GDPR Compliance
Last updated: October 19, 2026
Our Commitment
Proxyweb is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). This page explains how we comply with GDPR requirements.
Data Controller
Proxyweb acts as the data controller for account information (email, profile data, login records) and as a data processor for webhook data that passes through our platform on your behalf.
Lawful Basis for Processing
| Data Type | Lawful Basis | Purpose |
|---|---|---|
| Account email & password | Contract | Account creation & authentication |
| Webhook payloads | Contract | Service delivery (capture, forward) |
| Login IP & location | Legitimate interest | Security & fraud prevention |
| Usage analytics | Legitimate interest | Service improvement |
| API logs | Contract | Rate limiting & debugging |
Your Rights Under GDPR
As an EU data subject, you have the following rights:
📋 Right of Access (Art. 15)
Request a copy of all personal data we hold about you. Use the API (GET /v1/me) or contact us.
✏️ Right to Rectification (Art. 16)
Correct inaccurate personal data via your profile settings or by contacting us.
🗑️ Right to Erasure (Art. 17)
Delete your account and all associated data from Settings → Delete Account. This is irreversible.
📦 Right to Data Portability (Art. 20)
Export your data in machine-readable format via our REST API. All endpoints, webhooks, and workflows are accessible programmatically.
🚫 Right to Object (Art. 21)
Object to processing based on legitimate interest. Contact us and we will cease processing unless we have compelling grounds.
⏸️ Right to Restrict Processing (Art. 18)
Request that we limit processing of your data while a dispute is resolved.
Data Protection Measures
- Encryption at rest - All webhook payloads encrypted with AES-256-GCM
- Encryption in transit - All connections use TLS 1.2+
- Access controls - Row-level security (RLS) ensures users can only access their own data
- Data minimization - We only collect data necessary for service operation
- Automatic deletion - Webhook data is auto-purged after your plan's retention period
- Password hashing - bcrypt with automatic salt
Data Storage Location
Your data is stored and processed in secure data centers in the United States and/or the European Union, operated by our infrastructure providers. Where personal data is transferred between regions, we rely on appropriate safeguards (such as Standard Contractual Clauses) consistent with GDPR requirements.
Data Breach Notification
In the event of a personal data breach, we will:
- Notify the relevant supervisory authority within 72 hours (Art. 33)
- Notify affected users without undue delay if the breach poses a high risk (Art. 34)
- Document the breach, its effects, and remedial actions taken
Data Protection Officer
For GDPR-related inquiries, contact our data protection team at:
privacy@proxyweb.app
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority (DPA).