1. Information We Collect

We collect minimal information necessary to provide our enterprise VPN services:

• Account information (company name, contact details)
• Billing information for payment processing
• Connection timestamps (without storing IP addresses)
• Aggregate bandwidth usage statistics

2. International Data Transfers

For multinational businesses, we ensure compliance with:

• GDPR requirements for EU operations
• CCPA for California businesses
• Regional data protection regulations across our global network
• Cross-border data transfer requirements

3. Security Measures

We implement enterprise-grade security measures:

• Regular third-party security audits
• Perfect forward secrecy for connection security
• Multi-factor authentication for account access
• Regular security patches and updates

4. Business Continuity

Our enterprise services maintain:

• 99.9% uptime SLA for business customers
• Distributed global server network for redundancy
• Automatic failover protection
• 24/7 technical support for business accounts

5. Legal Compliance

BulletproofVPN may disclose information:

• When required by valid legal process
• To protect our rights, privacy, safety or property
• In connection with a business transfer or acquisition

We do not sell or rent your information to third parties.

6. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Business customers will be notified of significant changes via email.