OXFORD VPN Privacy Policy
Effective 5 November 2026. Oxford Intelligence Limited, registered in England and Wales under company number 16299065, operates OXFORD VPN. This policy applies to the app, our Singapore gateway and website activation.
Your profile and camera
The iOS app stores the profile and its private key in your device’s Keychain. It decodes setup QR codes on the device and reads only the file you select when importing. The app does not upload camera images, scan your photo library or transmit your private key to the VPN gateway.
What the gateway processes
When you connect, internet traffic passes through the OXFORD VPN gateway in Singapore. The gateway uses your device’s VPN public key and assigned tunnel addresses to authorise the connection. WireGuard processes the source IP address, recent handshake and byte counts to maintain and diagnose the tunnel. The app can display connection status and counters on your device.
Where traffic goes
The Singapore gateway is hosted by DigitalOcean. It forwards packets to the destinations you request. DNS lookups go to the resolver specified in your profile. Our current Singapore profiles use Cloudflare’s public DNS service at 1.1.1.1 and 1.0.0.1. The destination services you choose have their own privacy policies.
How we use VPN data
Oxford Intelligence uses VPN connection data solely to provide, secure and support the connection you request. We do not sell VPN data, build browsing histories, use traffic for advertising or profiling, or disclose it to other parties for their own purposes. The mobile app contains no advertising or third-party analytics SDK.
Website orders and support
If you obtain a profile through our website, your checkout email, payment reference, entitlement dates and device profile identifier are used to deliver and manage access. Our payment provider processes card details. The transactional email service delivers the private setup link. That link expires 72 hours after delivery. If you contact support, we use the contact details and information you provide to respond.
Retention and your choices
You can disconnect at any time. In the app’s Settings you can disable automatic connection or remove the local profile and its saved key. Device authorisation persists at the gateway until access is revoked. We retain the minimum provisioning and revocation records required to enforce access and prevent revoked credentials from being reused. Order and support records are retained as necessary to administer the service and meet applicable accounting or legal obligations.
Contact and deletion requests
To revoke a device, request access to or deletion of personal information, or ask about this policy, contact Oxford Intelligence Limited at the email below. Include the order email or device profile name if relevant. Keep your private key and QR code private.