Privacy Policy

1. General

This Privacy Policy explains what personal data IT Comanda (“we”, the “Controller”) collects and processes when you use the Billing client area (the “Client Area”), why we do it, how long we keep it and what rights you have.

We process personal data in accordance with the Law of Ukraine “On Personal Data Protection” and, for clients from the European Union, the EU General Data Protection Regulation (GDPR).

2. Data we collect

• Account data: first and last name, email, phone number, password (stored only as a hash).
• Client profile data: for individuals — address and tax details where needed for invoices; for companies and sole proprietors — company name, registration / tax number, legal address, bank details, name and position of the director.
• Services and payments: ordered services, plans, add-ons, invoices, payment history. We never receive or store payment card data — it is handled by the payment provider (monobank).
• Support requests: ticket messages, attachments and correspondence.
• Technical data: IP address, browser type, sign-in date and time, Client Area activity logs — for security and incident investigation.

3. Purposes

• registration and authentication in the Client Area;
• providing, configuring and renewing services;
• invoicing, accepting payments, accounting and tax records;
• technical support and notices about service status, invoices and changes to terms;
• protecting the Client Area against unauthorized access and abuse.

We do not use your data for advertising and do not sell it to third parties.

4. Legal bases

• performance of the service agreement you are a party to;
• compliance with legal obligations (accounting and tax);
• our legitimate interest in keeping the Client Area secure and preventing fraud;
• your consent, where it is required.

5. Sharing with third parties

We share data only to the extent needed to provide the services:

• the payment provider — to process payments;
• data centers and infrastructure providers — to deploy and run the services you order;
• the DNS provider (Cloudflare) — if you use DNS hosting;
• public authorities — only on the grounds and in the manner prescribed by law.

6. Retention

Account and service data is kept while your account is active. Invoices and payment documents are kept for the periods required by accounting law. Technical logs are kept no longer than needed for security. After that, data is deleted or anonymized.

7. Your rights

You have the right to:

• know what data we process about you and get a copy of it;
• correct inaccurate data — most of it can be edited in your profile;
• request erasure or restriction of processing where this does not conflict with law or contract;
• object to processing and withdraw consent;
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or your local data protection authority.

8. Security

We transfer data only over encrypted connections (HTTPS), store passwords as hashes, limit staff access to data and keep activity logs. No method of transfer or storage is perfectly secure, so please use a strong password and do not share it.

9. Cookies

Cookies are small text files your browser stores on your device. The Client Area uses only strictly necessary cookies required to sign in and work securely. We do not use advertising, analytics or tracking cookies, so no separate consent is needed.

You can delete or block cookies in your browser settings. If you block the necessary cookies, you will not be able to sign in to the Client Area.

10. Changes to this policy

We may update this Policy. The date of the latest revision is shown at the top of the page. We will notify you of material changes by email or in the Client Area.

11. Contact

For any questions about personal data, contact:

• IT Comanda
• The support section of the Client Area.