Legislation checked on: 2026-09-10
This is a translation for convenience. The main version is the Ukrainian one (Політика конфіденційності Seo-Gen CMS). If the texts differ, the Ukrainian version prevails.
This policy is the notice of personal data processing under Art. 12 of the Law of Ukraine "On Personal Data Protection" No. 2297-VI and part of the public offer.
1. Who processes your data
The data controller is individual entrepreneur Hennadii Mitroshyn, RNOKPP 3382317272, address 9a Tulchynska St., apt. 9, Kyiv, 04080, Ukraine. For data questions write to support@seo-gen.com.ua.
2. Who this policy covers
2.1. People who sign up for the Service and work in the admin panel: account owners and their staff. Also anyone who contacts our support.
2.2. Visitors to your websites. For data left by visitors to your websites (form submissions, subscriptions, e-mails), you are the controller and we are the processor (Art. 4 of Law No. 2297-VI). We process it only on your instructions and to provide the service. You publish your own privacy policy for your website visitors.
3. What data we process
| Group | Data |
|---|---|
| Sign-up | name, e-mail, contact phone (no SMS), password (stored only as an irreversible hash), interface language, the version of documents you agreed to and when |
| Login security | two-step login data, trusted devices, IP address, browser, login time, admin panel activity log |
| Payments | plan, payment history, payment method, card token from the payment service; invoice details (company or entrepreneur name, EDRPOU or tax ID, address) — if you filled them in |
| Your website | content, files, settings, visitor data — as processor (clause 2.2) |
| Support | your correspondence with us |
| AI features | the prompts you send to AI |
We do not receive or store the card number, expiry date or CVV. They are handled by the payment service (monobank, WayForPay or PayPal).
4. Why and on what legal basis
| Purpose | Basis (Art. 11(1) of Law No. 2297-VI) |
|---|---|
| Sign-up, account, providing the service, support | performance of a contract — item 3 |
| Payments, receipts, accounting and tax records | contract and legal obligation — items 3 and 5 |
| Security, abuse prevention, login and activity logs | legitimate interest — item 6 |
| Service e-mails (payments, trial, changes of terms, outages) | performance of a contract — item 3 |
| News and marketing e-mails | only with your consent — item 1; you can withdraw it at any time |
We do not sell data, do not build advertising profiles and do not use your data to train AI models.
The only automatic decision we make is restricting access for non-payment, under the Recurring Payment Terms. Contact us and a person will review it.
5. Who we share data with
| Recipient | Purpose | Where data is processed |
|---|---|---|
| monobank (JSC Universal Bank) | card payments | Ukraine |
| WayForPay | card payments | Ukraine |
| PayPal | payments for plans in USD or EUR | outside Ukraine |
| Hosting Ukraine LLC (ТОВ «Хостінг Україна») | hosting the Service and backups | Ukraine (data center in Kyiv) |
| Backblaze, Inc. (Backblaze B2) | storing additional backups — encrypted only | Netherlands (EU) |
| Resend (Plus Five Five, Inc.) | sending e-mails; receiving e-mails sent to support@seo-gen.com.ua and to website mailboxes where the site owner has turned receiving on | USA |
| Amazon Web Services, Inc. (Amazon SES) — engaged by Resend | receiving incoming e-mails (the domain's mail server) | Ireland (EU), region eu-west-1 |
| Anthropic PBC | AI features: texts, assistant | USA |
| kie.ai (NEXUSAI SERVICES LLC) | AI features: image generation | USA |
| Telegram Messenger Inc. | sign-in and notifications via Telegram, if you connected them; support chats in the Telegram bot | outside Ukraine |
| Google LLC | sign-in with a Google account, if you chose this method; Google Sheets tables, document import from Google Drive, Google Places reviews — if the site owner connected them | USA and other countries |
| public authorities | only on a lawful request | Ukraine |
Payment services process card data under their own rules and privacy policies. For payment data they are independent controllers of personal data, not merely processors.
The Service's servers are located in Ukraine (data center in Kyiv). Additional backups are stored encrypted in the Netherlands (EU). E-mails to support@seo-gen.com.ua are first received by Amazon SES in Ireland (EU) on behalf of Resend, and are then stored in the Service's database on a server in Ukraine.
Transfers abroad happen only on the terms of Art. 29 of Law No. 2297-VI.
6. How long we keep data
No longer than needed for the purpose (Art. 6 of Law No. 2297-VI):
| Data | Period |
|---|---|
| Account and website data | while the contract lasts, then 30 days (or another period agreed with you separately) so that you can get an export; then deleted (clause 9.3 of the offer). Data remains in backups until they are overwritten — no longer than 30 days after deletion |
| Payments, receipts, invoices, acts | periods required by tax and accounting law — even after the account is deleted |
| Login and activity logs | 180 days; login and security records (sign-in, password change, two-step login) — 365 days |
| Support correspondence | 3 years — in the Service's database on a server in Ukraine. Resend keeps its own copy of an incoming e-mail under its own rules — 30 days. Messages in the Telegram bot are kept by Telegram (section 5) |
| Log of sent e-mails (to whom, when, subject, whether delivered) | 3 years — in the Service's database (Ukraine) and in backups (on the Service's server; additional copies in Backblaze are encrypted). Resend, which we use to send e-mails, keeps its own sending log under its own rules — 30 days |
7. Your rights
Under Art. 8 of Law No. 2297-VI you can:
- know who processes your data, why, where, and who receives it;
- access your data;
- have inaccurate or unlawfully processed data corrected or deleted;
- object to processing;
- withdraw consent and restrict processing;
- know how automated processing works and be protected from automated decisions with legal effects;
- complain to the Ukrainian Parliament Commissioner for Human Rights or to a court.
Write to support@seo-gen.com.ua. We reply within 30 calendar days (Art. 16 of Law No. 2297-VI).
To delete your account, contact us. We delete website data under clause 9 of the offer and keep payment documents for as long as the law requires.
8. Admin panel cookies
| Name | Purpose | Lifetime |
|---|---|---|
refreshToken | keeps you signed in | 30 days or until you sign out |
accessToken | short session key during automatic sign-in | 15 minutes |
cms_trusted_device | remembers your device after two-step login | 30 days |
These are strictly necessary cookies only. The admin panel has no analytics or advertising cookies; if any are added, only with your separate consent. If you block cookies in your browser, you will not be able to sign in.
9. How we protect data
- HTTPS-only connections;
- passwords stored as irreversible hashes;
- two-step login;
- role-based access in the admin panel;
- daily backups;
- only people who need access for their work have it, and they are bound by confidentiality;
- we notify you of a breach of your website visitors' data within 24 hours.
10. Children
The Service is not intended for people under 18.
11. Changes to this policy
We publish each new version with its date. We e-mail you about material changes in advance.
Legal basis (checked on 2026-09-10)
- Law "On Personal Data Protection" No. 2297-VI — Arts. 4, 6, 8, 11, 12, 16, 29: https://zakon.rada.gov.ua/laws/show/2297-17
- Law "On Electronic Commerce" No. 675-VIII — Art. 7: https://zakon.rada.gov.ua/laws/show/675-19