We believe in transparency about how we collect, use, and share information about you. This policy explains our privacy practices in clear, simple terms.
At Ngrok Inc. ("ngrok," "we," "us," or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tunneling services, website, and related applications.
Key Points: We collect minimal data necessary to provide our services, use industry-standard security measures, and never sell your personal information to third parties.
This policy applies to all users of our services, whether you're using our free tier or are an enterprise customer. By using ngrok, you agree to the collection and use of information in accordance with this policy.
We collect information you directly provide to us, including:
When you use our services, we automatically collect certain information:
To provide our tunneling services, we process:
We use the information we collect for the following purposes:
We implement industry-standard security measures to protect your information:
All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
Strict access controls and employee background checks
24/7 security monitoring and incident response
SOC 2 Type II certified with regular security audits
While we use reasonable security measures, no system is completely secure. We cannot guarantee absolute security of your information.
We retain your information for as long as necessary to provide our services and fulfill legal obligations:
| Data Type | Retention Period |
|---|---|
| Account Information | Until account deletion + 30 days |
| Usage Logs | 90 days |
| Security Logs | 1 year |
| Billing Records | 7 years (legal requirement) |
| Support Communications | 3 years |
Depending on your location, you may have the following rights regarding your personal information:
Request a copy of the personal information we have about you
Request correction of inaccurate or incomplete information
Request deletion of your personal information
Request transfer of your data to another service
Request limitation of how we process your information
Object to certain types of processing
To exercise these rights, please contact us at [email protected]. We will respond within 30 days.
Our services operate globally. When we transfer your information internationally, we ensure adequate protection through:
Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
Changes become effective 30 days after posting, unless otherwise specified.
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Ngrok Inc.
548 Market Street, PMB 77519
San Francisco, CA 94104-5401
United States
Last Updated: May 15, 2025