[jauer]

On your features page you say "Know that while connected to StyxVPN your privacy is foremost in our minds. We don't keep records of what you do or where you go or what you do and prevent your ISP and anyone else who is curious from doing the same."

How do you plan on withstanding network provider (and their upstream) pressure in response to DMCA notices related to file sharing activity?

As you are operating network equipment (a VPN concentrator) in the US, how are you complying with CALEA and still preserving the privacy of your users?

You operate on a monthly recurring billing model. What prevents a LEA from subpoenaing billing records to determine who is using your service and then comparing traffic patterns with CALEA captures from your network provider and your customer's network providers?

[evannyx]

  How do you plan on withstanding network provider (and their upstream) pressure in response to DMCA notices related to file sharing activity?

Throughout our experience in the vpnworld most of the letters generated from this have been spam or bot generated and while we worked for other companies, there responses varied. We will address each on a case by case basis with our in-house counsel and/ /take the appropriate steps to resolve it swiftly.

  As you are operating network equipment (a VPN concentrator) in the US, how are you complying with CALEA and still preserving the privacy of your users?

Through the research of our legal representation we are not a concentrator though that may be the closest designation to what we do. We have found that our model falls outside of any within the CALEA while many of our larger competitors that also are ISP's do not.

  You operate on a monthly recurring billing model. What prevents a LEA from subpoenaing billing records to determine who is using your service and then comparing traffic patterns with CALEA captures from your network provider and your customer's network providers?

Could this happen? Absolutely, though there are no documented cases of this we have found that deal with a personal VPN provider on record and many of our competitors have been in business a great deal longer. I would imagine as well that something like this could be done without subpoena as well through back door channels should their be a particular dire need. There is no perfect privacy whatsoever and as individuals in a free society we must take responsibility for our own actions.

[jauer]

Thanks for the reply.

I guess I don't see how you can terminate VPN connections from users and not be a VPN concentrator but since you have a loophole, best of luck to you!

I have a small pile of routers with 3DES cards for terminating business VPNs at work (ISP) and have pondered offering end-user VPNs but the potential legal hassles weren't worth it to us.