Privacy Policy

Version dated [LANDING_DOCS_DATE].

This Policy explains what personal data we process when you use the website https://cs2bfp.net (hereinafter the “Site”) and the control panel https://panel.cs2bfp.net (hereinafter the “Control Panel”), why we do so and what rights you have. The Policy has been drawn up in accordance with the Law of Ukraine “On Personal Data Protection”.

1. Who processes your data

The data controller is the sole proprietor [LANDING_SELLER_NAME] (hereinafter “we”). For questions about the processing of personal data, write to [LANDING_SUPPORT_EMAIL].

2. What data we process

Data	Source
Account data: login, email address, name (if you have provided it), interface language, password in the form of an irreversible hash, two-factor authentication settings and the public parts of passkeys	you provide it during registration and in your profile
Payment data: the history of balance top-ups and charges, amounts, dates and payment identifiers. We do not receive or store card numbers or other payment details — they are processed by the payment service	arises when you pay for services
Technical data: IP address, date and time of sign-ins and of actions in the account (the event log), browser information, cookies	collected automatically when you use the Site and the Control Panel
Support requests: the text of messages and attached files	you send them yourself
Details for documents (for legal entities and sole proprietors): name, identification code, address	you provide them if you ask us to issue documents

The contents of your projects — files, databases, your users' correspondence — belong to you. We do not view or analyse them; access to them is possible only when you ask support for help, or when it is needed to fix a failure or to stop a breach of the Acceptable Use Policy. If you process other people's personal data in your projects, you are the data controller of that data.

3. Why and on what basis

Purpose	Legal basis
Registration, provision of services, payments, technical support, notifications about the status of services	conclusion and performance of the contract with you
Accounting and tax records, responses to lawful requests from state bodies	performance of the duties imposed on us by law
Protection against abuse and unauthorised access, investigation of incidents, protection of our rights in disputes	our legitimate interest
Service news	your consent, which you can withdraw at any time

We do not use your data for automated decision-making that has legal consequences for you, we do not sell it and we do not share it for advertising.

4. How long we keep data

• Account data and the event log — for as long as the account exists and for three more years after it is deleted: that is the general period within which a claim can be brought to court.
• Payment records and primary accounting documents — for no less than the period established by the tax legislation of Ukraine.
• Support requests — for three years from the day the request is closed.
• Project contents and backups — until you delete the project or until the storage period for an unpaid project defined by the Public Offer expires.

After these periods expire, the data is deleted or anonymised.

5. Who we share data with

• Payment services and banks — to process your payment. They act as independent data controllers under their own rules.
• Operators of the data centres and networks on whose equipment our servers run — only to the extent needed to host the infrastructure.
• Cloudflare, Inc. (USA) — requests to the Site and the Control Panel pass through its network: this protects against attacks and speeds up loading. Cloudflare processes IP addresses and the technical data of requests.
• State bodies — only on a lawful demand and within the limits established by law.

If a recipient of the data is located outside Ukraine, the transfer is made in compliance with Article 29 of the Law of Ukraine “On Personal Data Protection”: to states that ensure adequate protection of personal data, or on other grounds provided for by law, in particular for the performance of the contract with you.

6. How we protect data

• connections to the Site and the Control Panel are encrypted (HTTPS);
• passwords are stored only as irreversible hashes, and project secrets are stored encrypted;
• the projects of different customers are isolated from one another;
• staff access to data is limited to what their work requires, and administrators' actions are recorded in a log;
• two-factor authentication and passkeys are available for signing in — we recommend enabling them.

No method of protection gives an absolute guarantee. If an incident affecting your data occurs, we will notify you and take measures to reduce the consequences.

7. Your rights

Under Article 8 of the Law of Ukraine “On Personal Data Protection”, you have the right:

• to know the sources from which your personal data is collected, where it is located, the purpose of its processing and to whom it is transferred;
• to obtain access to your personal data and an answer as to whether it is being processed;
• to demand that inaccurate data be corrected, or that data be destroyed if it is processed unlawfully or is no longer needed;
• to object to the processing and to withdraw your consent where the processing is based on consent;
• to protection of your data against unlawful processing and against accidental loss or destruction;
• to lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with a court.

You can view and correct most of the data yourself in your Control Panel profile. For other requests, including deletion of your account, write to [LANDING_SUPPORT_EMAIL] from the address stated in the account. We reply within 30 calendar days.

8. Children

The services are not intended for persons under the age of 18. We do not knowingly collect data of such persons; if you believe that a child has given us their data, let us know and we will delete it.

9. Cookies

Cookies and the browser's local storage are covered by a separate Cookie Policy.

10. Changes to the Policy

We may update this Policy. A new version is published on this page with its date; we give notice of material changes at least 10 calendar days in advance, by email or in the Control Panel.

11. Contacts

Data controller

Sole proprietor [LANDING_SELLER_NAME]

Email

[LANDING_SUPPORT_EMAIL]