Privacy Policy

Last Updated: August 8, 2023

PotatoVPN is offered by FASTPOTATO PTE. LTD. We will help you understand what information we do/don't collect, and how we collect, store, and use them.

This Policy applies to all services (collectively as the “Service”) offered by PotatoVPN (Software versions like Android, iOS) and PotatoVPN official websites.

We recommend you read it carefully. Once you start using PotatoVPN, you confirm that you understand and agree to the content of this Privacy Policy.

Data We Collect
We are committed to protecting your privacy right by consistently following the data minimization principle. We only collect your personal data to maintain excellent user support and quality of service. The section below elaborates what data we collect and what we use it for. Please note we never collect the data of your IP address or what servers you connected to, meaning that any of your browsing history, queries and data contents are strictly confidential.
Account Creation and ManagementWhat We Use It For
Registration dateTo facilitate your login to PotatoVPN.
Email addressWhen you forget your password, we help you retrieve it by sending a verification code to your email address. It will be collected only if you choose to sign up with an email.
Above data will be automatically collected in process of creating an account. This data is stored for as long as you use the Service, as it is necessary for us to provide it. However, this data is not paired with your activity of using the Service, and you always have the right to request a deletion of it.
Billing and PaymentWhat We Use It For
Payment methodTo provide better product experience and improve after-sales service by planning user support.
Transaction ID/Reference ID
Timestamp
Subscription status
Above data will be automatically collected in process of purchasing. We use them for purpose of user support and troubleshooting only.
Third-parties collection: when you place an order on a third-party platform, your information (e.g., geolocation, cardholder last name and last four digits of Credit card) might be collected by it. To understand what information a third party may collect, please refer to the respective privacy policy of PayPal.
Client DataWhat We Use It For
Usage data: Choice of protocol / Connection timestamp / Network type To provide high-quality VPN service by identifying connection problems, fixing network issues and providing technical support. This data is non-personally identifiable.
Application data: Geolocation (city-level) / Device information / App version To improve VPN service and provide better user experience. Application data is not associated with any other data, so users will not be identified by it.
Crash reports: Error reports To help troubleshoot the issue.
Aggregated data: Aggregated data Aggregated data is from tens of millions of users, such as the most popular sites visited via servers, but it's 100% anonymous and will not identify any user.
Above data will be automatically collected when you launch and use PotatoVPN. This information assists us identifying connection problems, fixing network issues, and providing technical support to improve user experience.
Data We Control and Store
FASTPOTATO PTE. LTD. is the Data Controller of the personal data you offer to us.
How long we store your data
You can always request a deletion of your data on your personal information. Your usage data will only be stored for no more than 48 hours, after which it will be automatically deleted.
Again, our guiding principle towards data collection is to collect only the minimal data to maintain VPN service. Therefore, we delete your personal data as soon as it is unnecessary to store.
Where We Store Your Data
When you use our Service, you may be using servers located in a variety of different countries. However, there is a difference between use and storage. The data we collect are mostly stored in servers located in the European Union.
Since we are a Singapore company, we may access the data outside from the EU when necessary, for example, when user support is required.
In all cases, we follow generally accepted standards and security measures to protect the personal data submitted to us, both during transmission and once we receive it. We always strive to protect your data to the maximum extent we can.
Lawful Bases for Processing Personal Data
We rely on the following legal bases for processing your personal data.
Consent
We may process your personal data provided that we have obtained your prior and express consent to the processing (this legal basis is only used in relation to processing that is entirely voluntary – it is not used for processing that is necessary or obligatory in any way).
Contractual necessity
We may process your personal data on the basis of fulfilling our contract with you or entering into a contract with you on your request.
Compliance with applicable law
We may process your personal data where the processing is required by applicable law.
With Whom Do We Share Personal Data
We are committed to maintaining your trust, and we want you to understand when and with whom we may share the information we collect.
State authorities and legal requirements
In some cases, we may use or disclose your personal data to a third party if we are required to do so by law or if we in good faith believe that such action is necessary to comply with the law or legal process; to protect and defend our rights or to prevent misuse of our Service; or to protect the personal safety of our employees, agents, partners, the users of the Service, or the public.
Please note that since we do not collect your IP address and the servers you connected to, we are unable to disclose such data under any circumstances.
Mergers, acquisitions and corporate restructurings
We may share some or all of your personal data in connection with or during negotiation of any merger, financing, acquisition or dissolution, transaction or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets, or in the event of an insolvency, bankruptcy, or receivership. If we are involved in such a case, we'll continue to ensure the confidentiality of your personal data and give affected users notice before personal data is transferred or becomes subject to a different privacy policy.
Your Rights to Access, Correct, Delete, and Request Restriction
You have the right to access, correct, delete, or object to the processing of your personal information by contacting us at [email protected]. However, deleting information may prevent you from continuing using our Services.
Your Rights Under GDPR:
The General Data Protection Regulation (GDPR) of the European Union (EU) requires us to specifically underline users’ rights in the EU, which are:
  1. The right to be informed.
  2. The right to access.
  3. The right of rectification.
  4. The right to erasure, or the right to be forgotten.
  5. The right to restrict processing.
  6. The right to data portability.
  7. The right to object.
  8. Rights in relation to automated decision-making and profiling.
Legal Basis
PotatoVPN is committed to user privacy globally, and our existing practices reflect that through minimal collection of data and ensuring users have control over their personal information. GDPR requires us to outline those practices in a specific manner for users in the EU.
In line with the GDPR, we collect and process the data outlined in this Privacy Policy on one of the following bases, depending on the circumstances:
  1. For the purposes of fulfilling our contractual obligations to users, including:
    • Providing users with the Services and Apps they have requested.
    • Managing user subscriptions and processing payments.
    • Providing customer support.
  2. For a legitimate interest associated with the operation of our business, including:
    • Enhancing the quality, reliability, and effectiveness of our Site, Services, and Apps.
    • Communicating with customers to provide information and seek feedback related to our Services and Apps.
You can exercise your rights under GDPR to access, transfer, correct, delete, or object to the processing of your personal information by contacting us at [email protected].
Your Rights Under CCPA
If you are a California resident, your privacy rights are outlined in the California Consumer Privacy Act (CCPA). As per definitions in CCPA, PotatoVPN does not sell your personal information to non-affiliated third parties.
If you would like to know further information regarding your legal rights under California law or would like to exercise any of them, please contact us at: [email protected].
Third Parties
PotatoVPN may contain external links that direct to Third-Party Sites. Please notice that we are not responsible for any content or practices of these external websites, thus we encourage you to carefully read the privacy policy of any website you visit.
Some third parties may collect certain information from you independently from us, such as third-party payment platforms, analytics-tool providers, or advertisers. These third parties are:
Cookies
NamePurposeProviderExpires
3hgj7aadzgTo help us know whether cookies popovers have been shown.PotatoVPN1 year
idTo identify users' unique ID and login status.PotatoVPN1 year
You can prevent the setting of cookies by adjusting the settings on your browser. However, disabling cookies may affect the functionality of this site and other websites that you visit. Therefore, it is recommended that you do not disable cookies.
Age Restrictions
The Services are intended for adults aged 18 and above. We do not log information from minors. DO NOT USE PotatoVPN if you are under 18.
Privacy Policy Updates
PotatoVPN may update this Privacy Policy from time to time for reasons such as changes in laws, industry standards, and business practices. PotatoVPN will post updates to this page and update the “Last Updated” date above. If we make updates that materially alter your privacy rights, we will also provide you with advance notice, such as via email or through the Services. If you disagree with such an update to this policy, you may cancel your services account. If you do not cancel your account before the date the update becomes effective, your continued use of our services will be subject to the updated Privacy Policy.
Contact Us
If you have any further questions on this Privacy Policy, please feel free to contact us at: [email protected].