Privacy Policy

Last updated: 24 July 2026  ·  Effective: 24 July 2026

This Privacy Policy explains how SELLHEX LLC handles information when you use the Vena VPN app for Android (package com.vena.vpn) and the website venavpn.com. We refer to them together as the “Service”.

1. Who we are

The Service is operated by SELLHEX LLC, a limited liability company registered in the State of Florida, United States (L26000128727), at 7901 4th St N, Ste 20132, Saint Petersburg, FL 33702-4305, United States. SELLHEX LLC is the developer named on the Google Play listing for Vena VPN and is responsible for the personal data described here. Being a US company, our operations are subject to United States law — though we can only ever produce data we actually hold, and section 2 explains how little that is.

Vena is currently distributed in Turkey and a number of other markets. It is not offered in the European Economic Area, the United Kingdom or the United States, and we do not direct it to residents of those regions. We will update this policy before that changes.

2. What we never collect

While you are connected to a Vena VPN server, we do not record, store, inspect or share:

• The websites, servers or IP addresses you connect to
• Your DNS queries
• The contents of your traffic, in any form
• Which apps you use, or what you do inside them
• Any log tying your identity to a particular destination or session

We also do not sell your personal data, do not share it with data brokers, and do not build advertising profiles from your VPN traffic.

3. What we do collect

Your IP address

Any VPN necessarily sees the IP address you connect from — that is how a connection is established at all. We use it transiently, in memory, to rate-limit automated abuse of our sign-up and sign-in endpoints. It is not stored in your account record and never linked to any record of your online activity. Our infrastructure and network security providers process IP addresses in transit in order to deliver and protect the connection.

What we deliberately do not have

The app contains no crash-reporting or analytics SDK — no Crashlytics, no Google Analytics, no Sentry. It does not request location, contacts, photos, files, microphone or camera permissions. Vena is currently free and we do not process payments; if we introduce paid plans, Google Play will handle payment and we will update this policy first.

4. How the VPN works on your device

Vena uses Android’s VpnService API, which Android only grants after you give explicit system-level permission. We use it solely to provide the VPN. We do not inspect, log or analyse the traffic of other apps; we do not redirect or manipulate your traffic for advertising, analytics or any other monetisation; we do not inject or replace ads in what you browse; and we do not install root certificates or otherwise break end-to-end encryption. Traffic between your device and our exit servers is encrypted. Before the app first collects your device identifier and connects, it tells you so and asks you to agree.

5. Advertising and your choices

The free tier is funded by advertising through Google AdMob (Google LLC). When an ad is requested, AdMob may process your Google Advertising ID, coarse location inferred from the IP the request comes from, device and app information, and how you interacted with the ad. This is governed by Google’s Privacy Policy. When you watch an ad to earn free VPN time, the app passes your account identifier to Google so its servers can confirm the ad was genuinely completed and we credit the right account. Google does not receive your email address this way.

You can reset or delete your advertising ID, and opt out of ad personalisation across all apps, in Android Settings → Google → Ads. Where we show an in-app consent choice about personalised advertising, you can change your answer any time from the app’s Settings screen.

6. Who we share data with

We do not sell your personal data. We disclose it only to:

• Google (AdMob) — advertising ID, device and app information, coarse location inferred from IP, ad interaction data, and your account identifier for rewarded ads.
• Hosting and data-centre providers — they run the servers we rent, act on our instructions, and may not use the data for their own purposes. Our VPN servers sit in several countries so you can choose where to connect, which means your data may be processed outside the country you live in, including the United States.
• Our network security and content delivery provider — connection metadata, including IP addresses in transit, to protect our infrastructure.
• Law enforcement or courts — only what we actually hold and are legally compelled to produce. We hold no browsing or connection logs, so there is no such data to give.
• A successor entity — if SELLHEX LLC is involved in a merger or sale of assets. We will notify you before your data becomes subject to a different policy.

7. How long we keep it

We keep each piece of data only as long as it serves the purpose it was collected for:

• Account data (email, password hash, device and account identifiers, device information, allowance and expiry) — until you delete your account. Once you ask, we complete deletion within 30 days.
• Session tokens — until they expire, or immediately when you sign out or delete your account.
• Your IP address — not retained. Held transiently in memory for rate limiting and discarded automatically.
• Reward transaction IDs — for a limited period after the reward, which is what stops the same reward being credited twice.
• Support emails — while they are useful for following up, then deleted.

Where the law requires us to keep something longer, we keep only that item, only for as long as required, and use it for nothing else.

8. How we protect it

• All communication between the app and our servers uses TLS. VPN traffic is separately encrypted between your device and the exit server.
• Your account identifier and session tokens are stored on your device using Android’s EncryptedSharedPreferences, backed by the hardware-protected Android Keystore.
• Passwords are stored only as a salted one-way hash — nobody at SELLHEX LLC can read them.
• Administrative credentials for our VPN infrastructure exist only on our servers and are never shipped inside the app.
• The strongest protection we apply is not collecting the data in the first place — see section 2.

No system is perfectly secure. If a breach affects your personal data we will notify you, and any competent authority, where the law requires it.

9. Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to a particular use, and you can withdraw consent you have given. You can also complain to the data-protection authority in your country.

Email [email protected] from the address on your account, or contact us from within the app. We reply within 30 days, we do not charge, and we will not treat you differently for asking. We may need to verify the request really comes from you first.

10. Deleting your account

You can delete your account and everything attached to it at any time:

• In the app — Settings → Account → Delete my account.
• On the web — if you no longer have the app installed, use venavpn.com/delete-account.

This removes your email address, password hash, device and account identifiers, session tokens, device information, and your remaining time and allowance data, within 30 days. It cannot be undone — any VPN time earned from ads is lost. Reward transaction IDs are kept briefly afterwards, as explained in section 7; they hold no email address and are linked to no activity. Uninstalling the app on its own does not delete your account.

11. Children

Vena VPN is rated for users aged 13 and over and is not directed to children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has given us personal data, email [email protected] and we will delete the account promptly.

12. Website and cookies

venavpn.com is a static informational site. It sets no cookies, runs no analytics, and contains no tracking pixels or advertising tags. There is no login or account area on the website — accounts exist only inside the app. As with any website, our infrastructure and security provider processes standard connection information, including your IP address, to serve the pages and protect the site from attack.

13. Changes and contact

We may update this policy as the Service develops, and will change the “Last updated” date above when we do. If a change materially affects how we handle your data — a new category of data, or a new kind of recipient — we will tell you inside the app before it takes effect, and ask for your consent where the law requires it.

For any question about this policy or your data:

• Email: [email protected]
• Post: SELLHEX LLC, 7901 4th St N, Ste 20132, Saint Petersburg, FL 33702-4305, United States