Last updated: September 30, 2026
Effective date: September 30, 2026
This Privacy Policy (the "Policy") explains how personal information is handled in connection with the LINKITVPN website, account services, applications, LinkItVPN Edge devices, VPN connections, subscriptions, and customer support.
In this Policy, the "Company" means Shinsei Soft Co., Ltd., which is responsible for product development and technical operations. UNITEDBIZ SOFTWARE INC (United States) handles publication on overseas platforms, overseas sales, collection of payments, refunds, chargebacks, and payment disputes as necessary. The seller and payment-collecting entity for a particular transaction are as shown on the purchase confirmation, order record, or receipt. Each entity handles information according to its business role and applicable law.
This Policy applies to:
Information handled independently by app stores, payment services, or third-party sign-in services is also subject to those providers' terms and privacy policies. Information provided by LINKITVPN to third parties remains subject to this Policy and applicable law.
For this Policy, "VPN Data" means information transmitted through a VPN connection or information that could be learned from use of that connection, including:
To enforce a plan's traffic allowance, the server separately retains the current month's aggregate usage linked to the account. This figure is used to calculate the allowance and manage the service; it does not contain browsing content, DNS queries, or connection destinations, and it is not an activity record covered by the zero-log policy below. Temporarily processing a source IP address to establish a connection, and processing information necessary for security, are distinct from storing communication content or destination history.
The service handles VPN Data under the following policy:
The Company cannot provide records of VPN communication content, browsing, DNS queries, or connection destinations that it does not retain under this Policy. In response to a legally binding request, the Company handles only information it actually holds, to the extent required by law.
VPN activity records are distinct from account authentication, subscriptions, traffic allowances, support, and security information. Retaining the current month's aggregate usage does not mean that the Company records users' VPN communication content, DNS queries, or browsing behavior.
The Company may obtain email addresses, usernames, passwords, email verification codes, authentication tokens, account IDs and status, language settings, and identifiers or personal information that users permit a third-party sign-in service to share.
Passwords and verification codes are used for identity verification and account security. The Company uses appropriate technical measures to protect authentication information and avoids storing passwords in plaintext.
The Company may obtain product and plan details, trial and subscription status, order numbers, transaction identifiers, purchase tokens, payment channels, currency, amounts, refund or cancellation status, and information needed to verify service entitlements.
The Company does not collect or retain credit-card numbers or bank-account information handled directly by an app store or payment provider and not supplied to the Company.
Depending on the platform, apps process connection settings, selected nodes, and necessary authentication information on the device. Each platform uses available secure-storage mechanisms. On-device processing alone does not mean that the Company's servers receive that information. Diagnostic information voluntarily sent through support channels is handled as described in Section 4.6.
The website uses session identifiers to maintain login and operation state, and processes language settings and necessary security information. It uses the browser's User-Agent to determine the appropriate platform for download links. Security protection processes connection IP addresses. When a user follows an invitation or referral link, the website may use a channel identifier to preserve the source relationship. This information is processed as needed for each function and does not amount to creating a complete device or browsing history.
The website uses third-party network-protection and page-performance measurement services. A performance script may process page paths, referring pages, device types, browsers, operating systems, performance timing, and an inferred country or region. Pages requiring security verification, such as registration, use a third-party automated-risk verification service; verification data and the connection IP address are transmitted during verification. Some pages also use external fonts, for which the browser sends a request to the provider. See the Cookie Policy for the purposes and information handled by these services.
When a client checks for updates, the update API receives the app version, platform, and language in order to return applicable version information. Security audits of administration tools or important APIs may record operation types, times, source IP addresses, and User-Agent values. Such audits do not mean that a full browsing history is recorded for every website visitor.
The website and account-system information described above is handled separately from communication content and browsing history transmitted through the VPN.
The LinkItVPN Edge local administration interface processes information needed for account authentication, selected nodes, connection status, network and Wi-Fi settings, device version, and fault diagnosis. Display or storage of information on the device does not mean that the LINKITVPN website server receives all of it. When the device contacts the server to sign in, check account entitlements, obtain nodes, or check for updates, the server processes account and technical information needed for that request. Local administration and security records on the device are distinct from VPN communication content or destination history.
The Company may obtain inquiries, replies, attachments, diagnostic information users voluntarily send through support channels, handling records, and account information needed to resolve a problem. Before providing diagnostics, users should avoid including passwords, verification codes, VPN communication content, browsing history, or DNS queries.
The Company uses the information described in Section 4, as necessary, to:
If a purpose changes, the Company will notify users or publish the change as required by law. Where a new use exceeds the relationship to the original purpose and separate consent is required, it will obtain that consent as the law requires.
As needed, the Company may use third-party services for cloud hosting, email delivery, payment processing, app distribution, third-party sign-in, website security, abuse prevention, page-performance measurement, external fonts, and customer support. Each service processes information necessary to provide its function when that function is used. Website statistics are handled separately from communication content sent through the VPN.
The Company supervises processors' handling of personal information as required by applicable law and to the extent necessary for the commissioned work.
The Company does not provide VPN Data to processors or other third parties for advertising, analytics, marketing, profiling, or other purposes.
The Company may process information needed for accounts, transactions, support, and technical operations in Japan, the United States, and other countries or regions. It uses measures such as contracts, access controls, encryption, audits, and processor supervision. Where an individual's consent is required by law, the Company will first provide necessary information about the relevant country or region, its system, and protection measures. The VPN Data policy in Section 3 does not change based on the processing location.
| Information | Retention principle |
|---|---|
| Activity logs of VPN communication content, browsing, DNS queries, and connection destinations | Not created or retained |
| Current month's aggregate traffic linked to an account | Retained in the account service for calculating that period's allowance and handling related disputes; then deleted or de-identified under data-retention rules |
| Account information | While the account exists and for a limited period afterward where required for law, security, or disputes |
| Authentication and security logs | For the limited period needed to investigate security events and prevent misuse |
| Order and transaction records | For periods required for tax, accounting, refunds, disputes, and law |
| Support records | For the period needed to resolve problems and prevent recurrence |
| Settings and diagnostics on an app or LinkItVPN Edge device | Handled according to the device and system's storage and clearing mechanisms; this does not mean they are stored on the server |
The Company retains information only for as long as needed to meet its purpose, then deletes it securely or anonymizes it. Specific periods vary by data category, technical settings, and applicable law. Users may ask the privacy contact about retention for a category of information. The Company does not keep information it no longer needs for unspecified future uses.
The Company applies least privilege, role-based access controls, audits of administration and important API operations, encryption in transit, secure storage of authentication secrets, environment separation, processor supervision, security updates, vulnerability handling, and incident response. If personal information is compromised, it will investigate, report to the competent authority, and notify affected individuals as required by law.
The website uses essential session cookies and, when relevant features are used, referral-code cookies or on-device storage. See the Cookie Policy for website performance measurement, automated-risk verification, and external fonts. The page-performance script does not obtain its statistics by reading the website's cookies or local storage. Disabling essential cookies may prevent login, registration, or payment from working properly. The LinkItVPN Edge local administration interface has storage and login mechanisms distinct from those of the official website.
Subject to applicable law, users may request information about purposes of use, access, correction, supplementation, deletion, cessation of use, cessation of third-party provision, withdrawal of consent, and account deletion.
Send personal-information requests to [email protected]. Account deletion may also be requested through the channels described in the Account Deletion Guide. The Company will conduct reasonable identity verification. Transaction, security, dispute, or compliance records that must be retained under law may be kept separately to the extent necessary.
Users can request deletion through the LINKITVPN app's deletion option. If that option cannot be used, they can contact support as described in the Account Deletion Guide. After deletion, the original account and related service entitlements cannot continue to be used. Limited records needed for law, transactions, refunds, security, or disputes may be retained separately.
Deleting a LINKITVPN account does not automatically cancel subscriptions or recurring payments managed by an app store or another payment channel. Users must separately cancel through the original purchase channel.
LINKITVPN is not designed for children whose use would require a guardian's consent under applicable law. If the Company learns that a minor supplied personal information without the necessary consent, it will review a notice from the individual or guardian and take deletion or other measures as required by law.
The Company may respond to legally binding laws, court orders, or government requests, but handles only information it actually holds and only to the minimum extent necessary. It cannot provide VPN communication content, browsing history, DNS queries, or connection-destination records that it does not retain.
If material changes occur in the service, law, purposes, processors, or data handling, the Company will update this Policy and show the date. Changes materially affecting users' rights will be communicated as required by law through the app, website, email, or another appropriate method.
For questions about personal-information handling, access, account deletion, or this Policy, contact:
Shinsei Soft Co., Ltd.
Privacy contact: [email protected]
Service support (accounts, subscriptions, and general inquiries): [email protected]