Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
ExpressVPN's Privacy Policy indicates that changes can occur without notice, and continued use of services signifies acceptance (risk_flags-1, risk_flags-2). It also outlines that service providers may access certain data for operational purposes, and transactional communication data will be retained for ten years, with continued use implying consent to these communications (data_use-2, data_use-3).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
1 finding
Critical issues and red flags in the policy that could lead to significant user harm. These are often non-negotiable terms that users should be aware of before committing to a service.
medium95% confidence
Privacy policy may change without notice
The Privacy Policy may be changed from time to time, with or without notice to you, consistent with applicable privacy laws and principles.
Why it matters: The company may change its Privacy Policy without notifying you, meaning your privacy rights and the company's data handling practices could change without your knowledge.
We may change our Privacy Policy from time to time, with or without notice to you, consistent with applicable privacy laws and principles.
Changes to This Privacy Policy, paragraph 1 · Citation strength: strong
Data Use
All clear
How the policy outlines the collection, processing, and sharing of user data. This section focuses on transparency and user control over their personal information.
✓
Looking good
No data-use concerns flagged
Verbaterm only flags concerns it can cite. No source-backed data-use findings are shown here.
Cancellation and Renewal
All clear
Terms related to subscription management, including cancellation procedures, refund policies, and automatic renewals. This section helps users understand their rights and obligations when managing their subscriptions.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Gotchas
All clear
Potentially overlooked or subtle clauses that could have significant implications for users. These often require careful reading to fully understand their impact.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
5 findings
Consumer-friendly clauses and features that enhance user privacy, security, or control. These aspects often go beyond basic requirements and offer additional benefits.
Protection90% confidence
Zero-knowledge encryption for dedicated IP addresses
Zero-knowledge encryption is used to allocate IP addresses for the Dedicated IP add-on, ensuring no link between your Account and your allocated Dedicated IP.
Why it helps: The company uses strong encryption to keep your dedicated IP address separate from your account, enhancing your anonymity and privacy when using this feature.
Zero-knowledge encryption is used to allocate IP addresses, ensuring that there is no link between your Account and your allocated Dedicated IP.
How We Protect and Retain Your Personal Data, paragraph 4 · Citation strength: strong
Protection95% confidence
No VPN activity or connection data collected by service providers
Service Providers only have access to the data necessary for the services they are performing, and this will never include VPN activity or connection data as such data is not collected.
Why it helps: Your VPN usage and connection details are explicitly protected from being accessed by third-party service providers, maintaining the privacy of your online activities.
Service Providers only have access to the data necessary for the services they are performing on behalf of ExpressVPN, which in any case will never include VPN activity or connection data as we do not collect such data.
How We Protect and Retain Your Personal Data, paragraph 9 · Citation strength: strong
Protection95% confidence
No logs of online activity or connection logs
The company does not collect logs of your online activity while connected to its Services, including no logging of browsing history, traffic destination, data content, DNS queries, IP address, outgoing VPN IP address, connection timestamp, or session duration.
Why it helps: The company commits to not logging significant personal internet usage details, which greatly enhances your privacy and anonymity while using their VPN service.
We do not collect logs of your online activity while you are connected to our Services, including no logging of browsing history, traffic destination, data content, or DNS queries. We also never store connection logs, meaning no logs of your IP address, your outgoing VPN IP address, connection timestamp, or session duration.
ExpressVPN is committed to protecting your privacy, paragraph 4 · Citation strength: strong
Protection95% confidence
No personal data collected from children
The company does not knowingly collect Personal Data from, and/or about individuals under the age of eighteen (18) or under the age of majority in the jurisdiction of residency / from which the Services are used.
Why it helps: This policy ensures that personal information of minors is not knowingly collected, providing an important safeguard for children's privacy.
We do not offer our Services for use by children and, therefore, we do not knowingly collect Personal Data from, and/or about individuals under the age of eighteen (18) or under the age of majority in the jurisdiction of residency / from which the Services are used.
Use by Children, paragraph 1 · Citation strength: strong
Protection95% confidence
No sale of personal data to third parties
ExpressVPN does not sell or lease your Personal Data to third parties.
Why it helps: The company explicitly states that it does not sell or lease your personal data, which helps prevent your information from being used by unknown third parties for their own purposes.
ExpressVPN uses your Personal Data only for the purposes listed in this Privacy Policy, and we do not sell or lease your Personal Data to third parties .
Personal Data, paragraph 9 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.