1. Who is responsible
SAMTRIX TECH. LTD, United Kingdom, operates GeoMatch Proxy and is the controller of your personal data. Contact us about privacy at privacy@geomatchproxy.com.
This policy covers the website at https://app.geomatchproxy.com, your account, and the GeoMatch Proxy browser extension for Chrome, Edge and Firefox.
2. What we collect
| Data | What it includes | Why |
|---|---|---|
| Account | Email address, name, optional company, password (stored only as a one-way hash), two-step sign-in settings (encrypted), Google account ID if you sign in with Google, alert preferences, and the date and version of the terms you accepted. | To create and secure your account and contact you about it. |
| Purchases | Pack size, amount, currency, date, status, Stripe payment references and receipt link, and for crypto payments the Cryptomus invoice reference and the coin, network and amount paid. Your card details go to Stripe, not to us. If you turn on auto-renew, Stripe keeps your card for the renewals; we store only a reference to it and its brand, last four digits and expiry date, and remove it when you turn auto-renew off. | To deliver data you bought, keep accounting records and handle refunds. |
| Data balance | Data bought, data used (hourly readings from our network provider) and expiry date. | To show your balance, warn you when it is low and stop use when it runs out. |
| Connection records | For each connection: the IP address you pasted (or the city and provider you picked) and its approximate location and provider, the location we matched and the match level, the exit IP's location, a session ID, the time, and the IP address and browser (user agent) the request came from. | To provide the service, show your connection history, investigate problems, prevent fraud and abuse, and respond to lawful requests. |
| Signed-in browsers | An access token for each browser where you use the extension (stored as a hash), its device label (e.g. "Chrome on Windows") and when it was last used. | So you can see and sign out browsers. |
| Security and support | Session data, server logs (IP address, time, page requested, errors), notes our staff add when reviewing flagged activity, and messages you send us. | To keep the service secure, fix problems and answer you. |
What we don't collect: we don't record the websites you visit or the content of your browsing through the proxy. Traffic passes through our network provider's servers, which see the destinations of your connections as any proxy or internet provider would (see section 4).
3. The browser extension
- The extension stores in your browser: your access token, your recent IPs and cities, your current connection details and the temporary proxy login for it.
- When you connect, it sends us the IP you pasted or the city you picked. When you type a city or country, it sends us what you type to suggest matching places. To show where you're online from, it asks our server, which looks up the approximate location of the IP address the request comes from (cached briefly, not stored in your connection records). To check the result it fetches your new public IP through the proxy and sends it to us to compare with the target location.
- While connected it routes the browser's traffic through the proxy, turns off WebRTC IP sharing and sets the location and timezone that websites read from your browser. It changes these back when you disconnect.
- It doesn't read page content, your browsing history, cookies of other sites, or passwords, and it doesn't send us the addresses of sites you visit.
- Data the extension handles is used only to provide the GeoMatch Proxy service. It isn't sold, used for advertising, or used to decide creditworthiness. This complies with the Chrome Web Store User Data Policy, including its Limited Use requirements, and the equivalent Microsoft Edge Add-ons and Mozilla Add-on policies.
4. Who we share data with
We don't sell or rent personal data. We share it only with service providers who help us run GeoMatch Proxy, under contracts that limit their use of it:
- Proxy-Seller (residential proxy network): receives the location and provider requested for each connection and carries your proxied traffic. It doesn't receive your email or payment details.
- IP location services (ip-api.com or ipinfo.io): receive the IP addresses you paste, and exit IPs, to look up their location and provider.
- Stripe: processes payments and receives your payment details, email and billing country. See Stripe's privacy policy.
- Cryptomus: processes crypto payments and receives the order reference, amount and, from your wallet, the payment itself. Blockchain transactions are public and permanent. See Cryptomus's privacy policy.
- Google: if you choose "Continue with Google", Google shares your name, email and account ID with us.
- Hosting and email providers that store our data and send our emails.
- Authorities and others where the law requires, or where needed to prevent fraud or harm, enforce our terms or defend legal claims.
- A buyer or successor if our business is sold or reorganised, under this policy.
5. Legal bases (UK/EU GDPR and similar laws)
- Contract: account, purchases, data balance, connections and signed-in browsers, to provide what you signed up for.
- Legal obligation: payment and tax records; responding to lawful requests.
- Legitimate interests: security, fraud and abuse prevention, connection records, server logs and improving the service. We've balanced these against your rights and kept collection to what's needed.
- Consent: anything optional we ask your permission for. You can withdraw consent at any time.
6. How long we keep it
- Connection records: 365 days, then deleted automatically.
- Usage readings: while your account is open.
- Account data: until you delete your account. Signed-in browser tokens are deleted when you sign a browser out.
- Purchase records: as long as tax and accounting law requires (often 6 to 7 years), even after you delete your account.
- Server logs: up to 90 days.
When you delete your account we delete your profile, tokens and proxy login, and remove your email, name and IP addresses from records we must keep, so they no longer identify you. We may keep information longer when needed for an ongoing investigation, dispute or legal claim.
7. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent. You can do much of this yourself: change your details in Settings, download your connection history as CSV from the Connections page, and delete your account from Settings. For anything else, email privacy@geomatchproxy.com. We'll reply within one month and may need to confirm your identity.
You can complain to your local data protection authority (in the UK, the Information Commissioner's Office; in the EU, your national authority). We'd appreciate the chance to help first.
California residents: we don't sell or share personal information for cross-context behavioural advertising, and we don't use sensitive personal information to infer characteristics about you. You have the rights to know, delete and correct, and we won't discriminate against you for using them.
8. International transfers
Our providers may process data outside your country, including in the United States and the European Union. Where required, we rely on safeguards such as adequacy decisions or standard contractual clauses.
9. Security
We use HTTPS throughout, hash passwords and access tokens, encrypt proxy passwords and two-step sign-in secrets, offer two-step sign-in, limit staff access to what they need and rate-limit sensitive actions. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
10. Cookies
We use only essential cookies, for signing in and security. See our Cookie Policy.
11. Children
GeoMatch Proxy is not for anyone under 18. We don't knowingly collect data from children; if you believe a child has given us data, contact us and we'll delete it.
12. Changes to this policy
We'll update the "Last updated" date when we change this policy and, for material changes, tell you by email or in your dashboard before they take effect.
13. Contact
SAMTRIX TECH. LTD, United Kingdom. Privacy questions: privacy@geomatchproxy.com.