Terms of Service

1. General provisions

1.1. These terms govern the use of the BlacksmithVPN service (the "Service"): the apps for iOS, macOS, Android and Windows, the blacksmithvpn.com site with its account area, and the Telegram bot.

1.2. The Service is operated by Jerba Technologies LLP (the "Operator", "we"). Information about the Operator is in section 11.

1.3. These terms consist of every section of this page, including the payment and refund rules (section 7) and the privacy policy (section 8).

1.4. By starting the Telegram bot (the /start command), paying for access or entering a key in the app, you (the "User") accept these terms in full. If you do not agree with them, do not use the Service.

2. Subject of the terms

2.1. The Service gives access to a VPN by key for the paid term and up to the number of devices stated in the plan.

2.2. Plans, terms and prices are shown on the Prices page and in the Telegram bot.

2.3. The access key is issued in the Telegram bot or in the account area right after payment. The apps have no registration and no purchases: they need only the key.

3. User rights and obligations

3.1. The User must obey the law and is responsible for the lawfulness of how they use the Service.

3.2. The Service may not be used for unlawful acts, for sending spam or for attacking other systems.

3.3. A key is for the User and for the people the User took a subscription for in their account, such as family members. The User answers for how they use the Service and can see the devices and traffic of those subscriptions. Reselling access is not allowed.

3.4. The User is responsible for keeping their key safe. If others have learned the key, it can be replaced in the Telegram bot or in the account area.

4. Warranties and liability

4.1. The Service is provided AS IS.

4.2. We work to keep the Service running but do not guarantee that it runs without interruption, that it is available on every network at every moment, or that it meets the User's expectations.

4.3. We are not liable for losses arising from the use of the Service or the inability to use it, including lost profit.

4.4. We are not liable for the sites and services the User reaches through the VPN.

4.5. Where the law does not allow liability to be excluded in full, it is limited to the amount the User paid for the current paid term.

5. Intellectual property

5.1. The apps, the site, the Telegram bot, and the BlacksmithVPN name and logo belong to the Operator.

5.2. They may not be copied, modified, decompiled, distributed or resold without the Operator's permission, except as expressly allowed by the licences of the open-source components they include.

5.3. Breaking this section may lead to the key being blocked without compensation.

6. Restriction of access

6.1. We may suspend or block a key without compensation if these terms are broken, if the Service is abused (for example, when many people use one key), or when the law or a payment provider requires it.

6.2. If a payment is disputed through a bank or payment system (clause 7.8), the term that payment added is taken off the subscription. A payment that added no term, such as one for a plan change that keeps the date or for extra devices, does not change the term. The User's other subscriptions are not affected.

7. Payment and refunds

7.1. Access is paid with Telegram Stars in the Telegram bot, or by card or SBP: on Tribute's payment page or through the payment agent GeoPay Solutions LLC.

7.2. Payments through the payment agent are accepted by GeoPay Solutions LLC on behalf of the Operator. The Service is provided and developed by the Operator.

7.3. Plans with automatic renewal renew automatically; renewal can be turned off at any time: a Stars subscription in Telegram, a card payment under Payments in the account area.

7.4. Access starts as soon as you pay, so once access has been provided, payments are generally not refunded.

7.5. Exceptions: access was not actually provided, or the Service does not work through a technical fault on its side. In these cases write to the Telegram bot (the /paysupport command) within 24 hours of the payment: we will look into it and refund the payment or extend the term, as the User prefers.

7.6. There is no refund for requests made more than 24 hours after the payment, for the unused part of a term the User no longer needs, or for a key blocked for breaking these terms.

7.7. Payments are refunded the same way they were made. Refunds in Telegram Stars follow the rules of Telegram.

7.8. The User may not dispute a payment through their bank or payment system (chargeback) without first contacting support.

8. Privacy policy

8.1. Scope

This policy covers the BlacksmithVPN apps for iOS, macOS, Android and Windows, the website blacksmithvpn.com with its account area, and the Telegram bot. The operator is Jerba Technologies LLP, a company registered in the Republic of Kazakhstan; the contacts are at the end of this page.

8.2. The short version

We collect as little as the service needs to work: the access key you enter, a technical identifier of each device and the connection statistics that enforce the limits of your plan. We do not watch, record or sell what you do online, and the apps contain no analytics and no advertising.

8.3. What the apps send when you connect

The identifier of your access key, so that the server can check that the key is valid and paid for.
A technical device identifier: a key pair generated on the device and kept in its secure storage (Secure Enclave and Keychain on Apple devices, Android Keystore, DPAPI on Windows). It contains no device name, phone number or other personal data. We store a hash of its public part to count the devices of a key against the device limit of the plan.
The platform (iOS, macOS, Android or Windows) and the app version, to refuse outdated versions and to see which clients are in use.
On the first login, the result of a platform check (App Attest on iOS, Play Integrity on Android): Apple or Google confirms that the app is genuine. We keep only the verdict.
While you are connected, the amount of traffic and the duration of the session per key, to apply the traffic and speed limits of the plan; and the country and network operator of the connection, kept as hourly totals only, to see where the service works well and where it does not.

8.4. What we never collect

The sites you visit, the apps you use, your DNS queries or the content of your traffic.
Your IP address. It is used to route the connection and is not written to any log or database. The country and network operator are derived from it at the moment of connection, without storing the address.
Location, contacts, photos, the device name, advertising identifiers or anything else from your device.
Analytics or crash reports. The apps include no analytics and no third-party SDKs. A diagnostic log exists only on your device, is sent to support only when you share it yourself, and contains no key, no addresses and no site names.

8.5. Website, account area and payments

The site loads nothing from third parties. The one exception is the e-mail sign-in form in the account area: it loads a Cloudflare Turnstile bot check, and Cloudflare then processes your IP address and browser details under its own privacy policy. We receive only the result of the check.

We keep no request logs with visitor addresses, only anonymous counters.

To sign in to the account area we receive your Telegram identifier or your e-mail address. They link your purchases and keys to your account. The account area uses one cookie to keep you signed in. We also use them to remind you that your paid term is ending: in the Telegram bot or, if the account has no Telegram or you have not opened the bot, by e-mail. You can turn reminders off in the message itself.

Payments are processed by Telegram (Stars), Tribute and the payment agent GeoPay Solutions LLC (bank cards and SBP). We receive the payment identifier, the amount, the currency and the status, never your card details. On the website and in the Telegram bot, card and SBP payments may also be processed by Paydex. With each Paydex payment we pass Paydex a buyer number made from your account number by a one-way keyed hash: it is the same for all your payments, so the bank can recognise a returning buyer, and it does not reveal your account, e-mail or Telegram account. We send no name, e-mail or phone number.

The apps have no account, no sign-up and no purchases. A key is all they need.

A subscription can have an optional name, such as "Mom", to tell the subscriptions in one account apart. You see it in the account area, in the Telegram bot, in Telegram (Stars) invoices and in reminder e-mails, and our staff see it in the admin panel. Telegram processes it as part of those messages and invoices; we do not pass it to other payment providers. It is not part of what support receives. We delete it with the account. If you would rather not give a person's name, leave the field empty.

8.6. Support

You can write to support inside the Telegram bot: open support with the Help button or the /paysupport command, then write your message. Only text is accepted for now.

Your message is passed to our support chat in Telegram together with your account number, your plan and your last payments. We keep only which account wrote or was answered, in which direction and when, for 30 days; we do not keep the text. Our answers reach you in the same bot.

Telegram stores these chats under its own policy. Do not send your access key or card details in a message: support never needs them, and a message that looks like a key is not passed on.

8.7. How we use the data

To provide the service: check the key, count devices, apply the term and the limits of the plan.
To answer your questions and support requests.
To keep the service secure and prevent misuse, for example one key shared with many people.
To meet legal obligations. We do not build profiles, do not show advertising and do not make automated decisions with legal effects on you.

8.9. How long we keep it

Account data (identifier or e-mail, keys, payments): while the account exists and the subscription is active, then for the period that accounting and tax law requires for payment records.
Device identifiers: while the key is valid. A device released in the account area or by support is forgotten.
Connection statistics: raw session records for 7 days, then hourly totals per key for 30 days. Country and operator totals, which contain no identifiers, for 90 days.
Account area sessions end after a period of inactivity; sign-in links expire within hours.

8.10. Your rights and deleting your data

You can delete your account in the account area at any time. Your identifiers and sessions are removed at once; keys you have paid for keep working until the end of the paid term and are then forgotten.

To delete a device, release it in the account area or ask support. To stop using the service on a device, remove the key from the app: nothing about that device is kept beyond the periods above.

Under the Law of the Republic of Kazakhstan “On Personal Data and Its Protection” and other applicable law, you can ask what data we hold about you, have it corrected or deleted, and withdraw consent. Write to us through the contacts below; we may need to confirm that the request comes from the account owner.

8.11. Children

The service is not directed at children. We do not knowingly collect personal data of persons under 18 without the consent of their legal representatives. If you believe a child has given us personal data, contact us and we will delete it.

8.12. Where data is processed

The operator is based in Kazakhstan. The service runs on servers in several countries; account data is stored on the operator's servers. Service providers such as app stores may process data in other countries under their own policies.

8.13. Changes to this policy

We update this page when the service or the law changes. The date at the top shows the last update. A change that significantly affects how we use your data is announced on this site and in the bot.

8.14. Contact

Jerba Technologies LLP, 14/2 Kerey and Zhanibek Khans Street, Apt. 47, Yesil District, Astana 010000, Republic of Kazakhstan.

E-mail:

9. Changes to the terms

9.1. We may change these terms and the plans. A change applies from its publication on this page; the date of the last change is shown at the top of this page.

9.2. A change never shortens a term already paid for.

9.3. By continuing to use the Service after a change, the User accepts the new version of the terms.

10. Governing law and disputes

10.1. These terms are governed by the law of the Republic of Kazakhstan.

10.2. A dispute is first settled by negotiation: write to the Telegram bot (the /paysupport command) or use the contacts in section 11.

10.3. If negotiation does not settle a dispute, it goes to the court at the Operator's location, unless the law gives the User a different venue.

11. About the Operator and contacts

11.1. Operator and developer of the Service: Jerba Technologies LLP, a company registered in the Republic of Kazakhstan.

11.2. Registered address: 14/2 Kerey and Zhanibek Khans Street, Apt. 47, Yesil District, Astana 010000, Republic of Kazakhstan.

11.3. E-mail:

11.4. Ask questions about these terms and payments in the Telegram bot (the /paysupport command) or by e-mail.