what your rights are. We keep it short and plain on purpose. BOBO VPN is operated from London, United Kingdom, and we follow UK data protection law (UK GDPR).
BOBO VPN is the controller of your personal data. You can reach us at support@bobovpn.com for anything related to your data.
Account details: your full name and your email address, and your preferred contact method if you choose one. We do not ask you to verify your identity. Your password is stored scrambled (hashed), so even we cannot see it. If you sign in with Google or Apple, we receive your email address and name from them, and nothing else.
Orders and payments: the plan you bought, the amount, the date and a payment reference. Card payments are handled by Stripe and crypto payments by NOWPayments. We never see or store your card number, and Stripe lets you choose whether it saves your card.
App devices: the name, type and last-used time of each device that signed in to your account, so you can see and remove them.
Security records: the IP address and time of account logins, used only to protect your account (for example to ask for a code when a new IP or device appears) and to stop abuse.
Messages: anything you send us through the contact form or by email.
We do not monitor, record or store the websites you visit, the content of your traffic, or your DNS requests while you use the VPN. We do not sell data and we do not use advertising or tracking cookies.
To provide the service you paid for (account, plans, devices, support). This is our contract with you.
To keep the service and your account secure, and to prevent fraud and abuse. This is our legitimate interest.
To keep financial and tax records, and to answer legal requests. This is a legal obligation.
To email you about your account: sign-in codes, receipts, plan expiry reminders and important service notices.
We use only the cookies the site needs to work: a session cookie that keeps you signed in, a short-lived cookie that links a completed payment to your account, and small preferences for language and light or dark mode. There is no advertising or third-party tracking.
Only with companies that help us run the service and only for that purpose: payment processors (Stripe, NOWPayments), our email delivery provider, and our hosting providers. We may disclose data if the law requires it. We never sell your data.
Your account data is kept while your account exists. If you ask us to delete your account we remove it, except payment records which we must keep for up to 6 years for tax and accounting. Security records are kept for a short period and then deleted.
You can ask to see the data we hold about you, correct it, delete it, restrict or object to its use, or receive a copy. Your name, contact method, password and email can be changed any time in your dashboard. For anything else write to support@bobovpn.com and we will reply within one month.
If you are not happy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk).
Passwords are stored hashed, connections to our site are encrypted, and access to our systems is limited. Some of our providers are outside the UK; where that happens we rely on approved safeguards.
BOBO VPN is not meant for anyone under 18 and we do not knowingly collect their data.
If we change this policy we will update the date above, and tell you by email when the change is important.