ISO VPN Privacy Architecture Policy

1. Core Principle: Zero Unnecessary Data Logging

ISO VPN is built on a technical principle of architectural data minimization. We do not monitor, record, store, or sell:

• Your complete destination browsing history or websites visited
• DNS queries performed inside the tunnel (all resolved ephemerally via encrypted local resolvers)
• Payload data, unencrypted HTTP traffic, or packet contents
• Originating IP addresses linked to specific browsing activity

2. Client-Side Cryptographic Key Generation

Unlike legacy VPN architectures where server operators generate and distribute private keys to users, ISO VPN client applications generate Curve25519 keypairs strictly on the client device. Only the public key is sent to the backend for peer assignment.

3. Operational Data Retained

To provide reliable service and enforce simultaneous device limits per subscription tier, we maintain minimal operational records:

• User account credentials (email address, hashed password, subscription status)
• Registered device public keys and platform identifier (iOS, Android, macOS, Linux, Windows)
• Ephemeral internal tunnel IP allocation (e.g. 10.8.0.x/32) released upon device revocation or session disconnect

4. Somalia Node Operations & Legal Compliance

Our planned Somalia exit-node will operate in strict accordance with local connectivity regulations and international cybersecurity standards. We do not implement covert surveillance backdoors or malicious packet inspection.