Personal data processing policy

Controller: [legal entity, address, and registration details must be completed]. This policy applies to the public website, registration, the account area, support requests, and user-connected channels.

Creating an account and workspace: name, work email, company information, and security settings. Product operation: tool settings, messages, and business data the user independently adds or connects. Support and security: request content, technical events, the log of significant actions, and device information to the extent necessary to protect the service.

The legal basis must be determined separately for each purpose and may include performance of a contract, the data subject's consent, and duties required by law. Optional product analytics is enabled only after the user's separate choice.

On the first visit, the service may determine a country at a trusted infrastructure boundary from the network address to offer a suitable currency. For pricing, only the country code, determination source, and confidence level are retained; the full IP address is not retained for this purpose. The user may change the currency manually. This choice is independent of the interface language and does not by itself change an active subscription or contractual price.

The controller approves specific retention periods for each data category and records them before production launch. Once the purpose is achieved, data is deleted, anonymized, or retained only where another legal basis exists. Requirements for localizing databases of citizens of the Russian Federation require separate infrastructure and legal review.

Data may be transferred to infrastructure providers and user-connected channel providers only to the extent needed to provide the service and under the relevant agreements. The current list of processors must be published after the production infrastructure is approved.

A user may request information about processing, correction, restriction, or deletion of data, withdraw consent, and challenge processing as provided by law. The request channel will be published on the contacts page after the controller's details are approved.

privacy@bototeka.com

Bototeka uses workspace separation, authority controls, confirmation of significant actions, and auditing. The policy is updated when the product, infrastructure, or legal requirements change; each new version receives a publication date.

Legal basis for the document structure: Article 18.1 of Federal Law No. 152-FZ.