Risk and Legal Compliance
Our infrastructure powers businesses from all over the globe, from small startups to world-spanning enterprise companies – which is why managing risk matters to us. As IPRoyal expanded, managing risks and navigating legal intricacies have become a natural part of our operations
Network Safeguards
IP addresses in our pool are screened every hour against a database of addresses associated with malicious activity. In the rare case a matching IP is identified, it is automatically removed from our network.
Additionally, our network is built for public web data access. Access to known high-risk websites is restricted by default: malware and criminal sites, piracy, government, banking, and crypto exchanges. Finally, traffic is directed to the public web, not into a connection owner’s local network or devices.
Partner Screening
Before a partner can provide IPs for our network, they have to go through a screening process:
1. Identity verification. Partner’s ID is verified through an independent third-party provider. 2. Business model review. A description of the business model that includes IP acquisition and pool composition is requested. All claims are then verified by our team. 3. Evidence of consent. Suppliers must be able to prove that IPs are acquired with the consent of device owners. 4. Hands-on quality checks. Our team manually verifies claims and statements made, which may include application testing and document reviews.
We implement these practices to minimize risk. Keeping both users and suppliers safe is our main priority.
Refusal of Service
We retain the right to refuse to provide service or to terminate any agreement unilaterally if our team reasonably suspects abusive use cases, false verification information, or any other deception.
We may also request additional documents to verify the identities of individuals or businesses. These requests are necessary to ensure fair and proper usage of our services.
Meet the Team
The people behind our trust, risk, and legal teams bring 37 combined years of experience from global banking, fintech, and cybersecurity companies
Data We Collect, and Data We Don't
When you use our website and proxies, we collect data to run the service, prevent abuse, and, where you allow it, for analytics and marketing. Here are the main categories, what we leave out, and how long we keep it
-
What We Collect
- Proxy usage: traffic usage data, IP address and location, and orders
- Logins: account creation date, login dates and times, and your first or last login IP
- Account details: name, email, phone number, country, and company details
- Payments: transaction details, handled by our payment providers
- Identity verification: verification result and limited related details
-
What We Don't Collect or Share
- ID documents and biometrics: we don't store copies, as our long-standing verification provider handles them
- Age or gender: we don't collect or store it directly
- Data from minors: we don't knowingly collect it
- Data sales: we don't sell your personal data
- AI training: our AI providers can't train their models on your data
-
How Long We Keep It
- Log data: at least six months, and longer where needed for security, legal claims, or legal obligations, then deleted or anonymized.
- Account data: while you're a client, and at least six months after the account closes
- Other data: as long as the purposes in our Privacy Policy require
- Storage: mainly on servers in the EU, with some service providers outside the EU. We protect data with SSL encryption and encrypted systems, and offer 2FA for your account.
-
Your Rigths and Choices
- Access: see the data we hold and get a copy
- Correction and deletion: ask us to fix or delete your data, use the button below to contact our privacy team
- Marketing: opt out of marketing messages
- Account restrictions: ask for human review of automated decisions