This Policy explains what personal data the Proboot service (the proboot.app website and the Proboot ERP system) collects, why, who it is shared with and what rights you have. It has been drawn up in accordance with the Law of Ukraine "On Personal Data Protection" No. 2297-VI.
1. Who processes the data
The owner of personal data is the Proboot service (proboot.app), hereinafter "we". For any questions about personal data, write to support@proboot.app.
2. What data we collect
Beta testing application (the form on the website):
- name, required;
- phone number, required;
- comment, optional (you decide what to write in it, for example the name of your business).
Technical data your browser sends automatically: IP address, browser type (User-Agent), date and time of the request.
Website visit data, only if you have agreed to analytics cookies: which pages you viewed, where you came from, device and browser type, approximate location (country, city). Google Analytics collects it. It contains no name or phone number.
Proboot ERP users (once access is granted):
- account data: name, login, email or phone, password in encrypted (hashed) form, role and access rights;
- if you sign in with Google: name, email and Google account ID;
- the activity log in the system (who changed what and when) for security and troubleshooting.
Data your business enters into the system (employees, customers, parcel recipients) is processed on your business's instructions, see section 8.
3. Why we process data
| Purpose | What data | Legal basis |
|---|---|---|
| Review your application and contact you about beta testing | name, phone, comment | your consent, given by sending the application |
| Protect the form from spam and attacks | IP address, User-Agent | the website's legitimate interest |
| Understand which pages are useful and improve the site | visit data | your consent in the cookie banner |
| Provide access to Proboot ERP and keep it running | account data, activity log | entering into and performing a contract |
| Answer your support request | email, message content | your consent or performance of a contract |
We do not use your data for advertising, do not sell it and make no automated decisions about you that have legal effects.
4. Who data is shared with
- Telegram. When a new application arrives, the applicant's name and phone are sent to our internal Telegram chat so we can reply quickly. Telegram's servers are located outside Ukraine.
- Hosting provider. The website and the system run on a rented server. The provider technically stores the data but has no right to use it.
- Cloudflare. Cloudflare Turnstile protects the application form from bots: it receives technical data about your browser, but not your name or phone.
- Google. Google Analytics receives visit data only if you have agreed to analytics cookies. Sign-in with Google works only if you chose it yourself. Google's servers are located outside Ukraine.
- Public authorities, only where the law expressly requires it.
We do not share data with anyone else.
5. How long data is kept
- Applications: until the end of selection and beta testing, but no longer than 12 months from submission. Applications not selected are deleted once selection ends.
- Server technical logs: up to 30 days.
- Visit data in Google Analytics: up to 14 months.
- Account data: while access to the system is active and for 30 days after it ends, then deleted.
6. How we protect data
Connections to the site are encrypted (HTTPS), passwords are stored only in hashed form, only authorised people have access to the server and database, and backups are made regularly.
7. Your rights
Under Article 8 of the Law of Ukraine "On Personal Data Protection" you have the right to:
- know who processes which of your data, for what purpose, and who it is shared with;
- access your data;
- demand that inaccurate data be corrected or deleted;
- object to the processing of your data;
- withdraw your consent to processing;
- know how automated processing works and be protected from automated decisions with legal effects;
- file a complaint with the Ukrainian Parliament Commissioner for Human Rights or with a court.
To exercise a right, write to support@proboot.app. We will reply within 30 calendar days. You can withdraw consent to analytics cookies at any time via the "Cookie settings" link at the bottom of the page.
8. Data that businesses enter into Proboot ERP
When a business enters data about its employees, customers or parcel recipients into the system, the business itself is the owner of that data, and Proboot is the processor that handles it only on the business's instructions and only to run the system. For such data, contact your business first.
9. Cookies
Cookies and similar technologies are covered in the Cookie policy.
10. Changes to this Policy
We will announce significant changes on this page, and notify system users in the system itself or by email. The date of the current version is shown at the top of the page.