Privacy Policy

1. Overview & Roles

MikroRadius ("we", "our", or "us") provides cloud RADIUS authentication, voucher management, and network monitoring for ISPs, hotels, and network operators. We take your privacy and the confidentiality of your network data very seriously.

Under European and global data protection laws (such as GDPR), MikroRadius acts as the Data Controller for your account registration and profile details, and acts as a Data Processor on your behalf regarding the network session telemetry and voucher records created by your network equipment.

2. Payment & Billing Data (Lemon Squeezy)

Lemon Squeezy processes transactions in compliance with strict PCI-DSS Level 1 security standards. MikroRadius receives only high-level metadata (such as subscription status, plan name, order ID, and expiration date) through secure, encrypted webhooks to activate your platform access.

3. Information We Collect

To provide and maintain the Service, we collect the following limited categories of data:

• Account Profile: Full name, email address, mobile phone number, username, country, and timezone.
• Router & Gateway Information: Router IP addresses, NAS identifiers, and RADIUS shared secrets. Shared secrets are stored in our database using strong AES-256 encryption.
• RADIUS Session Accounting Logs: Telemetry generated when end-users connect to your network (session start/stop timestamps, input/output octets for bandwidth tracking, assigned framed IP address, and MAC address). We do not track or inspect user browsing history or packet payloads.

4. How We Use Data & No-Sale Policy

We use collected data solely to deliver the platform: authenticating router RADIUS requests, generating voucher batches, enforcing bandwidth speed limits, calculating live usage analytics, and delivering transactional customer support.

5. Third-Party Subprocessors

We partner with reputable infrastructure providers to operate the Service under strict data confidentiality agreements:

• Lemon Squeezy (USA): Merchant of Record, billing, tax calculation, and payment processing.
• Cloud Infrastructure & VPS Hosting: Secure, isolated server instances running Linux, Nginx, and MariaDB.
• Transactional Email Delivery: System transactional delivery for account activation, verification, and critical service notifications.

6. Cookies & Local Storage

We do not employ invasive cross-site tracking or advertising cookies. We use only strictly necessary first-party cookies: an encrypted session cookie required to keep you signed in to your portal, and a globalTheme cookie/localStorage key to remember your light or dark mode visual preference across page navigations.

7. Your Privacy Rights (GDPR & CCPA)

Regardless of your geographical location, we respect your comprehensive privacy rights:

• Right of Access & Portability: You can export or review all your active routers, subscribers, and voucher logs directly from your portal at any time.
• Right to Rectification: You can update your account profile and router parameters directly via your dashboard settings.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your account, router records, and RADIUS telemetry by emailing us.

To exercise any of these rights, contact our data protection desk at [email protected]. We respond to verified requests within 30 days.

8. Data Security & Infrastructure Safeguards

We employ multi-layer security measures to protect your network data. All web portal traffic is protected using Modern TLS 1.3 encryption with strict HTTPS enforcement. All database passwords and RADIUS shared secrets are cryptographically salted and encrypted at rest. RADIUS UDP communication is restricted to authorized NAS IP addresses defined in your portal.