Personal data processing policy
This policy describes how personal data is processed in the “Povod” service. The operator is Olejnik Viktoriia Aleksandrovna, self-employed (professional income tax regime, NPD), INN 616306251781, hi@disify.dev, acting under Russian Federal Law No. 152-FZ “On Personal Data”.
1. What data we process
- Clients: email address (for login, confirmation codes and receipts) and a password, stored only as a hash; the Operator cannot see the password itself.
- If the client links the Telegram bot for notifications themselves: the Telegram chat ID and Telegram name. Without linking, this data is not collected.
- The email and contact (Telegram or email) the client enters at checkout, and payment details (amount, date, plan). Bank card data is processed by the payment provider; the Operator does not receive it.
- Trial plan: hashes of the phone number, the browser fingerprint and (if the payment provider passes them) card attributes — used only to prevent buying the trial more than once.
- Technical data: a session cookie for signing in to the dashboard and anonymised site visit statistics.
- Organisations: information from open sources (maps, public registers). The Operator does not collect data on private individuals.
2. A special note on mobile numbers
Some contact numbers of individual entrepreneurs taken from open sources may count as personal data. The Operator keeps a minimum of such data, does not enrich it with full names and does not publish it. An organisation may ask for its data to be excluded by writing to hi@disify.dev.
3. Purposes and legal grounds
- Providing the service (performance of the offer agreement).
- Accounting for payments and issuing NPD receipts.
- Informing the client about how the service works.
4. Storage and protection
Data is stored on servers located in the Russian Federation. Access is restricted; data is shared with third parties only with the payment provider and in cases required by law. Data is kept for the duration of the agreement and afterwards within the limits set by law.
5. Data subject rights
A data subject may request information about the processing, correction, blocking or deletion of their data, or withdraw consent, by writing to hi@disify.dev. A reply is sent within the period set by law.
Operator details: Olejnik Viktoriia Aleksandrovna, self-employed (professional income tax regime, NPD), INN 616306251781, hi@disify.dev.