Personal Data Processing Policy

1. General provisions

This Policy describes how the operator of the CleanContact service (the “Operator”) processes personal data of visitors of this website in accordance with Federal Law of the Russian Federation No. 152-FZ “On Personal Data” dated July 27, 2006. By using the website, the User confirms having read this Policy.

2. Operator details

The Operator of personal data is Individual Entrepreneur Dmitrii Vladimirovich Baskakov, INN 771577228202, OGRNIP 317774600487837, address: 109544, Moscow, Novorogozhskaya st., 8, apt. 350, Russia. Contact email for personal data matters: dmitry@bask.ws.

3. Categories of data subjects

The Operator processes personal data of:

• website visitors;
• users of the Service;
• payers under agreements.

4. Data we process

• Technical data transmitted automatically: IP address, browser type and version (user-agent), selected interface language, pages visited and time of visit.
• Cookies: small text files stored by the User's browser (see section 8).
• Email addresses that the User voluntarily submits to the validation demo form.
• Email addresses transmitted in requests to the Service API when using paid plans.
• When registering and using the personal account: email address, the cryptographic hash of the password, date and time of registration, and information about sign-ins to the personal account (date and time) and its use. The password is stored exclusively as a cryptographic hash and cannot be recovered by the Operator.
• When paying for a plan: the payer's name, the email address for the fiscal receipt and payment metadata (amount, date, plan). Bank card details are processed by the authorized payment service and are not transferred to the Operator.

Beyond the data listed above, the Operator does not collect other identifying information through this website and does not use personal data for profiling.

5. Purposes of processing

• Ensuring the website functions correctly and remembering your language preference.
• Performing the email validations requested by the User in the demo form and via the Service API.
• Registering the User, providing access to the personal account, authenticating the User and ensuring the security of the account.
• Sending service notifications required for registration, email address confirmation, account access recovery and the security of the service.
• Protecting the service from automated abuse (captcha).
• Performing the service agreement and sending fiscal receipts as required by Federal Law No. 54-FZ.
• Analyzing the operation, improving the quality and ensuring the stability of the service.

6. Actions with personal data

The Operator performs collection, recording, systematization, accumulation, storage, refinement (updating, modification), use, transfer (provision, access, entrusted processing) in the cases provided for by law and this Policy, anonymization, blocking and deletion of personal data.

7. Legal grounds

Personal data is processed:

• on the basis of the data subject's consent;
• for the conclusion and performance of an agreement;
• for the performance of obligations imposed by the legislation of the Russian Federation.

8. Cookies and how to disable them

The Operator uses only strictly necessary cookies: NEXT_LOCALE (stores the selected interface language) and cookie_consent (remembers that the User has seen the cookie notice). Third-party services listed in section 12 may set their own cookies.

The User may delete or block cookies in the browser settings at any time. Note that blocking cookies may affect the operation of individual website features, such as language selection.

9. Storage, protection and retention

The Operator applies organizational and technical measures to protect personal data from unauthorized access, alteration, disclosure or destruction. Data is stored no longer than required by the processing purposes, after which it is destroyed or anonymized. Email addresses submitted via the demo form or the API are used exclusively to perform the validation, display the results to the User and store the validation history in the personal account.

The Operator does not use email addresses submitted for validation for marketing purposes, building its own databases, sending messages or providing them to third parties, except in the cases provided for by the legislation of the Russian Federation or necessary for the provision of the services.

Approximate retention periods for individual categories of data:

• email addresses submitted for validation — for the duration of the validation and the caching of its result, and in the validation history of the personal account — for no more than 7 calendar days;
• personal data related to the User's account — until the account is deleted by the User or the provision of services is terminated, unless a longer retention period is required by the legislation of the Russian Federation;
• server logs — no longer than 12 months;
• payment and fiscal receipt records — for the periods established by the tax legislation of the Russian Federation.

10. Confidentiality

The Operator and other persons who have obtained access to personal data undertake not to disclose it to third parties without legal grounds.

11. Personal data localization

The initial collection of personal data of citizens of the Russian Federation is carried out using databases located on the territory of the Russian Federation, in accordance with the requirements of the legislation of the Russian Federation.

12. Third-party services and processors

The Operator may entrust the processing of personal data to third parties in compliance with the requirements of the legislation of the Russian Federation.

• Yandex SmartCaptcha (Yandex LLC) is used to protect the website from automated abuse; the captcha may process technical data and set its own cookies in accordance with Yandex's privacy documents.
• An authorized payment service is used to process payments; bank card details are not transferred to the Operator.

13. Data subject rights

The User has the right to request information about the processing of their personal data, demand rectification, blocking or deletion of the data, withdraw their consent to processing at any time by contacting the Operator, and appeal against the Operator's actions or inaction to the authorized body for the protection of the rights of personal data subjects or in court.

The User may delete their account, unless further storage is required for the performance of obligations provided for by the legislation of the Russian Federation.

14. Data accuracy

The Operator takes reasonable measures to keep personal data up to date; however, the data subject is responsible for the accuracy of the data provided.

15. Contacts

The Operator is responsible for organizing the processing of personal data. For any questions related to the processing of personal data, please contact the Operator at dmitry@bask.ws.

16. Changes to this Policy

The Operator may update this Policy from time to time. The current version is always available on this page; the date of the last update is shown above.