← Back to Poke

Privacy Policy

Effective Date: June 1, 2026  ·  Last Updated: June 25, 2026

1. Who We Are

Poke ("we", "our", or "us") provides high-performance network acceleration services to users worldwide. This Privacy Policy explains how we handle information when you use our website, applications, and related services (collectively, the "Service").

If you have questions about this policy, contact us at [email protected].

2. Information We Collect

We collect the minimum information necessary to operate our Service:

• Account Information: Email address and hashed password when you register. We never store plain-text passwords.
• Billing Information: Payment details are processed exclusively by our PCI-DSS-compliant third-party payment processors (Stripe). We store only a masked card identifier and transaction reference for receipt purposes.
• Device & App Diagnostics (optional): With your explicit consent, crash reports and anonymized performance metrics may be sent to help us improve stability. You may opt out at any time in the app settings.
• Support Communications: Messages you send to our support team are retained for up to 12 months to resolve disputes and improve service quality.

3. What We Do NOT Collect

We explicitly do not log or store:

• Your real IP address or the IP addresses of servers you connect to
• Connection timestamps, session duration, or bandwidth consumed per session
• DNS queries or any domain names you resolve
• Traffic contents, data payloads, or application data
• Any information that could link your identity to your online activity

4. How We Use Information

The information we collect is used solely to:

• Authenticate your account and enforce subscription limits
• Process payments and prevent fraud
• Send transactional emails (receipts, security alerts, critical service notices)
• Respond to support requests
• Comply with applicable legal obligations

We do not use your data for advertising, profiling, or any form of behavioral tracking.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share limited information with:

• Payment Processors: Stripe Inc., subject to their own privacy policy and PCI DSS compliance.
• Infrastructure Providers: Cloud hosting providers that store account data under strict data processing agreements (DPAs) that prohibit them from accessing or using your data for any purpose other than providing the infrastructure service.
• Legal Authorities: Only when compelled by a valid court order under the jurisdiction where we are incorporated. We will always notify affected users unless prohibited by law, and we will challenge overly broad requests.

6. Data Storage & Security

All account data is encrypted at rest using AES-256 and in transit using TLS 1.3. Our network infrastructure operates on RAM-only servers in critical locations — connection metadata is never written to persistent storage.

We undergo annual independent security audits and penetration testing. Audit reports are available upon request for enterprise customers.

7. Data Retention

Account information is retained for the duration of your subscription plus 30 days after cancellation, after which it is permanently deleted. Billing records are retained for 7 years as required by financial regulations. Support tickets are deleted after 12 months.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Data portability (export your account data in a machine-readable format)
• Object to or restrict certain processing activities

To exercise any of these rights, email [email protected] with the subject line "Data Rights Request". We will respond within 30 days.

9. Cookies & Tracking

Our website uses only strictly necessary cookies for session management and authentication. We do not use advertising cookies, third-party trackers, or analytics SDKs that exfiltrate data to external parties. You may disable cookies in your browser; however, this may affect login functionality.

10. Children's Privacy

Our Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

11. International Data Transfers

We operate globally. Your data may be transferred to and processed in countries outside your country of residence, including countries that may have different data protection laws. All such transfers are governed by standard contractual clauses approved by the European Commission or equivalent mechanisms.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email (to your registered address) and by posting a notice on our website at least 14 days before changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

13. Contact Us

For privacy-related inquiries:

• Email: [email protected]
• Response time: Within 3 business days