Privacy Policy

This Privacy Policy explains how GoPort (“GoPort”, “we”, “us”) collects, uses, and shares personal data when you visit goport.uz, use the dashboard or API, or open tunnels with the goport CLI (together, the “Service”). It should be read together with our Terms of Service. It does not cover GoPort servers that other people host themselves; whoever runs such a server is responsible for it.

For your account, billing, and website data, GoPort decides how and why the data is processed, and acts as the controller.

For the traffic that passes through your tunnels, we only relay it to your machine on your instructions. If that traffic contains other people’s personal data, you are responsible for having a lawful basis to process it, and we act on your behalf.

Account data. Your name, email address, and password when you sign up with email. Passwords are stored only as a salted hash. If you sign in with Google, we receive your name and email address from Google. We also send one-time codes to your email to verify it and to reset your password.

Tokens and devices. The auth tokens you create, their names, and when they were created, which we use to count and limit the devices connected to your account.

Tunnel and usage data. Your tunnels’ subdomains and addresses, when they were opened and closed, and the number of requests and bytes they carried over time. We use this to enforce plan limits and to show usage charts in your dashboard.

Connection data. The IP address and port your CLI connects from, and technical logs from our servers and API, such as request times and errors.

Billing data. Your plan, subscription status, renewal dates, and the customer and subscription identifiers that Lemon Squeezy gives us. Lemon Squeezy collects your payment details and billing address directly; we don’t receive your full card number.

Website analytics. When you browse goport.uz, Google Analytics, Vercel Analytics, and Umami Analytics record pages visited, referrer, approximate location derived from your IP address, and device and browser type.

Messages you send us. The contents of emails to support, and your email address if you join an early-access or waiting list.

Requests and responses that pass through your tunnels are relayed in real time. We do not store their headers or bodies, and we don’t look at them except as needed to route them, to count bytes against your limit, or to investigate a specific abuse report.

The Request Inspector runs inside the CLI on your own computer. The requests it records stay on your machine and are never uploaded to us.

We use personal data to:

• create and secure your account, and sign you in;
• open tunnels, route traffic, and reserve your subdomains;
• measure usage and enforce plan limits;
• process subscriptions, trials, cancellations, and refunds through Lemon Squeezy;
• send account emails, such as verification codes, password resets, and billing or policy notices;
• answer your support requests;
• detect, investigate, and stop abuse, fraud, and attacks on the Service;
• understand how the website is used so we can improve it;
• comply with the law and enforce our Terms.

We don’t use your data for advertising, and we don’t sell it.

Where laws such as the GDPR apply, we process your data because it is necessary to provide the Service you signed up for (contract); for our legitimate interests in keeping the Service secure, preventing abuse, and improving it; to meet legal obligations such as tax and accounting rules; and, where we ask for it, with your consent, which you can withdraw at any time.

We share personal data only with service providers who help us run GoPort, and only as much as they need:

• Lemon Squeezy, our merchant of record, for payments, taxes, and invoices;
• Google, for Google sign-in, Google Analytics, and storing early-access sign-ups;
• Vercel, for website analytics;
• Umami, for website analytics;
• Resend, for sending account emails;
• our hosting and infrastructure providers, which run the servers the Service is on.

We may also disclose data if the law requires it, to respond to a valid legal request, to protect the rights and safety of our users or others, or as part of a merger or sale of the Service, in which case this policy will continue to apply to your data.

The website stores your sign-in session and theme preference in your browser’s local storage, and uses session storage briefly during Google sign-in. These are needed for the site to work.

Google Analytics sets cookies to tell visits apart. Vercel Analytics and Umami Analytics do not use cookies. You can block or delete cookies in your browser settings, or use Google’s opt-out browser add-on, without affecting your ability to use GoPort.

We keep account, token, tunnel, and usage data for as long as your account is open. Server logs, including connection IP addresses, are kept only as long as needed for security and troubleshooting.

When you ask us to delete your account, we delete or anonymize your personal data within 30 days. We may keep some records longer where the law requires it, for example billing records for tax purposes, or where we need them to resolve a dispute or prevent abuse.

We use reasonable technical and organizational measures to protect your data, including HTTPS for all connections, hashed passwords, and auth tokens you can revoke at any time. No system is perfectly secure, so we can’t guarantee absolute security. Keep your password and tokens private, and protect the applications you expose through tunnels.

GoPort and its service providers may process your data in countries other than your own, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses offered by our providers.

Depending on where you live, you may have the right to access your personal data, correct it, delete it, receive a copy in a portable format, restrict or object to how we process it, and withdraw consent. You can change your email and password in the dashboard at any time.

For anything else, email support@contact.goport.uz from the address on your account. We will reply within 30 days. You also have the right to complain to your local data protection authority.

The Service is not meant for anyone under 16, and we don’t knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy as the Service changes. When we do, we will change the effective date at the top of this page, and for material changes we will notify account holders by email or in the dashboard before they take effect.

Questions about this policy or your data go to support@contact.goport.uz.