Privacy Policy
Date: 2025-May
At Prosfinity, we are committed to protecting the privacy and security of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use our Endpoint Detection and Response (EDR) and Virtual Private Network (VPN) services. By accessing or using our services, you agree to the practices described in this policy.
Information Collection
When you use Prosfinity’s EDR service, we collect specific device-level and behavioral data necessary for detecting threats and ensuring endpoint security. This includes metadata such as operating system version, device type, and technical configurations. Additionally, the EDR agent may collect telemetry data related to process behavior, file access patterns, registry changes, and other indicators relevant to potential security incidents. For example, if a suspicious file attempts to execute on your system, our service may log its hash, origin, and behavior for threat analysis.
With our VPN service, we strive to offer the highest level of anonymity. We do not monitor or store your browsing activity, DNS queries, or the content of your network traffic. However, to maintain the stability and security of our infrastructure, we may collect minimal connection metadata such as connection timestamps, bandwidth consumption, and the originating IP address at the moment of login. For example, if a user connects to the VPN server from New York at 3:00 PM, we may store this timestamp for a limited period to detect abuse or troubleshoot performance issues. All such data is stored temporarily and deleted routinely.
Use of Information
Prosfinity uses the collected data to deliver core security functions, improve the effectiveness of threat detection, and maintain network performance. In the case of EDR, the data allows us to correlate behavioral patterns, respond to threats in real time, and update detection logic. For VPN users, aggregate usage patterns help us allocate server resources and optimize speeds across regions. We may also use your email address and billing information to manage your account, process payments, and provide customer support.
Legal Grounds for Processing
Depending on your jurisdiction, we process personal data based on one or more of the following grounds: your explicit consent, the necessity to perform a contract (such as when providing our services), our legitimate interests in improving security and preventing fraud, and compliance with legal obligations. For instance, if we detect unusual login attempts, we may process related IP address information to ensure account integrity under our legitimate interest in cybersecurity.
Data Sharing
We do not sell, rent, or trade your personal data. In certain cases, we may share limited information with third-party service providers who support our operations, such as cloud infrastructure partners, billing processors, or analytics services. All such providers are contractually bound to maintain the confidentiality and security of your data. Additionally, we may disclose information if required to comply with a lawful request from authorities, such as a subpoena or court order.
Data Retention
Prosfinity retains EDR logs for a default period of 90 days, unless otherwise specified by enterprise clients. These logs are stored securely and automatically purged after expiration. VPN metadata, where collected, is retained for no longer than 30 days and is encrypted at rest. After this period, all temporary records are securely deleted in accordance with our data retention policy.
Security Measures
We implement industry-standard measures to protect your data against unauthorized access, disclosure, or loss. Our VPN service uses strong encryption protocols (such as AES-256 and WireGuard), while our EDR platform employs secure communication channels and stores telemetry in hardened environments. Access to sensitive information is strictly limited to authorized personnel, and our systems are regularly tested for vulnerabilities.
Your Rights
Depending on where you reside, you may have certain rights under data protection laws, including the right to access, correct, delete, or restrict the processing of your personal data. For example, if you are an EU resident, you have the right to request a copy of the data we hold about you and ask us to delete your account data. To exercise your rights, you can contact us using the information provided at the end of this policy.
Third-Party Services
Our services may integrate with or link to external platforms. While we take care to work with trusted vendors, their handling of your data is governed by their own privacy policies. We encourage users to review those documents before interacting with third-party services through our platform.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Effective Date" at the top of this page and, where appropriate, notify users via email or on our website.
Contact Us
If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:
Prosfinity
Email: info@prosfinity.com
