Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to the VirtuaMesh virtual networking software (hereinafter "the Software") and its associated control plane service (control.virtuamesh.com).

The Software is a private networking tool that helps enterprises establish virtual local area networks within their own infrastructure. The Software is provided as commercial closed-source software, in compliance with applicable laws and regulations regarding the operation of virtual local area networks.

2. Information We Collect

2.1 Information You Actively Provide

• Network Invitation Code: The invitation code you enter when joining a network, used to identify the virtual network to which you belong.
• Node Name: The display name you set for this device (optional), used to identify your device in the network member list.

2.2 Automatically Collected Information

• Device Identifier Information: Device hostname, operating system type and version (e.g., "Android 14"), and client version number, used for node display and compatibility adaptation.
• Network Endpoint Address: Your public IP and port (NAT traversal endpoint), used to establish P2P tunnels. This information is temporarily held in control plane memory only and is not persisted to the database.
• Key Information: WireGuard public key (used for tunnel encryption handshake), node ID, and token (used for identity authentication).
• Traffic Statistics Summary: Cumulative sent/received byte counts (totals only, no content), used for management console display and quota management.

2.3 Information We Do Not Collect

3. How We Use Information

We use the collected information only for the following purposes:

• Provision of Networking Services: Assign virtual IP addresses to your devices and establish encrypted tunnels with other network members.
• Identity Authentication and Authorization: Verify your node identity to ensure that only authorized devices can join your virtual network.
• Network Management: Display node online status, operating system type, and traffic summaries in the management console to help network administrators monitor network health.
• Troubleshooting: Assist in locating connection issues when you actively request technical support (only after you have explicitly authorized such assistance).
• Version Management: Identify the client version and prompt for upgrade when the version is outdated.
• Security Protection: Detect abnormal connection behavior and prevent unauthorized access and key abuse.

4. Information Storage and Protection

4.1 Storage Location

Control plane data (node information, keys, network configuration) is stored on the server where you deploy the VirtuaMesh control plane service. Client configuration (virtual IP, network key) is stored on your local device.

4.2 Storage Period

Node information is retained for the duration of the network's existence. When you actively deregister a node or a network administrator deletes a node, the relevant information will be purged from the database within 30 days (except for retained audit logs). Temporary information such as NAT endpoints is immediately removed from memory once the node goes offline.

4.3 Security Measures

• Transmission Encryption: All communication between clients and the control plane is encrypted using TLS (HTTPS/gRPC over TLS).
• Tunnel Encryption: Inter-node data uses the WireGuard protocol, encrypted with ChaCha20-Poly1305 and AES-256-GCM.
• Key Protection: Client private keys are stored in the device's secure storage area (Android Keystore / system keychain).
• Access Control: The control plane API uses JWT token authentication, and the management console supports role-based access control (RBAC).

5. Information Sharing and Disclosure

We will not sell your personal information to any third party. In the following circumstances, we may share necessary information:

• Sharing Among Network Members: Your node information (virtual IP, public key, hostname, operating system type) will be shared with other authorized member nodes within your virtual network. This is necessary for the proper operation of the networking service.
• DERP Relay Service: When a P2P connection is unavailable, your encrypted traffic may be forwarded through DERP relay nodes. Relay nodes only forward encrypted data and cannot decrypt the content.
• Legal Requirements: When explicitly required by laws and regulations or by competent government authorities in accordance with the law, we may disclose necessary information.

6. Network Traffic Statement

Specifically:

• In P2P mode, traffic travels directly from one node to another without passing through the control plane.
• In relay mode, the DERP server only forwards encrypted packets and cannot decrypt or view the content.
• The control plane only records traffic statistics summaries (total byte counts) and does not record traffic content, destination addresses, or communicating parties.
• The control plane is deployed by you on your own server, and all data remains entirely within your infrastructure.

7. Your Rights

In accordance with applicable laws and regulations, you have the following rights regarding your personal information:

• Right to Information: You have the right to know how we collect and use your personal information (this policy fulfills that obligation).
• Right of Access: You may view this node's information and traffic statistics through the management console.
• Right to Correction: You may modify the node display name at any time. To correct other information, please contact your network administrator.
• Right to Deletion: You may "Deregister Node" in the client settings. After deregistration, the node information will be removed from the network.
• Right to Withdraw Consent: You may stop using the Software and deregister the node at any time, which shall be deemed as withdrawal of consent to information processing.

8. Protection of Minors

The Software is intended for enterprise and professional users and is not directed at minors under the age of 14. We do not knowingly collect personal information from minors. If you are the guardian of a minor and discover that your ward is using the Software, please contact us promptly to have the relevant information deleted.

9. Policy Changes

This Privacy Policy may be updated from time to time. Upon a policy change, we will publish the updated version in the management console and on this page, and update the "Last updated" date. In the event of material changes (such as an expansion of the scope of information collection), we will notify you through client notifications or email reminders.

Your continued use of the Software constitutes acceptance of the updated Privacy Policy. If you do not agree with the revised policy, please stop using the Software and deregister your node.

10. Contact Us