Privacy Policy

Styxproxy — Anonymous Proxy Service
Effective Date: August 27, 2026

1. Introduction

Styxproxy ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services across any channel — our website, our Telegram bot, or our chat widget.

We collect different information depending on how you interact with us. This policy is designed to be honest and clear about what we collect and why. By using Styxproxy, you consent to the data practices described in this policy.

2. Our Service Channels

We operate three independent channels: the website, the website chat widget (Charon), and the Telegram bot. Each collects different information.

2.1 Website — Anonymous Orders

When you order via styxproxy.com, we collect almost nothing.

• Transaction reference — To identify your order — Retained 7 years
• Product purchased — To fulfil your order — Retained 7 years
• Amount paid — To process payment — Retained 7 years
• IP address (of our server) — Technical operation — Retained 90 days
• Email address (optional) — To send a receipt if you provide it — Retained until you request deletion

We do not know your name, your device IP address, your phone number, or any other identifying information unless you voluntarily provide it. The transaction reference is your only order identifier. You do not create an account.

2.2 Chat Widget (Charon)

Our website includes an AI-powered chat assistant called Charon. When you chat with Charon:

• Messages you send — To understand your request and provide support — Retained 90 days
• Session data — Pages you visited, time spent on pages, scroll behaviour, cart actions — To enable proactive support — Stored in your browser only (sessionStorage), never transmitted to us in an identifiable form
• No account required — Charon identifies your conversation by a random session token, not by your identity

Charon may proactively reach out with helpful suggestions (e.g., offering help if you are comparing plans). This is based on anonymous session behaviour only. We do not link this data to any individual, and no personal information is collected or stored as part of this behaviour analysis.

2.3 Telegram Bot

When you interact with the Styxproxy Telegram bot, we collect: your Telegram chat ID (to identify you and deliver messages), Telegram username if set, display name if shared, messages you send us (90 days), order history (7 years), and PIN if you set one. We do not collect your Telegram phone number.

3. What We Collect

3.1 Information You Give Us

• Order information: product, country, payment amount, transaction reference
• Payment information: processed entirely by our payment processor. We never see your card number, bank account, or full bank details
• Support communications: messages sent via the chat widget, Telegram, or email
• PIN: if you choose to set a PIN to secure your chat account
• Optional email: for receipt delivery on website orders
• Ban claim evidence: screenshots or information you upload when raising a ban claim

3.2 Information We Create

• Order records: transaction reference, product, amount, status, assigned IP, timestamps
• Proxy credentials issued: username, hashed password, validity period
• Free trial records: survey postback data, earned trial time
• Audit logs: timestamped records of significant system events
• Behavioural trigger anonymous aggregates of how customers interact with proactive support features — used to improve Charon's responses. This data is aggregate only and contains no personal information.

3.3 Information We Do NOT Collect

• Your device IP address (when using the website)
• Your phone number
• Your Telegram phone number
• Your name (unless you voluntarily provide it)
• Your location (unless you share it with us)
• Cookies on our website (we do not use cookies)
• Any data from third-party websites or services you access using Styxproxy proxies

4. How We Use Your Information

• Fulfill orders — transaction reference, product, payment
• Deliver proxy credentials — credentials, delivery channel
• Provide customer support — chat ID, order history
• Process refunds — transaction reference, payment information
• Investigate ban claims — transaction reference, evidence you provide
• Detect and prevent fraud — order patterns, payment verification
• Comply with legal obligations — financial records, audit logs
• Send service notifications — chat ID or email if provided
• Improve Charon's proactive support — anonymous aggregate engagement data from behavioural triggers. This data is used only in aggregate form to adjust which prompts Charon uses. No personal data is associated with this improvement process.

5. Data Sharing

We do not sell your data. We do not sell, rent, or trade your personal information to any third party.

We share only what is necessary with: our payment processor (payment processing), vetted third-party proxy infrastructure providers (to generate and deliver your proxy IP), Telegram (to deliver messages via their API), Theorem Reach (to track free trial earnings), and law enforcement as required by applicable law.

5.1 Data Processors

• Payment processor (Flutterwave) — Payment data
• Telegram — Chat messages — telegram.org/privacy
• Theorem Reach — Survey data — theoremreach.com/privacy
• Email service (Resend) — Transactional emails — resend.com/privacy

6. Data Retention

• Financial records (orders, payments, transaction reference) — 7 years — legal obligation
• Order fulfillment records — 7 years — contract performance
• Customer support messages — 90 days — operational efficiency
• Proxy credentials (issued IPs) — 7 years — audit trail
• Audit logs — 7 years — compliance
• Error logs — 1 year — system troubleshooting
• Rate limit logs — 90 days — security
• Behavioural trigger engagement data — Aggregate only, no individual records — used to tune Charon's proactive support

6.1 Deletion Requests

You may request deletion of your personal data at any time. To request deletion: on Telegram, send "delete my data" to @styxproxy; for website orders, email support@styxproxy.com with your transaction reference.

We will delete your personal data within 30 days, except financial records required by law (7 years) and data we are required to retain under applicable law.

7. Data Security

7.1 Technical Measures

• HTTPS-only on all Styxproxy properties
• Database with restricted network access (localhost connections only)
• API keys and secrets stored in environment variables, not in code
• Webhook verification on all incoming payment notifications
• Rate limiting on all API endpoints
• Audit logging of significant system events

7.2 Organizational Measures

• Access to customer data restricted to authorized personnel only
• No customer data in development or test environments
• Secrets rotation policy: API keys rotated on a regular schedule

8. Your Rights

• Access your personal data — Request via any channel — we respond within 30 days
• Correct inaccurate data — Contact us with the correct information
• Delete your data — Send "delete my data" on Telegram or email us
• Object to processing — Contact us — we will assess the objection
• Data portability — We will provide your data in a machine-readable format
• Withdraw consent — Stop using the service and request deletion

9. Cookies and Tracking

We do not use cookies on our website. We do not store any cookies in your browser. We do not use third-party tracking pixels or analytics tools that fingerprint visitors.

We use Plausible Analytics — a privacy-first, cookie-free analytics service that collects only aggregate, non-personal website usage data (pages visited, referrer). This data cannot be used to identify individual users and is not shared with any third party. We do not control the cookies or tracking used by Telegram.

10. Children's Privacy

Styxproxy services are not intended for persons under the age of 18. We do not knowingly collect data from minors. If we become aware that data from a minor has been collected, we will delete it immediately.

11. International Data Transfers

Styxproxy operates primarily in Nigeria. Some of our service providers operate internationally. When your data is transferred outside Nigeria, we ensure appropriate safeguards are in place through standard contractual clauses or equivalent legal mechanisms.

12. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of the breach. We will also notify affected customers via their contact channel as soon as reasonably practicable.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via Telegram, the chat widget, or notice on our website.

14. Contact Us

Styxproxy

• Chat widget: styxproxy.com (open the chat widget)
• Telegram: @styxproxy
• Email: support@styxproxy.com
• Website: styxproxy.com
• Order Status page: styxproxy.com/order/status

We will respond to all enquiries within 30 days.