About
About SuaVPN
A VPN is only worth as much as the transparency of the people running it. This page answers, without hedging, the questions you should ask any provider before trusting it with your traffic.
Last reviewed:
Who runs SuaVPN?
SuaVPN is run by an in-house team that handles the website, the customer panel and the WireGuard server. Nothing about the operation is outsourced: both the control plane and the exit node run on machines we administer ourselves. For any matter, including privacy and billing, write to suporte@suavpn.com.
Where are the servers?
We currently run a single WireGuard node of our own, on a VPS in the United States. The installation, the keys and the server rules are ours, not a reseller’s. The live list of locations, with the status of each one, is on the status page and comes from our database.
What technology powers the service?
The tunnel is WireGuard, with one key pair per device that can be revoked on its own. The server private key never leaves the node. Account passwords are stored only as scrypt hashes, and secrets such as the node agent token and each device private key are encrypted with AES-256-GCM in the database.
What does SuaVPN log?
We keep what billing, security and support require: your email address, subscription details and, per device, the name, public key, last handshake and total traffic counters. IP addresses are also recorded in three moments: on login attempts (kept for six months, as article 15 of the Brazilian Internet Civil Framework requires), at the time of payment, for fraud prevention, and on product events across the website and the panel. We do not log the sites you visit, DNS queries, destination addresses or the contents of anything passing through the tunnel. The privacy policy describes every item.
How are law enforcement requests handled?
We only answer requests backed by a valid court order from a competent authority, and only to the exact extent that order requires. Even then, we can hand over only what exists: the account email, billing records, the last handshake per device and the IP addresses the operation keeps — the login attempt history, retained for six months under article 15 of the Brazilian Internet Civil Framework, the IP recorded at the time of payment, and the IP on product events across the website and the panel. There is no browsing history, DNS query, destination address or traffic content to hand over, because none of it is recorded.
How does SuaVPN make money?
From subscriptions alone. You pay by card, and that revenue pays for the servers, the support and the development. We do not sell data, we do not show ads and we do not share usage information with advertisers. You can cancel at any time, and Brazilian consumer law gives you seven days to withdraw.
Talk to the people running it
Questions about the operation, privacy, billing or press all reach the same address and are answered by the people who run the service.
Email: suporte@suavpn.com