PRIVACY AND PERSONAL DATA PROCESSING POLICY

This Privacy Policy explains how the ClientSync service (hereinafter referred to as "We", "Service") collects, uses, stores, and protects the personal data of users (Masters and their Clients). We respect your privacy and comply with the Law of Ukraine "On Personal Data Protection" and the EU General Data Protection Regulation (GDPR).

1. WHO PROCESSES YOUR DATA

The Data Controller is FOP Kodintsev Andrii Oleksandrovych (Tax ID: 3206504496, address: Ukraine, 67300, Odesa region, Berezivka district, Berezivka city, Oleksіja Vadaturs'kogo street, building 3). For data protection inquiries, contact: support@clientsync.me.

2. WHAT DATA WE COLLECT

• 2.1. Master Data: Telegram ID, name/nickname, phone number (if provided), work schedule, list of services.
• 2.2. Master's Client Data: Telegram ID, name, phone number, booking history with a specific Master.
• 2.3. Transaction data: payment amount, payment status, date and time of the transaction, transaction identifier (invoice_id).
• 2.4. Analytical data: anonymized information about the use of the Service (e.g., page views, payment button clicks, device type, IP address) to improve the platform's performance.
• 2.5. Blacklist Data: phone numbers of clients blocked by Masters are stored to prevent unwanted bookings and protect the Master's schedule from spam.

*Note: We act as a "Data Processor" regarding client data. The Master is the "Data Controller" of their client database.

3. PURPOSE OF DATA COLLECTION

• Provide access to the Service functions (creating bookings, managing the calendar).
• Send automatic service notifications (visit reminders, booking confirmations) via the Telegram bot.
• Provide technical support and analyze Service efficiency.

4. DATA TRANSFER TO THIRD PARTIES

We never sell or share your personal data with third parties for marketing purposes. Client data is accessible only to the Master with whom the client has booked. Data may be transferred only to hosting providers (servers) that ensure the operation of the Service and to analytical services (e.g., Google Analytics) under terms of strict confidentiality and exclusively in an anonymized format.

5. DATA PROTECTION AND STORAGE

Data is stored on secure servers. We use modern encryption methods (HTTPS) to protect data during transmission.

We do not collect or store your bank card details. Payment processing is carried out by a certified partner (JSC "UNIVERSAL BANK", mono) that complies with the PCI DSS security standard. We receive only an anonymized "token" for conducting recurring payments.

6. USER RIGHTS (INCLUDING GDPR)

• Access your data.
• Request the correction of inaccurate data.
• Request the deletion of your data (the "right to be forgotten"). To do this, contact support@clientsync.me.
• Restrict processing or withdraw consent.

7. CHILDREN AND AGE RESTRICTIONS

The Service is not intended for independent use by individuals under 18 without parental consent. We do not knowingly collect children's data.

8. COOKIES AND ANALYTICS

We use cookies and local storage (LocalStorage) to ensure the technical operation of the web interface (Master authorization, saving language settings).

The Service also uses web analytics tools, such as Google Analytics 4, to collect anonymized information about how users interact with the site and the application (including tracking e-commerce events like subscription purchases). This information helps us improve the product. You can prevent Google Analytics from collecting your data by using appropriate browser settings or specific developer add-ons.

9. CHANGES TO THE POLICY

We reserve the right to make changes to this Policy. The current version is always available on the website. Continued use of the Service after changes are made constitutes acceptance of the new version.