Who is responsible
Japan VPN Co., 159 5th St NW, Atlanta, GA 30332, United States, operates JapanVPN. Contact support@getjapanvpn.com for privacy requests.
Account and billing data
We store your account email, salted password verifier, email-verification status and hashed verification/recovery tokens. Billing records include Stripe customer/subscription identifiers, plan, status, billing dates, currency and event identifiers. Stripe handles payment details; the JapanVPN application does not store card or bank details or raw webhook bodies.
Device and connection data
Device records include a label, random identifier, WireGuard public key, assigned VPN address, status and creation/revocation times. Enrollment codes are stored as short-lived hashes. Native desktop devices generate their private keys locally. Historical operator-provisioned client configurations can contain private keys and remain in protected server storage.
Traffic and operational logs
The application does not create browsing-history or DNS-query records. WireGuard exposes live peer handshake times and aggregate byte counters to operators. Audit logs record bounded operation names, outcomes, timestamps and limited provisioning identifiers. Infrastructure and service providers may process security and network metadata. We do not make a blanket no-logs claim; see the logging and retention notice.
Why we process data
We use data to provide the requested account and VPN service, process subscriptions, verify ownership, prevent abuse, troubleshoot issues, protect the service and meet applicable legal obligations. Support messages are used to respond to your request.
Retention
Account, billing, device, consumed-token and revoked-device records currently remain in the database unless removed through an operator-reviewed request or maintenance process. Protected credential archives and backups are retained separately. Expiring a session or token does not automatically delete its database record. Operational logs use bounded rotation; providers have their own retention practices. We do not promise a fixed automatic deletion deadline.
Providers and transfers
Our service-provider list explains the roles of hosting, DNS, email and payment providers. The VPN endpoint and account/enrollment APIs operate in Tokyo; other providers may process data in other countries. We do not use an advertising-data integration or sell account data.
Your requests
You may contact us to request access, correction or deletion and to exercise other rights available under applicable law. We verify account ownership before disclosing or changing personal data. We may retain records where needed for billing, security, legal obligations or the rights of others. Do not send passwords, private keys or complete VPN configurations with your request.
Children and changes
JapanVPN is intended for adults and is not offered to children. We will update this notice when our processing changes and communicate material changes as applicable.