Personal Data Processing Policy

1. Operator and scope

Operator: ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ "ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ СЕКТОР ГЕЙМС".

2. Purposes and data

• Registration and security: email, account ID, name, locale, time zone, sessions, and security events.
• Profiles and discovery: names, descriptions, location, categories, channels, audience metrics, terms, images, and links.
• Collaboration work: applications, invitations, project terms, messages, files, confirmations, reviews, and complaints.
• Support and moderation: requests, decisions, reasons, actions, and access audit.
• Website operation and first-party analytics: page views, referrer, device type, performance, technical logs, IP address, and an anonymous session identifier where supplied by the infrastructure. Email, names, and profile content are not sent to analytics.

3. Legal grounds and operations

Processing is based on consent, performance of the User Agreement, legal duties, and protection of lawful interests where the data subject’s rights are respected. Operations include collection, storage, use, provision to selected participants, restriction, deletion, and destruction.

4. Public data

Drafts remain private. Profiles and other materials are published only after a separate user action. Consent to public distribution is recorded separately and can be withdrawn by hiding the profile.

5. Providers and location

WeCollab production uses one Russian data plane for authentication, database, files, background processing, backups, and logs containing personal data. All accounts and registration data are initially recorded and stored in Russia. Citizenship information is not requested.

6. Retention

• A deletion request has a cancellable 30-day period and public resources are hidden immediately.
• After 30 days, credentials, sessions, profiles, media, search history, and settings not required for another lawful purpose are erased.
• Completed-project terms, evidence, complaints, decisions, and relevant audit records may be retained for up to 3 years, then erased or irreversibly anonymised.
• Security logs are kept for up to 1 year unless an incident or law requires longer.

7. Rights and security

Users may request access, correction, restriction, erasure, or withdrawal of consent through the Help Center or buynovdocs@gmail.com. Access controls, database RLS, administrator MFA, audit logs, and TLS protect the data.