EFFECTIVE: July 08, 2025

Aapoon Inc. (“Aapoon,” “we,” “us,” or “our”) is committed to protecting the privacy of users of our Quantum Virtual Private Network (QVPN) service. Aapoon QVPN provides a white-labeled, quantum-safe VPN solution designed for businesses, government agencies, political parties, and the defense sector, ensuring secure and private remote access with post-quantum cryptography (PQC). This Privacy Policy outlines how we collect, use, disclose, and protect your information when you use Aapoon QVPN. By using our service, you agree to the practices described herein. Please read this policy carefully.

1. Information We Collect

We collect minimal personal information to deliver Aapoon QVPN effectively, respecting your data sovereignty:

• Account Creation: When you set up an account, we may collect your email address for verification, communication, and password recovery. No other personally identifiable information (PII) is required unless you choose to provide it.
• Usage Data: We do not log, store, or access your connection metadata, traffic data, or online activities. Aapoon QVPN operates with a zero-access model, meaning we have no visibility into your encrypted data.
• Device Information: Optional technical data (e.g., device type, OS version) may be collected to optimize service performance, provided that your consent is obtained and the data is anonymized.
• No Third-Party Tracking: We do not use cookies, trackers, or analytics tools to monitor your usage.

All data processed by Aapoon QVPN remains under your control, deployed on your infrastructure (on-prem, private cloud, or airgap), aligning with our commitment to data sovereignty.

2. How We Use Your Information

We use the collected information solely to:

• Provide and maintain Aapoon QVPN, ensuring secure remote access with NIST-approved PQC (e.g., Kyber).
• Verify your identity to access your account and receive support.
• Improve service performance based on anonymized, aggregated feedback (if provided).

We do not sell, share, or monetize your data. Our zero-access architecture ensures that even we cannot access your encrypted communications, protecting against legal discovery risks (e.g., Microsoft’s 27,242 government requests in H1 2024).

3. Data Security

Aapoon QVPN employs industry-leading security measures:

• Quantum-Safe Encryption: Utilizes patented PQC to protect against quantum threats, compliant with the January 2027 National Security Policy 15 deadline and PL 117-260.
• Zero-Access Model: Data is encrypted end-to-end, and encryption keys are managed by you, not us, ensuring no third-party or Aapoon access.
• On-Prem Deployment: Hosted on your infrastructure, eliminating cloud vulnerabilities and enhancing compliance with national security standards.
• While we strive to secure your data, no method of transmission is 100% immune to breaches. You are responsible for securing your local environment.

4. Data Retention

We retain your email address only as long as necessary to provide QVPN services or comply with legal obligations. Usage data and traffic are not stored. You may request deletion of your account and associated data by contacting us at privacy@aapoon.com, subject to verification.

5. Data Sharing

We do not share your personal information with third parties except:

• With your explicit consent for specific support purposes.
• To comply with legal mandates, we will notify you unless prohibited by law.
• Data processed by QVPN remains on your infrastructure, reducing third-party exposure.

6. International Data Transfers

Aapoon operates globally, but QVPN data resides on your chosen infrastructure. If you transfer data across borders, you are responsible for ensuring compliance with applicable laws (e.g., GDPR, CCPA).

7. Your Rights and Choices

You have the right to:

• Access, correct, or delete your email address by contacting privacy@aapoon.net
• Withdraw consent for optional data collection at any time.
• Restrict processing by managing your QVPN deployment settings.

We may require identity verification to fulfill your requests.

8. Children’s Privacy

Aapoon QVPN is not intended for individuals under 18. We do not knowingly collect data from minors. If you believe a child has provided data, contact us at privacy@aapoon.com to request deletion.

9. Changes to This Privacy Policy

We reserve the right to update this policy to reflect changes in our services or any applicable legal requirements. Updates will be posted here with a revised “Last Updated” date. We encourage periodic review.

10. Contact Us

For questions or concerns, reach out to us at: privacy@aapoon.net