Last updated: 28 September 2026
1. Scope and contact
This policy applies to AHLA VPN for Windows, its connection service and the related account and renewal pages on the platform. The operator identified in the platform contact details is responsible for account and service data. Contact online@ahlavpn.com for questions or rights requests.
2. Information we process
We process information you provide to create and manage an account, including your name, email, phone number if used, and optional country, city and profile image. We also process verification, session and device information, account status, and plan and purchase information such as product identifiers, purchase verification tokens, subscription status and dates. Support correspondence may contain information you send to resolve a problem; do not send passwords or verification codes.
3. VPN traffic and technical information
The service must process connection traffic to route it through your selected server. Technical information, such as IP addresses, request times, server status and connection errors, may be processed to operate and protect the service and diagnose faults. Technical logs depend on the hosting environment and server configuration. This policy does not promise absolute anonymity or that other internet services stop collecting information when a VPN is active.
4. How we use information
We use information to provide accounts and connections, verify subscriptions, prevent fraud and abuse, provide support and handle complaints. Depending on the circumstances and applicable law, processing relies on performing a contract, a legal obligation or a balanced legitimate interest in protecting the service. Where consent is required for an optional feature, you may withdraw it without affecting the lawfulness of earlier processing.
5. Service providers and payments
Hosting, VPN servers, email, support and any platform payment provider process the information necessary to provide their services. The Windows program contains no checkout and sends no purchase information to Google Play or Apple's App Store. Renewal records and payment references are maintained on the AHLA VPN platform. Do not send full card details to support. Account data is not sold; disclosure is limited to service delivery, your consent where appropriate, or a valid legal obligation.
6. Cookies and app preferences
The website uses necessary session cookies for sign-in, form security and language preferences. The app stores language and connection preferences and session information needed for your account. You may clear this information through your browser or device settings, which may sign you out or reset preferences. Any future optional tracking will require notice and consent choices where required by law.
7. Retention, security and international transfers
We retain information for the purposes described, considering account duration, purchase reconciliation, disputes and legal obligations. Information is deleted or anonymised when no longer legitimately needed; backup copies may remain until their retention cycle ends. We use appropriate access and security controls, but absolute security cannot be guaranteed. Where information is transferred outside the European Economic Area, an appropriate lawful transfer mechanism is applied when required. You may request information about recipients and safeguards.
8. Your rights and requests
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your information, object to processing and withdraw consent where processing relies on it. We may request information needed to verify your identity and respond within legal time limits, explaining any lawful exception. Closing your account or deleting the app does not automatically cancel a store subscription; stop renewal through Google Play or Apple. You may complain to the competent data protection authority, including IMY in Sweden.
9. Children and changes
The service is intended for people with legal capacity to subscribe and does not target children. Contact us if you believe a child supplied information without required permission. Policy updates will appear here, and we will provide appropriate notice before material changes to the purposes for which your information is processed.
10. Windows storage and permissions
The program uses a Windows service and network driver to create and remove the VPN connection. Administrative approval is needed for installation. If you choose to remember sign-in, the session token is encrypted for your Windows user account using Windows Data Protection; your password is not saved. A random installation identifier and device name are used for device limits and access revocation. Connection profiles are temporarily stored in a folder restricted to system administrators and the service, and removed after disconnect. Traffic counters are displayed locally. The platform periodically checks account and subscription status; if access cannot be confirmed, the connection stops. Diagnostic logs and host/server logs may have their own retention settings.