Privacy Policy

1. Controller

The controller is self-employed Котлов Иван Витальевич, Волгоград, Россия. Privacy contact: voolan@tutamail.com.

2. Data we process

Depending on your use, Voolan processes Telegram ID, username and locale; the Telegram-to-VPN account mapping; subscription, entitlement, activation and connection timestamps; status and traffic counters; orders, payments, refunds and disputes; referral attribution and rewards; gifts and claim state; promotions and personal prices; support message mappings; compliance and audit records.

Territory checks can record IP-derived country, provider, result and gate-use timestamps. Site, Cloudflare and server handling necessarily processes request IP, User-Agent, time and path. Voolan does not receive or store card numbers.

3. Robokassa and Telegram

Robokassa separately processes bank-card checkout, payment method, email requested for a receipt, fiscal and transaction metadata under its own terms. Telegram separately processes bot accounts, Stars and platform activity. Banks, app stores, hosting, DNS/CDN, email and network providers can also process data for their services.

4. Purposes and grounds

We process data to perform the service contract, deliver access, support users, verify payments and refunds, issue fiscal records, secure infrastructure, prevent abuse and fraud, comply with law and defend claims. Where consent is legally required, it is requested separately; Privacy acknowledgement is not used as universal consent.

5. Access and traffic

We do not market Voolan as ‘no logs’ or ‘100% anonymous’. Remnawave and the infrastructure expose operational status, connection/activity timestamps and traffic counters needed for delivery, limits, support, security and abuse response. We do not inspect the contents of encrypted user traffic for advertising profiles.

6. Sharing and transfers

Necessary recipients may include Telegram, Robokassa and fiscal services, banks, hosting/network/CDN/DNS providers, email/support providers, professional advisers and competent authorities. Internet providers may process data outside your country. We minimize the data sent and use access controls, encryption or contractual safeguards where applicable.

7. Retention

Primary records are kept only while needed for service, support, security, accounting, tax, provider disputes or legal claims. Financial and fiscal facts may be retained after an account is archived. Operational records that do not yet have an enforced automatic cleanup period are not presented with a false fixed promise.

Encrypted backups follow the documented rotating backup schedule and expire through that process. Site application access logging is disabled at launch; Cloudflare and infrastructure providers may retain edge/security metadata under their own settings and policies.

8. Rights

Depending on applicable law, you may request access, correction, deletion, restriction or objection and may complain to a competent authority. Some data cannot be deleted immediately where retention is required for accounting, tax, fraud, abuse, disputes or legal obligations. We may verify the request through your Telegram account.

9. Security and children

We use restricted service accounts, secret separation, signed links, redaction, access controls, encrypted backups and guarded administrative actions. No system is completely secure. The service is for people old enough to contract and use the selected payment method.

10. Contact and changes

Material changes receive a new policy version. Contact voolan@tutamail.com and include only the minimum information needed to locate your account or request.