Privacy Policy

Overview

General Provisions

This Privacy Policy defines how Arbtx (arbtx.pro) collects, stores, and uses personal data of its users. By using the service, creating an account, or continuing to browse the website, you confirm that you have read this Policy and agree to its terms. This Policy is developed in accordance with EU Regulation 2016/679 (GDPR) and applies to all users regardless of their location.

Data Controller

The data controller is the Arbtx service, available at arbtx.pro. For all data protection inquiries, contact us at support@arbtx.pro.

Data Collection and Processing

Data We Collect

• Registration data: username, email address, password (stored exclusively as a cryptographic hash; the original value is inaccessible to anyone).
• Technical data: IP address, browser User-Agent, session identifiers, last activity timestamp.
• Consent-based data: Telegram ID — provided voluntarily by the user.
• Payment data: not collected or stored directly. Payment transactions are processed by an independent payment gateway in accordance with its own privacy policy.

Legal Basis for Processing

• Performance of contract (Art. 6(1)(b)) — account management and provision of access to the service.
• Legitimate interests (Art. 6(1)(f)) — security assurance and protection against abuse.
• Consent (Art. 6(1)(a)) — processing of data voluntarily provided by the user.
• Legal obligation (Art. 6(1)(c)) — responding to lawful requests from competent authorities.

Purposes of Processing

Data — Purpose — Legal Basis:

• Username, email — user identification and access management — performance of contract.
• Email — account-related communications — performance of contract.
• IP address, User-Agent — security assurance — legitimate interests.
• Session identifiers — authentication — performance of contract.
• Telegram ID — processing based on consent — consent.

Cookies

The service uses cookies to maintain sessions and store user preferences. Cookies do not contain confidential information and are not shared with third parties for commercial purposes. Disabling cookies in your browser settings may restrict access to certain sections of the service.

Data Transfer and Security

Third Parties

• Google reCAPTCHA — protection against automated access. Processes IP address and browser data in accordance with Google's Privacy Policy.
• Mail.ru — delivery of emails to users. Receives the recipient's email address.
• Cloudflare — network infrastructure. Processes IP addresses in accordance with its own privacy policy.
• MaxMind — geographic location determination based on IP address.
• Payment gateway — processing of payment transactions. The provider and link to its policy will be specified upon activation.

We do not sell or transfer personal data to third parties for commercial purposes.

International Data Transfers

Some third parties (Google, Cloudflare) are registered in the United States. Data transfer is carried out on the basis of EU Standard Contractual Clauses (SCC) or other mechanisms provided by GDPR. By using the service, you agree that your data may be processed in countries other than your country of residence.

Data Retention

• Account data — until a deletion request is received.
• Session data — 30 days from the last activity.
• Security logs — 90 days.
• Consent-based data — until consent is withdrawn or the account is deleted.

Upon expiry, data is destroyed or irreversibly anonymized.

Data Security

We apply encryption of transmitted data (HTTPS/TLS), storage of passwords as irreversible cryptographic hashes, restricted database access, and regular security monitoring. In the event of a security incident affecting your data, we will notify you within a reasonable time.

Your Rights and Contact

Your Rights

• Access (Art. 15) — obtain information about processed data and a copy thereof.
• Rectification (Art. 16) — request correction of inaccurate data.
• Erasure (Art. 17) — request deletion of data.
• Restriction of processing (Art. 18) — restrict processing under certain conditions.
• Portability (Art. 20) — receive data in a machine-readable format.
• Objection (Art. 21) — object to processing based on legitimate interests.
• Withdrawal of consent (Art. 7(3)) — withdraw previously given consent at any time.

Exercising Your Rights

Send a request to support@arbtx.pro with the subject "Personal Data". We will review it within 30 days. In exceptional cases, the period may be extended to 60 days with notification of the reasons. We may request identity verification before processing the request.

Complaints

If you believe that the processing of your data violates applicable law, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence. For EU users: a list of national supervisory authorities is available at edpb.europa.eu.

Policy Changes

We reserve the right to amend this Policy. In case of material changes, users will be notified through the service interface or by email at least 7 days before the changes take effect. Continued use of the service constitutes acceptance of the updated Policy.

Contact

For all questions related to the processing of personal data, contact us at support@arbtx.pro.