Privacy policy

Who is responsible

The data controller for this website is Oleh, individual entrepreneur (FOP), Ukraine. Full registration details are available on request. In this policy, “we”, “us” and “our” mean oleh.cloud and the data controller named above.

For any privacy question, use the contact form or message us directly: hello [at] oleh.store

What we collect through the forms

When you send the audit form or the contact and call-back form, we receive what you enter. The audit form sends your name, email address, store URL and, if you add one, a message. The contact and call-back form sends your name, email address and message and, if you provide them, a phone or WhatsApp number, store URL and Magento version.

Along with it, the form sends the page you sent it from, the site language and, if you arrived through a campaign link, its campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content).

We use this data only to answer your request: to prepare the audit, call you back, reply or send a quote. The legal basis is steps taken at your request before a contract (Art. 6(1)(b) GDPR) and, for spam protection, our legitimate interest (Art. 6(1)(f) GDPR).

Where form data goes

Form submissions go to an n8n workflow on our own server at n8n.oleh.cloud, which stores the request and sends us a notification through Telegram with its details. Telegram is a messaging service operated outside the EU.

If you write to us on WhatsApp, the conversation is processed by WhatsApp (Meta). Email replies to your requests are sent from our mailbox hello@oleh.store, hosted by Hostinger (Hostinger Email).

The chat assistant

The AI assistant on this site answers questions about our services. When you write to it, your messages, its answers, the page you are on, the site language and any campaign parameters are sent to the n8n workflow on our server (n8n.oleh.cloud). To generate answers, the conversation is sent to OpenAI, which processes it on our behalf under a data processing agreement; processing currently takes place in the USA under the EU Standard Contractual Clauses. OpenAI does not use this data to train its models and keeps it for up to 30 days for abuse monitoring.

Conversations are stored on our server and deleted 90 days after the last message. If you ask the assistant to pass your request to us, it saves your name, email and the details you give, with a short summary, as a request (as with the forms above) and notifies us through Telegram.

The chat sets no cookies: a random session ID kept in your browser tab (sessionStorage) links your messages and is gone when you close the tab. Please do not share passwords or other secrets in the chat.

Legal basis: steps at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering questions about our services (Art. 6(1)(f) GDPR).

How long we keep it

Requests are kept as long as needed to handle them and any project that follows, and deleted on request. Invoices and contract records are kept as long as tax law requires.

Server logs

The web server records standard technical data for every request (IP address, time, requested page, browser) to keep the site secure and running. These logs are kept for a short period and not used to identify visitors.

Fonts and third parties

Fonts, scripts and images are served from this website itself. The only third-party service the site can load is Google Analytics, described below.

Cookies and analytics

This website currently uses no analytics and sets no cookies.

Your rights

Under the GDPR you can request access to your data, its correction or deletion, restrict or object to processing, and receive your data in a portable format. Contact us through the contact form, by email at hello@oleh.store or on WhatsApp, as described above. You can also lodge a complaint with the data protection authority in your country.

Changes

When the way this site handles data changes, this page is updated and the date above changes with it.