Privacy Policy

Core Privacy Principle: Aproxia is built under Privacy by Design and Privacy by Default frameworks (GDPR Art. 25). Remote sessions are secured with end-to-end encryption (NaCl cryptography and TLS 1.3). We never record, access, or store your desktop screens, keystrokes, or transferred files.

1. Data Controller Identification

The Data Controller responsible for personal data processed via this website and Aproxia services is Aproxia. For data privacy inquiries or DPO communications, contact us at: support@aproxia.eu.

2. Zero-Knowledge Remote Session Architecture

Aproxia features an advanced native P2P infrastructure:

End-to-End Cryptography: Desktop screen feeds, mouse movements, keyboard commands, and file transfers are encrypted directly between Host and Client endpoints with ephemeral cryptographic keys.
Opaque Relay Routing: If strict corporate NAT firewalls require relay forwarding, our servers route opaque encrypted binary blobs without possessing decryption keys.
No Secret Screen Recording: We never capture, monitor, or store session video payloads.

3. Categories of Personal Data Processed

Signaling & Network Data: Ephemeral session ID, transient public IP addresses required for P2P connection handshakes (erased from signaling clusters upon session termination).
Support & Inquiries: Name, email address, and inquiry messages voluntarily submitted through our contact forms.
Anonymous Crash Telemetry: Client software version and anonymous crash stack traces used strictly for bug fixes. Zero behavioral profiling.

4. Lawful Grounds for Processing (GDPR Art. 6)

Contractual Performance (Art. 6.1.b): Delivering secure remote connectivity and software licenses.
Legitimate Interests (Art. 6.1.f): Safeguarding our signaling infrastructure against DDoS attacks and abuse.
Explicit Consent (Art. 6.1.a): Voluntarily contacting technical support.

5. Zero Data Sale Guarantee (CCPA / GDPR Notice)

We do not sell, rent, license, or monetize personal information to third-party data brokers or marketing networks. Data processing takes place within secure European Union infrastructure.

6. Data Retention Period

Signaling network logs are strictly ephemeral and cycled every 24 to 48 hours. Support communications are retained only as long as necessary to address inquiries or fulfill statutory legal requirements.

7. Statutory Data Rights (GDPR Articles 15-22 & US Privacy)

Users have the right to request access, rectification, erasure ("Right to be Forgotten"), restriction of processing, data portability, and objection. To exercise your rights, email us at support@aproxia.eu. We respond within 30 days.

8. Cookie & Tracking Technology Disclosure

We only employ strictly necessary technical cookies (security CSRF nonces and language preference aprx_lang). No invasive third-party tracking or advertising cookies are utilized.