Website privacy policy

Personal Data Processing Policy

How sole proprietor Vladilena Andreevna Antonova (ecomvision) processes the personal data of visitors and buyers of app.ecomvision.team: when you pay for access to the apps, sign in to a Finances account, use the web version or contact support.

Effective November 8, 2026 · Operator: sole proprietor V. A. Antonova, INN 162701708685, OGRNIP 324169000260648 · Русский

In short. We receive only what we need to sell and grant access: your email address, order details and the payment confirmation. Your card number is never passed to us — you enter it on the payment provider’s page. Data is stored on a server in Russia. No ads, no analytics trackers, no selling of data.

1Operator and scope

The personal data operator is sole proprietor Vladilena Andreevna Antonova (INN 162701708685, OGRNIP 324169000260648), email hello@ecomvision.team, phone +7 960 086-91-77.

This policy covers app.ecomvision.team and all its pages, including the payment and code recovery pages and the Finances web version. What the apps keep on your devices is described in their own policies: Finances, Dela.

The policy follows Russian Federal Law No. 152-FZ “On Personal Data” of July 27, 2006, and is published so that any visitor can read it.

2What data we process

When you pay: your email address, if you provide it, to send you the access code and the receipt; the chosen plan, amount and currency, order number and date, the access code issued and its expiry.
Payment details — card number, expiry date, CVC/CVV — are entered on the payment provider’s page. They are never passed to us and we never store them. From the provider we receive a confirmation: order number, amount, currency and payment status. If the provider also sends a masked card number, the cardholder’s name or the issuing country, we do not store them.
Finances account (if you created one): email address, a password hash (the password itself is not stored), creation and confirmation dates, access details (tier and expiry), hashes of sign-in keys. With sync turned on — budget records encrypted on your device with a key derived from your password: we cannot read them.
Support requests: your email address or Telegram username and whatever you write to us.
Technical data: IP address, date and time of the request, page address and browser details — in the web server logs; the cookies listed in section 9.

We do not process special categories of data (health, beliefs, etc.) or biometrics, and we make no decisions with legal effect based solely on automated processing.

3Purposes and legal grounds

Concluding and performing the public offer agreement: issuing, recovering and renewing the access code, unlocking features in your account, refunds — Art. 6(1)(5) of Law No. 152-FZ.
Legal obligations: cash receipts (Law No. 54-FZ), tax and accounting records — Art. 6(1)(2).
Answering requests: under the agreement, or, where there is none, with the consent you give by sending the request.
Website security: logs and request rate limits protect accounts and access codes from guessing — the operator’s legitimate interest (Art. 6(1)(7)), without prejudice to your rights.

We do not use your data for advertising or send you unsolicited mailings.

4Who receives the data

The payment provider you pay with: Robokassa — cards of Russian banks and other methods; CloudPayments — cards of banks in other countries, when this method is shown on the payment page. The provider receives the order number, amount, purchase description and your email address for the receipt.
Hosting provider JSC Timeweb: the website, database and mail run on its server in Russia, and an intermediary server in the Netherlands serves visitors from other countries (section 5). The provider keeps the hardware running and does not use the data for its own purposes.
Public authorities — only on a request based on law.

No one else: we do not sell data or share it with ad networks.

5Where data is stored; cross-border transfer

The website’s databases are on a server in Russia: personal data of Russian citizens is recorded, organized, accumulated, stored and updated in Russia (Art. 18(5) of Law No. 152-FZ). Backups are also kept in Russia.

Visitors from other countries and behind VPNs are served through an intermediary server of JSC Timeweb in the Netherlands. It keeps only copies of public pages. Requests that sign in, pay, use access codes or sync are passed straight to the server in Russia over an encrypted connection; they are not stored there or written to its logs. It holds no databases.

If you pay with a card issued by a bank in another country, the payment details — the amount, order number and the card data you enter on the provider’s page — are processed by the payment provider, international card networks and your card issuer, including outside Russia. This is required to perform the agreement at your request.

6How long we keep data

Account and sync records — as long as the account exists. Deleting the account in the app (Settings → Account → Delete Account) or in the web version settings erases the email, password, sign-in keys and all sync records.
Order and payment details — for the period tax law sets for accounting documents; then they are deleted or anonymized.
The access code and its expiry — while access lasts and afterwards, so the code can be recovered and renewed by order number. We delete it on request unless the law requires us to keep it.
Support requests — as long as needed to answer and resolve the issue.
Web server logs — for a limited time needed for website security.

7How data is protected

The website works over HTTPS only. Passwords and sign-in keys are stored as cryptographic hashes, not as they are. Sync records are encrypted on your device — the server has no key. Only the operator has access to the server, with key-based sign-in. Database backups are made regularly.

8Your rights

You may find out what data about you is processed and get a copy; ask us to correct, block or delete it; withdraw consent; object to processing; and appeal against the operator to Roskomnadzor (the Russian data protection authority) or a court.

Write to hello@ecomvision.team from the address used for the payment or the account, or give the order number. We reply within 10 working days; if we need more time, the period may be extended by no more than 5 working days, and we will tell you why.

9Cookies and browser storage

The website uses only strictly necessary cookies; payment pages and the account do not work without them:

fin_lang — your page language, up to 1 year;
fin_orders — numbers of your latest orders in this browser, to show the access code again, up to 180 days;
fin_session — account sign-in, up to 120 days or until you sign out.

The Finances web version keeps your budget in your browser’s storage (IndexedDB). There are no analytics, advertising or third-party cookies on the website.

10Children

The website is not intended to collect data from children. If you believe a child has given us their data, contact us and we will delete it.

11Changes to this policy

The current version is always published on this page, with its effective date at the top. We will announce material changes on the website before they take effect. If the Russian and English versions differ, the Russian version prevails.

12Operator contacts

Sole proprietor Vladilena Andreevna Antonova · INN 162701708685 · OGRNIP 324169000260648
Email: hello@ecomvision.team · Phone: +7 960 086-91-77 · Website: app.ecomvision.team