Privacy Policy

Oleksandr Nikolaiev is responsible for personal data collected through this website and through enquiries sent to us. Inside a hosted stand the roles are different — see clause 4.

This site is a set of static pages. It sets no cookies of its own, runs no analytics, and embeds nothing from advertising or tracking networks. The pages were built ahead of time and are served from a content network which, like any web server, records the connection: IP address, time, page requested, browser. That is used to serve the site and to stop abuse, and for nothing else.

If you e-mail us we keep your address, your message and our reply, so that we can answer and so that a later conversation has context. We do not add you to a mailing list you did not ask for. Ask us to delete the correspondence and we will, unless accounting law requires us to keep it.

An ERP stand holds personal data about your employees, customers and suppliers. For that data you decide what is collected and why; we only process it on your instructions in order to run the service. We do not read it for our own purposes. Our staff enter a customer stand only to fix a fault or at your request, and that access is logged.

Customer databases and their backups are held on infrastructure in Georgia.

Only these third parties are involved at all, and neither of them holds customer business data:

• Cloudflare — serves this website and filters traffic to it; sees connection metadata
• GitHub — holds the source and builds the site; sees no customer data

Stand data is kept for as long as the subscription runs, plus 30 days of read-only access afterwards; backups age out on their normal schedule after that. Enquiry correspondence is kept for two years. Server connection logs are kept for 30 days.

Every customer has an isolated container and an isolated database — no shared tables, no shared credentials. Traffic is encrypted in transit. Backups are taken automatically and restores are tested, because a backup nobody has ever restored is a hope, not a backup.

Where the GDPR applies you may ask for access, correction, deletion, restriction and portability, and you may object to processing; you may also complain to your national supervisory authority. Saudi Arabia's PDPL gives comparable rights. If the data sits inside a customer's stand, address the request to that customer — they decide, and we assist them.

Data-protection requests go to [email protected].

When this policy changes, the date at the top changes with it. Changes affecting data already collected are announced before they take effect.