Sultan VPN Privacy Policy

Last updated: May 11, 2026

This Privacy Policy explains what information Sultan VPN ("we", "us", "our") processes when you use our Telegram bot and VPN service, how that information is used, and what choices you have.

1. Scope

This policy applies to:

Telegram bot interactions with @sultan_vpn_best_bot (or successor bot username).
Subscription management and customer support workflows.
VPN account provisioning and technical operations required to deliver the service.

2. Data We Process

2.1 Account and service data

Telegram user ID and basic bot interaction metadata (commands, callbacks).
Service account identifiers (for example UUID used for configuration delivery).
Subscription status, expiration date, and plan details.
Hardware/client device identifiers used to enforce your plan's device limit and to bind per-slot subscription links.

2.2 Payment-related data

Payment provider metadata and payment status from Stripe and/or Crypto Pay integrations.
Order identifiers and plan values required to activate/renew your subscription.

We do not receive or store your full bank card data. Card data is processed by payment providers.

2.3 Technical and security data

Operational logs needed for uptime, abuse prevention, and incident response.
Error diagnostics for payment/webhook and service delivery troubleshooting.

3. No-Activity-Logs Commitment

We do not intentionally collect browsing history, DNS query contents, destination websites, or traffic payload contents as part of normal service operation.

Limited technical metadata may be processed for anti-abuse, reliability, and support, but not for profiling your browsing behavior.

4. Purposes of Processing

Deliver and maintain VPN access.
Activate, renew, pause, or terminate subscriptions.
Process payments and reconcile payment events (including webhook validation).
Enforce account/device limits and prevent fraud or abuse.
Provide support and resolve technical issues.
Comply with legal obligations and protect our legal rights.

5. Legal Bases (where applicable)

Performance of contract (service delivery and subscription management).
Legitimate interests (security, abuse prevention, diagnostics, and platform stability).
Legal obligations (tax/accounting/compliance where required).
Consent, where specifically requested for optional features.

6. Data Retention

We keep personal data only for as long as needed to provide the service and fulfill legal/operational requirements.

Active account/subscription records are stored while your service is active.
Payment and accounting records may be retained for legally required periods.
Operational logs are retained for a limited period and rotated/deleted.

7. Data Sharing and Processors

We may share limited data with trusted processors strictly as needed:

Telegram (bot platform and messaging infrastructure).
Payment processors (for payment processing and status confirmation).
Hosting and infrastructure vendors used to operate the service.

We do not sell your personal data.

8. International Transfers

Our infrastructure and service providers may operate in multiple jurisdictions. Where required, we apply reasonable contractual and technical safeguards for cross-border transfers.

9. Security Measures

TLS/HTTPS for external service endpoints.
Access controls and least-privilege operational practices.
Webhook signature checks and payment event validation.
Reasonable monitoring and incident response procedures.

No method of transmission or storage is absolutely secure. We continuously improve controls, but cannot guarantee absolute security.

10. Your Rights

Depending on your jurisdiction, you may have rights to:

Access the personal data we process about you.
Request correction of inaccurate data.
Request deletion of your data (subject to legal and operational limits).
Object to or restrict certain processing.
Withdraw consent where processing is consent-based.

To submit a request, contact us via Telegram: @SultanINC.

11. Children's Privacy

The service is not intended for children under the age required by local law to use such services. We do not knowingly collect personal data from children in violation of applicable law.

12. Third-Party Links and Apps

The bot may include links or instructions for third-party apps/services (for example VPN clients or payment providers). Their privacy practices are governed by their own policies.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date and, where appropriate, additional notice.

14. Contact

Support and privacy inquiries: @SultanINC