Privacy Policy

1. Who we are

FortiSafe VPN is provided by Tascom Global Network LLC, a limited liability company registered in the State of Florida, United States (No. L17000240494), located at 13057 Gabor Ave, Orlando, FL 32827. We are the controller of the data described here.

Privacy contact and data protection officer channel: [email protected].

2. What we keep, why and for how long

Card details never reach us: they go to the store (App Store, Google Play, Amazon) or the payment provider, which only tells us the result of the purchase.

3. What never reaches our systems

Once your device has its configuration, the app connects straight to the network's servers — our systems take no part in the connection. So we don't receive or keep:

• the sites, apps and services you use;
• the content of what you send and receive;
• your DNS queries;
• the IP address you connect to the VPN from, or your connection and disconnection times;
• how much data you use.

A device's “last use”, mentioned above, is the last time the app requested its configuration from your account — not the last VPN connection.

The access logs in the table cover access to our systems — the app requesting its configuration, signing in, the account area. They are not logs of your browsing through the VPN, which we don't log.

This section describes the app. With the browser extension the connection goes through a server of ours, and what applies to it is in The browser extension.

DNS queries — which turn a site's name into an address — are answered by an external DNS resolution service, at the protection level you choose for each device: no filter, scams, or scams and adult content. Queries reach that service through the VPN server, with the server's address, not with your real IP address, your name or your email.

4. The network and its provider

Servers in Brazil. The plans we sell today use servers in Brazil, operated by a Brazilian internet provider we contract. They are configured not to record what you do on the VPN: they don't keep the sites you visit, your DNS queries or your traffic, and they keep no record of connections on disk. While you are connected, the server needs to know, in memory, the address your device connects from — that's how the VPN sends replies back to you —; that information disappears when the connection ends and is not stored.

To keep the network running, each server sends us, every minute, only aggregate numbers: how many devices are connected, the total traffic volume and the machine's load (processor, memory, disk). None of it identifies you or a device. We keep that history for 15 days.

For each device, the server receives only the connection's public key and an internal VPN address — without your name or email.

Servers in other countries. They are operated by a specialized network infrastructure partner we contract, in data centers across dozens of countries.

For each device we create a technical account on the network, identified by a random code — without your name or email.

Under its contract with us, this partner is bound not to log anything about your VPN activity: not your traffic or the sites you visit, not connection data (your real IP address, connection and disconnection times, session length or data volume), and not your DNS queries — and not to write any of this to disk, even temporarily.

The DNS resolution service is not the network partner and has no data processing agreement with us: it receives the queries coming from the VPN server and handles them under its own privacy terms.

Taken together, neither network keeps a record of what you do on the VPN; DNS queries go to the DNS resolution service, as explained above. What we do keep is listed in “What we keep”. API technical logs (up to 7 days) show when the app talked to our API — not when you were connected to the VPN or what you accessed.

5. The browser extension

The extension protects only what you open in this browser — it does not change your whole computer's connection. While it is off, none of your traffic goes through us.

The connection works differently from the app. In the app, your device talks straight to the network server. With the extension, what you open goes through a VPN server in Brazil, which forwards the connection. That server does not record the addresses you open or the names looked up: it counts how many connections exist and how much traffic passes, to size the network, share bandwidth fairly between devices when the server is busy, and curb abuse. That count stays in the server's memory, for seconds, and is not kept.

What stays in your browser

• this browser's authorization, valid for it alone;
• the server's technical credential, which lasts 20 minutes and is replaced on its own;
• a copy of what the last screen showed — your email, how long your plan lasts and the server list — so the window opens without waiting for the network;
• your choices: the server, the filter level and whether the extension turns on by itself when you open the browser.

This is kept in the browser's own storage, on your computer. It is gone when you use Sign out of this browser, when you remove the browser from your account, or when you uninstall the extension.

What we keep on our systems

• the authorization request: the code shown on both screens, what the extension said it is (browser and system) and the dates. It lasts 5 minutes and is gone after that;
• the browser's authorization, kept only as a hash, with the date it was last used;
• the server credential, kept only as a hash, valid for 20 minutes; the record that it existed is deleted 30 days after it ends;
• the browser shows up as a device on your account, like your phone and your computer.

6. Dedicated IP

This section applies only to people who bought a dedicated IP.

On a regular plan, you go out to the internet with an address that many customers use at the same time. With a dedicated IP, the address belongs to your device alone. The consequence is direct: whatever leaves that address points to you, including in an abuse complaint or a court order.

That is why, only for the dedicated IP, we keep the link between the address, your account and the device using it, with the start and end date of each use, plus the ports you opened. Without this record we could not answer a complaint about the address without pointing to the wrong person — and an address that changes hands needs a history. We keep it for 1 year after each change or the end of the contract; after that, we delete it.

What does not change with a dedicated IP: we still do not record the sites you visit, your DNS queries, or the content or volume of your traffic.

Open ports. When you open a port, connections coming from the internet start reaching your device through it. You choose which ports to open and can close them at any time in your account.

Requests from authorities. Given a valid court order, we can say who held the dedicated IP during a given period, based on the record above. We cannot say what was accessed, because that is not recorded.

7. Who we share with

We don't sell or rent your data, and we don't use it for advertising.

We share only with the companies that help us run the service, each limited to what it needs. The full list, with each company's country, is at Who processes your data.

When you buy through the App Store, Google Play or Amazon, the store handles your payment data under its own rules, as an independent controller.

8. Requests from authorities

We check the authenticity, authority, legal basis and scope of every request, and disclose only available data covered by a legally applicable order or request — at most, what is listed in the table above. Specific data may be preserved beyond the usual retention periods when a legal obligation applies; preserving is not disclosing. Where legally permitted, we tell you before disclosing; if a temporary restriction applies, we reassess notice once it ends. We publish how many requests we receive in our transparency report.

Requests from authorities should be sent to [email protected].

9. Where the data is stored

We are a US company, and your data is mainly stored there: the database is in Ohio, and the website and API run on Cloudflare's network. Sign-in emails are sent from São Paulo, Brazil. PIX and card-in-reais payments are processed in Brazil; international card payments, in the United States. The VPN servers in Brazil are operated in Brazil; those in other countries, by a partner based outside Brazil and the European Union.

If you live in Brazil, the European Union or the United Kingdom, international transfers rely on the standard contractual clauses offered by our providers, where available, and on being necessary to provide the service you signed up for (LGPD, art. 33; GDPR, arts. 46 and 49).

10. Your rights

At any time and free of charge, you can:

• confirm whether we process your data and get a copy of it;
• correct incomplete or inaccurate data;
• ask us to delete your data;
• receive your data in a format another service can read (portability);
• object to processing based on legitimate interest;
• find out who we share your data with;
• withdraw any consent you have given.

Write to [email protected] from your account email. We reply within 15 days. To protect you, we may ask you to confirm the request with a code sent to that address.

When you delete your account, we disconnect your devices, delete their technical accounts on the network and erase your data — except the subscription records the law requires us to keep, for the period shown in the table.

If our answer doesn't resolve it, you can complain to the data protection authority in your country.

11. Cookies

The website uses two cookies of its own, strictly necessary for it to work. When you choose to pay with an international card, Stripe's payment form sets two more, used only to prevent payment fraud. All of them are necessary for what you asked for, so we don't ask for consent to them:

We don't use analytics, advertising or social media cookies, and the website serves its own fonts. If we ever use anything beyond this, we will ask for your permission first, with declining as easy as accepting.

12. Security and incidents

All communication with the website, the API and the network is encrypted (TLS 1.2 or higher, and WireGuard). Device technical credentials are encrypted with AES-256, sign-in codes are stored only as hashes, and administrative access is restricted to authorized people.

If a security incident could put you at risk, we notify the competent authority and the people affected within the legal deadlines — within 72 hours in Europe and 3 business days in Brazil — explaining what happened, what was affected and what to do.

13. Minors

FortiSafe is intended for people aged 18 and over. We don't knowingly collect data from minors; if we learn that we have, we delete it.

14. Regional rules

Brazil (LGPD)

• Controller: Tascom Global Network LLC, with the details in “Who we are”.
• Data protection officer channel: [email protected].
• Legal bases: performance of a contract (art. 7, V), compliance with a legal obligation (art. 7, II), regular exercise of rights (art. 7, VI) and legitimate interest (art. 7, IX).
• Your rights are set out in art. 18 of the LGPD, and you may petition the ANPD.
• As a consumer, you keep your rights under Brazil's Consumer Protection Code.

European Union and United Kingdom (GDPR and UK GDPR)

• Legal bases: performance of a contract (art. 6(1)(b)), legal obligation (art. 6(1)(c)) and legitimate interest (art. 6(1)(f)) — namely, the security of your account and of the service.
• You have the rights in arts. 15 to 22, including restriction of processing, and you may lodge a complaint with the supervisory authority in your country.
• We don't make automated decisions that produce legal effects concerning you.

California (CCPA/CPRA)

• Categories collected in the last 12 months: identifiers (email and IP address), commercial information (subscription) and technical usage data, for the purposes in the table above.
• We don't sell or share personal information for cross-context behavioral advertising, and we don't use sensitive personal information.
• You can request to know, correct and delete your information, and we won't discriminate against you for doing so.

15. Changes to this policy

When we change something material, we'll email you at least 30 days before the new version takes effect. This page always shows the version and its effective date.

Version 1.3: adds access logs for our systems kept for 6 months as required by Brazilian law, and details how we handle requests from authorities. Retention started before this date because it is a legal obligation; notice was emailed 30 days in advance.

Version 1.4: explains that DNS queries are answered by an external DNS resolution service, at the protection level chosen for each device. The technical change was made before this date; notice was emailed 30 days in advance.

Version 1.5, published on September 18, 2026: adds the companies that receive payments (XGate, Asaas and Stripe), the two cookies Stripe sets when you pay with an international card, and where each payment is processed. dLocal is removed, as it is not part of our sales.

Version 1.6: explains that the VPN servers in Brazil, used by the plans sold today, are operated by a Brazilian internet provider we contract, and what those servers do and don't keep; renames the DNS protection levels to “scams” and “scams and adult content”; records the browser extension section, published on September 27, 2026, and the 30-day period to delete the record of its credentials; and states that the router's connection key is stored encrypted, so you can download the file again. The servers in Brazil were in use before this date; notice was sent by email 30 days in advance.

Version 1.7: adds partner discount coupons (influencers and resellers). When you use one, we keep which coupon it was and link your purchase to the partner for 12 months to calculate their commission; the partner does not receive your name or email. It also adds the data we keep about partners themselves. Notice was sent by email 30 days in advance, on the same day as the notice for version 1.6, and both take effect on the same date.

Version 1.8 — October 15, 2026: new “Dedicated IP” section, with the record we keep for people who buy that service. This section applies from publication, only to people who buy a dedicated IP — they accept it at checkout. For everyone else, nothing changes. The other rules of this policy, including those of versions 1.6 and 1.7, take effect on November 7, 2026, as announced.

Version 1.9 — October 16, 2026: no change to this policy; the version number follows the Terms of Service.