1. Who is responsible for the data
The controller of the personal data of website and cabinet users is the individual entrepreneur Andrii Rudenko (details are given at the beginning of this document). Questions about data: support@unimetrix.online.
For the data of our customers' clients (leads, CRM contacts, inquiries, conversations, subscribers), the controller is our customer, and we process such data on the customer's behalf (Terms of Service, section 5).
2. What data we process
| Source | Data |
|---|---|
| unimetrix.online website | The website does not set cookies and does not use analytics or advertising pixels. The server keeps a technical log: IP address, time, page address, browser. |
| Registration and account | Email, name, position, language, photo (if uploaded), password hash, two-factor authentication status; devices and sessions (IP, browser, sign-in time); your actions in the audit log. |
| Sign-in with Google | Google account email address, name and ID. |
| Linking Telegram | Telegram ID, username and name; messages and commands you send to the service's bot. |
| Payments | Amount, currency, method, PayPal transaction ID or USDT address and transaction hash. We do not receive or store card details — they are processed by PayPal. |
| Support requests | The correspondence and whatever you tell us in it. |
Data from connected services (you connect them yourself; we store this data only for your workspace):
| Service | What we receive |
|---|---|
| Meta (Facebook, Instagram) | Ad accounts, campaigns, ad sets, ads and their statistics; Pages you manage; the Instagram account linked to a Page; pixels and audiences; leads from Instant Forms; Instagram posts, statistics and comments; Instagram Direct messages — only if you have turned on conversations. |
| Google Ads accounts, campaigns, statistics and search terms; Google Drive files that you choose yourself for uploading creatives. | |
| TikTok | Account, videos, their statistics and comments. |
| Telegram | Channels where the service's bot is an administrator: joins and leaves (we store a hash of the “channel + Telegram ID” pair, not the ID itself), invite links, posts; channel statistics through the Telegram account you connect (its session key is stored encrypted and used only to read statistics). Inquiries to your manager via Telegram Business: the sender's Telegram ID, name and username, the time and the link they came through. Conversation texts — only if you have turned on conversations in the cabinet. |
| Kommo | Deals, stages, amounts and related contacts — read-only. |
| Unimetrix CRM and landing pages | Contacts, leads, deals, tasks and companies that you add or that come from the forms on your pages (with the visitor's consent); page views. |
3. Why and on what legal basis
- to provide the service under the contract (Terms of Service): sign-in, reports, ad management, CRM, summaries and notifications;
- security and abuse prevention, the activity log, fixing errors — legitimate interest;
- billing, accounting and taxes — legal obligation;
- emails about the operation of the service (sign-in, payments, alerts) — under the contract. We do not send marketing emails; if we start, it will be only with your consent and with the option to unsubscribe.
4. Meta Platform data
When you connect Meta, you give the service an access token; it is stored encrypted. We use Meta data (see the table) only for the features of your workspace: reports, campaign management, Instagram, CRM. We do not sell it, do not use it for our own advertising and do not share it with other customers. You can disconnect Meta at any time — the access token is deleted immediately; the collected reporting history is kept so that everything is restored if you reconnect, and it is deleted at your request (see Data Deletion).
5. Google user data
Unimetrix's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only for features that are visible to you, we do not transfer it to third parties (except where this is necessary for these features to work, where required by law, or in the event of a sale of the business, with notice to you), and we do not use it for advertising.
6. Conversations with clients
If you have turned on conversations (Telegram Business, Instagram Direct), the service stores the texts of the messages of your manager and the client in order to show them in the cabinet and send replies. The texts are stored encrypted, are not written to logs and are deleted after 12 months; a message deleted by the client is erased immediately. We do not store attachments — only a label (“Photo”, “Voice message”).
7. Who we share data with
Only with those without whom the service cannot work, and only to the extent necessary:
- Contabo GmbH (Germany) — server and data storage;
- PayPal — payment processing; cryptocurrencyapi.net — processing of USDT payments;
- Cloudflare — DNS for the domain (website traffic does not pass through Cloudflare);
- Meta, Google, TikTok, Telegram, Kommo — at your command, when you connect them and work with them;
- AI providers — only if AI features are enabled in your plan (currently turned off);
- public authorities — only upon a lawful request.
We do not sell personal data.
8. International transfers
Data is stored on a server in Germany (EU). Some providers (PayPal, Meta, Google, TikTok) are located in other countries, including the USA; transfers take place under their data protection agreements.
9. How long we keep data
- account — while it exists; after a deletion request — 14 days (signing in during this period cancels the deletion), after which the account and your workspaces with their files are deleted;
- platform access tokens — until the platform is disconnected, then deleted immediately;
- platform and CRM data — while the workspace exists or until you delete it;
- conversations — 12 months;
- audit log — 2 years;
- backups — up to 90 days (daily backups — 30 days, weekly backups — 90 days), so deleted data disappears from backups permanently within 90 days;
- payment records — as long as required by the tax legislation of Georgia.
10. How we protect data
HTTPS; access tokens and conversation texts are stored encrypted; passwords are stored only as hashes; two-factor authentication; roles and permissions in the workspace; a log of changes and sign-ins; encrypted backups.
11. Your rights
You can find out what data we hold about you, get a copy (Settings → Profile → My data → “Download my data”), correct it, delete it (same place → “Delete account”), restrict or object to its processing, and withdraw your consent. Email support@unimetrix.online from your account email — we will reply within the time limit set by law.
You can lodge a complaint with the Personal Data Protection Service of Georgia (personaldata.ge) or with the supervisory authority of your country.
If your data was passed to us by one of our customers (you wrote to their channel or submitted a request on their page), please contact that customer — we will help them fulfil your request.
12. Children
The service is not intended for persons under 18 years of age.
13. Cookies
See the Cookie Policy.
14. Changes
A new version is published here with its date; we notify you of material changes in the cabinet or by email.