Personal Data Processing Policy

1. General

This policy describes how the Verstak service (the “Service”) processes users’ personal data, including under Russian Federal Law No. 152-FZ “On Personal Data”.

2. Data we process

Email address, name (if provided), data from external sign-in providers (Yandex, VK — account id and email), and technical data required for the Service to work (session cookie).

3. Purposes

Registration and authentication, operating your account, sending transactional emails (verification and recovery codes). No marketing emails without separate consent.

4. Legal basis

Processing is based on the user’s consent recorded at registration (consent checkbox and its timestamp).

5. Storage and security

Data is stored on servers located in Russia. Passwords are stored only as irreversible hashes. Access to data is restricted and protected.

6. Third parties

Data is not sold or shared with third parties except technical contractors that keep the Service running (e.g. email delivery) and cases required by law.

7. Your rights

You may request details about processing, ask us to correct or delete your data, and withdraw consent by contacting support. Withdrawing consent deletes the account.

8. Contact

For personal data questions: support@verstak.pro.