Skip to content
background map


The purpose of RoTunneling VPN service is to help users access the Internet without censorship, ensure their safety, anonymity and prevent tracking while browsing the internet. 
 
RedShift IT SRL, as sole operator of the RoTunneling VPN service is not responsible and can not be held liable for any action of the beneficiaries of the service. The recipients are solely responsible for all their actions. 
By activating an account on this website you agree to comply with these Terms and Conditions and with the law; these terms have contractual value. 
 
The service requires a working internet connection and a stable connection to the RoTunneling VPN servers on at least one of the ports 53 UDP, ICMP, TCP 443.
 
RoTunneling VPN is subscription based.
 
Returns
 
If you are not satisfied you should ask for help by email at [email protected].
If after asking for help you are still not satisfied you can ask for a full refund within 14 calendar days from your first payment.
For online payments made by credit or debit card, the refund will be issued to the card you used for the payment.
 
Malware and Phishing Protection
 
It blocks most sites that distribute malware, phishing, ransomware, tracking, and some ads.
It is based on 2 layers of protection, one developed by us, another based on CloudFlare DNS to ensure the best possible coverage. This feature is offered free to all RoTunneling VPN customers. It does not offer any 100% protection guarantee, no protection system can offer.
If you notice a site or application that you cannot access and you believe this is a mistake, please write to us at [email protected].
 
Respect the law
 
Beneficiaries have the obligation to correctly provide personal data required for registering an account, incorrect personal data represents forgery and use of forgery in public documents as it falls under the Romanian law.

This service is not intended for the following:

- It is strictly forbidden to use the VPN network to send unsolicited email (spam). 
- It is strictly forbidden to use the VPN to exploit informational systems. 
- It is strictly forbidden to use the VPN for DDoS attacks. 
- It is strictly forbidden to use the VPN for fraud, illegal access to applications, databases, to access child pornography, and any actions must abide by laws of this country (Romania) and also international laws. Especially, but not only the law 161/2003 including all changes until the current date.
 
Accounts that do not comply with one or more of these terms and conditions can be disabled without notice. Beneficiaries accept this along with all terms and conditions and RedShift IT SRL can't be held liable for any direct or indirect damage or beneficiaries actions.
The user's acceptance is necessary for the provision of services set out in the contract, subsequent disagreement with the Terms and Conditions makes it impossible to provide the services and therefore results in deletion of the account. Renouncing the service by expressing disagreement with the Terms and Conditions does not entitle you to a refund of the plan value.
 
GDPR
 
According to the GDPR provisions, we will further detail:
 
Information collected from users.
The purpose for which they are collected.
Other information collected by third parties
Information collected by RoTunneling and shared with third parties.
The period they are stored.
The right to be forgotten.
The locations where the collected data is stored.
Maximum response time to GDPR requests.
 
Information collected from users.
 
In order to offer our services at the highest quality, we collect the following personal data:
 
Individuals:
1. Nick / Nickname (username)
2. Name and surname
3. Phone number
4. Email
5. Address
6. CNP / National ID (for users registered before 02/12/2014)
 
Legal persons:
 
1. Nick / Nickname (username)
2. Organization name
3. Phone number
4. Email
5. Billing address
6. CIF / VAT number
7. Registration number of the Trade Register (J)
8. Information on the status of VAT payer (Y / N)
9. IBAN
10. Branch and Bank where the IBAN account was opened.
 
During the service we also collect the following data:
 
1. Connection information and aggregated traffic statistics:
 
username
the server to which the user has logged in
the server port on which the connection was made
the public IP of the user on which the connection was made
the date and time at which the connection was initiated
the date and time at which the connection was stopped
how long the connection lasted
traffic in
traffic out
 
 
The purpose for which they are collected:
 
Individuals:
1. First and last name
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
 
2. Phone number
We use this information:
- asking for a password reset to verify the authenticity of your password reset request.
- to communicate service/security and personal data issues in case it is needed, for example, if your account has been compromised or affected by a security breach.
- in order to be able to resolve certain support requests sometimes more efficiently.
 
 
3. Email
We use this information:
- asking for a password reset to verify the authenticity of your password reset request.
- to communicate service/security and personal data issues in case it is needed, for example, if your account has been compromised or affected by a security breach.
- in order to be able to resolve certain support requests sometimes more efficiently.
 
4. Address
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
 
5. CNP / National ID (for users registered before 02/12/2014)
We need this billing information.
In order to identify the user in order to solve the technical and commercial support requests in case it is necessary to check the authenticity of the application.
Upon request, we can delete this information from the system if it has been collected and the user wants to delete it. For this, please contact us using the support contact details.
 
 
6. Nick / Nickname (username)
We use this information to make it possible to login to your account on the site and to the VPN servers.
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
We prefer to use a pseudonym instead of an email address to protect personal data and avoid using more of it than necessary.
 
Companies:
 
1. Nick / Nickname (username)
 
We use this information to make it possible to login to your account on the site and to the VPN servers.
We prefer to use a pseudonym instead of an email address to protect personal data and avoid using more of it than necessary.
 
2. Organization / Company Name
 
We need this billing information in accordance with the Fiscal Code (Law 227/2015, with up-to-date updates).
To identify the user with the purpose of solving technical and commercial support requests.
 
3. Phone number
 
We use this information:
- asking for a password reset to verify the authenticity of your password reset request.
- to communicate service/security and personal data issues in case it is needed, for example, if your account has been compromised or affected by a security breach.
- in order to be able to resolve certain support requests sometimes more efficiently.
 
4. Email
 
We use this information:
- asking for a password reset to verify the authenticity of your password reset request.
- to communicate service/security and personal data issues in case it is needed, for example, if your account has been compromised or affected by a security breach.
- in order to be able to resolve certain support requests sometimes more efficiently.
 
5. Billing Address
 
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
 
6. CIF / VAT number
 
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
 
7. Registration number of the Trade Register (J) (Romanian companies only)
 
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
 
8. Information on the status of VAT payer (Y / N)
 
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
 
9. IBAN
 
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
 
10. Branch and Bank where the IBAN account was opened.
 
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
 
During the service usage:
 
The data collected during the operation of the service are aimed at the proper functioning of the service:
- Identify the number of simultaneous authentications automatically to apply the limit according to the chosen package.
- Traffic statistics to identify the need for upgrades/downgrades to servers.
- Identify the region from where the connection was made to increase the number of servers and thus improve the service in those regions.
- We partially display them in the user account, for the user to be able to track the use of the service (Connected Devices) in order to easily identify possible situations in which the user account has been compromised.
 
These data are automatically deleted 6 months after collection.
 
Other information collected by third parties:
 
Google Analytics - on the web application, in order to ensure the good functioning of the site and increase the traffic capacity when needed. Identify the main sources of traffic and the general interest of users in order to be able to mark the service in an appropriate way. - GDPR compliant
 
Google Ads - Identify traffic coming from paid advertisements to determine conversion rate and optimize creatives. - GDPR compliant
 
Facebook Ads - Identify traffic coming from paid advertisements to set conversion rate and optimize ads. - GDPR compliant
 
CloudFlare - identifies the traffic and type of HTTP requests made to the web server to improve the automated and semi-automated security systems provided by Cloudflare. - GDPR compliant
 
EmbedSocial - email and other information the user chose to include in their feedback. - GDPR compliant
 
Information Collected by RoTunneling and Shared with Third Parties:
 
SC ACCOUNT EXPERT HOUSE SRL - Tax invoices for the purpose of accounting.
Tax invoices contain the personal data mentioned above for billing purposes.
Data retention is in line with the Romania Fiscal Code (Law 227/2015, with up-to-date updates) and with the Romanian State Law on the Retaining of Legal Entities in Romania.
Details:
Retention of tax invoices, in accordance with the provisions of the Order of the Ministry of Public Finance (MFP) no. 2634/2015, in force from 1 January 2016, must be retained for 10 years starting from the end of the financial year in which they were drawn up.
In addition, in case of ceasing the activity of a company, the financial-accounting acts shall be kept in accordance with the provisions of the Companies Law no. 31/1990 or can be handed over to the state archives.
Romania, Bucharest - GDPR compliant.
 
Stripe - Billing information, as defined above.
Stripe is our payment processor, so it is necessary to share this information with Stripe in order to make the payments.
 
Oblio - Billing information, as defined above.
Oblio is the platform we use to issue fiscal invoices, so this information is shared with Oblio in order to issue the invoices.
Romania - GDPR compliant.
 
Google Maps Platform - The address text typed in the billing form, to suggest address completions.
Details: https://policies.google.com/privacy - GDPR compliant.
 
tawk.to - Messages and contact details the user chooses to send through the support chat on the website.
Details: https://www.tawk.to/privacy-policy/ - GDPR compliant.
 
Mailjet - Sending transactional emails (account validation, password reset, payment confirmations and invoices).
We share with them the email address and name of the user, strictly to deliver these emails.
Mailjet (Sinch group) - GDPR compliant.
 
The period they are stored:
 
Connection information is stored for 6 months and billing information is stored for a period of 10 years.
Information collected by third parties that allow us to set up the retention period (eg google analytics) is stored for a period of 14 months.
 
The right to be forgotten.
 
You may exercise the right to be forgotten by contacting us at the email address for support.
And we will delete all personal data in your account, including this, except for your tax invoices, which according to the Order of the Ministry of Public Finance (MFP) no. 2634/2015, in force from 1 January 2016, must be retained for 10 years starting from the end of the financial year in which they were drawn up.
In addition, in case of ceasing the activity of a company, the financial-accounting acts shall be kept in accordance with the provisions of the Companies Law no. 31/1990 or can be handed over to the state archives.
 
In case of using the right to be forgotten, and request deletion of all data about the account (except invoices) you understand that you can't use the service anymore and any remaining paid plan time will be forfeited. You understand and accept this and waive any RoTunneling VPN obligation to you, including VPN services, without any refund.
 
Locations where the collected data is stored:
 
AWS - eu-west-1 region - Ireland.
Amazon Web Services, Inc. - GDPR compliant.
 
Headquarters of RedShift IT SRL (RoTunneling VPN) - Bucharest, Romania. - GDPR compliant.
S.C. ACCOUNT EXPERT HOUSE SRL - Bucharest, Romania. - GDPR compliant.
 
Maximum response time to GDPR requests:
 
Maximum 30 days.
 
In case of inconsistency between the version of this document in Romanian and English, the Romanian version will take precedence over the English version.
 
Last update 17.10.2026.


Tags: rotunneling vpn, terms and conditions, vpn