Privacy Policy

This policy explains what personal data we collect when you use ruta.company, why we collect it, who sees it and what rights you have. We keep it short because we collect very little.

1. Who we are

The website ruta.company is operated by Ruta ("we", "us"), a sole proprietorship registered in Ukraine. We are the controller of the personal data described below. Our legal details are given at the end of this policy.

You can reach us at [email protected] for any question about this policy or your data.

The Kommo widgets we publish have their own privacy policies. For example, see the Text wrapping by Ruta privacy policy. This policy covers the website only.

2. What we collect and why

Contact form. When you send us a message, we receive your name, email address, the subject you chose, the language of the page and the message itself. We use them only to read and answer your request.

Telegram. If you write to us through our Telegram bot or chat, we receive what you send there: your message, your Telegram username and name, and anything else you choose to share. Telegram handles this data under its own privacy policy.

Email. If you email us, we receive your address and the content of your message. Mail sent to our address is received by Cloudflare Email Routing and forwarded to our Gmail inbox.

Technical data. Our hosting provider, Cloudflare, processes your IP address, browser and device type, the pages you request and the time of the request. This is needed to deliver the website, keep it secure and block abuse. We do not use it to profile you.

Purchases. When you buy a widget, we receive the Kommo account the licence is for, the order details and a confirmation from the payment service that the payment went through. If you write to us about an order, we also receive your email address. You enter your card details on the payment page of LiqPay, the payment service of PrivatBank, so we never see or store them. We use this data to activate your licence, to answer questions about your order and to keep the records the law requires.

Fonts. The site loads its typefaces from Google Fonts, so your browser sends your IP address and browser details to Google when a page loads.

We do not run analytics, advertising or tracking tools, and we do not sell personal data.

3. Our legal bases

Answering your message is necessary to take steps at your request before a possible agreement, and is in our legitimate interest in running our business. If you wrote to us through a form or chat, we treat sending it as your request to be contacted.
Running and securing the website (hosting logs, fonts) is our legitimate interest.
Performing our agreement with you is the basis for processing the data of a purchase: we need it to activate and support your licence.
Legal obligations, such as keeping the accounting and tax records the law requires, apply when you buy from us.

4. Who receives your data

We share data only with the providers needed to run the site and answer you:

Cloudflare hosts the website and forwards email sent to our address.
LiqPay (PrivatBank) processes your payment when you buy a widget, under its own privacy policy.
Telegram delivers your contact-form messages to our team and carries chats you start with us.
Google serves the website fonts and, through Gmail, stores the emails you send us.

These providers act on our behalf or under their own policies, and may only use the data for those purposes. We may also disclose data if a court or authority legally requires it. We never share your data for marketing.

5. Transfers outside your country

We are based in Ukraine, and our providers operate worldwide. Your data may therefore be processed in countries other than your own, including outside the European Economic Area and Brazil. Where the law requires it, we rely on safeguards such as the standard contractual clauses our providers offer.

6. How long we keep it

Messages from the contact form, Telegram or email: up to 3 years after our last contact with you, or until you ask us to delete them.
Records we must keep by law (for example, accounting records for a purchase): for the period the law requires.
Technical logs: for the period set by Cloudflare under its own retention policy.

7. Your rights

Depending on where you live, you may have the right to:

ask for a copy of the data we hold about you;
have inaccurate data corrected;
have your data deleted;
restrict or object to our processing;
receive your data in a portable format;
withdraw consent you have given, at any time.

To use any of these rights, write to [email protected]. We may ask you to confirm your identity first, and we aim to answer within 30 days.

If you believe we handle your data unlawfully, you can complain to your local data protection authority. In Ukraine, that is the Ukrainian Parliament Commissioner for Human Rights. In the EU, you can contact the authority in your country, and in Brazil, the ANPD.

8. Security

The site is served over HTTPS. Access to messages sent to us is limited to the people who answer them. No system is perfectly secure, so please do not send passwords, payment card numbers or other sensitive details through the contact form or chat.

9. Children

The website is for businesses and professionals. It is not directed at children under 16, and we do not knowingly collect their data.

10. Changes to this policy

When we change this policy, we update the date at the top of the page. If a change is significant, we will say so on the website.

11. Contact

Ruta, a sole proprietorship registered in Ukraine
Email: [email protected]