Privacy Policy

Psiphon Inc. – Privacy Policy Version 1.0

Psiphon Statement of Privacy

Psiphon is committed to protecting the privacy interests of its customers, end users, distributors and suppliers. This privacy policy is intended to provide you with general information on how your personal information may be used. Psiphon is a Canadian corporation with its head office located in Ontario, and our privacy policy has been developed to reflect Canadian and Ontario privacy laws and statutes.

For further information regarding Canadian and Ontario privacy laws, please visit:

Canadian Privacy Commission
Office of the Ontario Privacy Commissioner

Psiphon and Your Privacy

Psiphon’s privacy policy consists of the following practices:

1. Private Information: Psiphon will gather only the minimum information necessary to provide its products and services to its customers and users. The following categories of information may be collected by Psiphon:

* Business/customer information: Corporate information such as entity name and address; contact information such as email, title and phone number; payment and relevant financial information; any other information required for the payment or receipt of funds and services, or for compliance with relevant Canadian laws regarding business practices.

* User Information: When creating a Psiphon account, users must choose a username and password and may elect to provide Psiphon with an email address. Users providing an email address grant Psiphon the right to send messages to that email address as required, to ensure continuity of service.

* Usage Information: Psiphon does not store usage information in a manner that allows Psiphon to correlate an individual user’s Psiphon account or IP address with a visit to any individual web site. Psiphon records the date/time of account creation, the date/time and country/region of each user’s last login. Psiphon also records the number of invitations a user sends as well as the number of invitations that are accepted.

* Aggregate Usage: Psiphon logs aggregate usage statistics on a per in-proxy as well as country/region basis. Psiphon collects domain names visited through the service, the number of visit per domain name, and the number of logins per year/month/day.

* Server Logs: Psiphon maintains server logs collected on the inproxy (which contain users’ IP addresses and obfuscated requested URLs) and server (which contain the inproxy IP addreses and requested URLs) as well as sendmail logs that record the email addresses of invitation recipients.

* Messages: Psiphon stores messages sent and received using our internal messaging system as well as support requests sent using our ticketing system.

* Troubleshooting: When necessary in order to troubleshoot its services, Psiphon may temporarily alter is standard practices in order to record usage information in a way that correlates a user’s account with the websites that he or she visits. This will only be done for a limited period of time and information retained in this way will be deleted after it has been analyzed.

2. Retention: Both business/customer and user information will be retained only as long as necessary to provide Psiphon’s products and services at a high standard of excellence, and to comply with Canadian law regarding business and privacy practices. Where such information is no longer required, Psiphon will purge the information from its electronic and paper records and destroy it in a manner consistent with generally accepted security practices.

3. Reporting: The aggregate information described in under “Section 1: Usage Information”, may be shared for reporting purposes to legitimate funding bodies.

4. 3rd Party Service Providers: Currently, Psiphon in-proxies are hosted on 3rd party web hosting providers located in the United States of America. The in-proxies are located on servers to which we have user level access and are administered by the hosting companies themselves. We review the privacy polices of the hosting providers to ensure that they are consistent with Psiphon’s own policies, but these servers are subject to the legal jurisdiction of the country in which they are located.

5. Disclosure of Private Data: Psiphon will not disclose users’ private information unless legally compelled to do so under appropriate and legitimate laws and statutes within relevant jurisdictions.

Psiphon and Cookies

Psiphon uses cookies are used to identify the user while he or she is logged in.

Psiphon and Links to Outside Parties

Psiphon may provide links to other organizations with which we may or may not have a relationship. Psiphon is not responsible for the privacy policies of these organizations. We encourage you to review their respective privacy statements as they may be different from ours.

Psiphon and Your Consent

By using our web sites and services, you agree to the collection and use of your information by Psiphon under the terms defined by this policy.

Change in Business Status

Should the business status of Psiphon change as the result of the sale to, or acquisition by, another business entity, Psiphon reserves the right to forward the information collected during business practices to that entity.

Psiphon Privacy Policy Updates

Psiphon will review these privacy policies from time to time. If there are any changes to our privacy policies, we will post those changes so that you are kept informed of our latest privacy policies.

Safe Harbour

Although Psiphon makes best efforts to ensure that its privacy principles and policies, as stated, are consistently adhered to and maintained, there may be occasions when Psiphon’s infrastructure and operational practices are required to change in response to new or unforeseen circumstances. Should such a change occur and be considered sufficiently substantive, Psiphon will endeavour to adjust its policies and practices accordingly and make these available in a timely manner to its users and customers.

Last Updated: June 5, 2009