Privacy Policy

1. Who we are and how to contact us

The data controller is ProLeadly, an independent development and automation studio (Armenia). We process data of clients, website visitors and project participants.

For any data question, including access, correction or deletion requests, email [email protected]. Studio address: 246 Abovyan St, Gyumri, Armenia. We reply within 30 calendar days.

Other ways to reach us are on the contact page.

2. What data we collect

Data you provide

Through website forms, email and messengers you may provide:

• Name and company name
• Email, phone or messenger for contact
• Task description, brief, requirements and project materials
• Access details and technical data needed for the work, as agreed
• Correspondence with us

Payment data

Crypto payments are processed by the blockchain network; invoice payments are processed by the bank. We receive the payment status, amount, currency and payer contact. We do not receive, store or process card details.

Technical data

When you visit the site, we automatically collect IP address, browser and device type, pages viewed, visit time, referral source and technical logs. Analytics is anonymised and is not used for advertising profiles.

Data within services

If we build or support a bot, we process the client's customer messages and contacts on the client's behalf and instructions. If you order a digital-footprint report, we process your name, email and the data you ask us to check.

3. Why we use data

We process data to:

• Enter into and perform a contract: design, build, configure and hand over a project
• Respond to your request and run the project and support
• Issue invoices, receive payments and make refunds
• Keep the website and services secure and prevent abuse
• Improve the website and services using anonymised statistics
• Comply with the law and respond to requests from authorities

Legal bases are performance of a contract, your request before a contract, consent (for example, for analytics or a published case study), legitimate interest (security and service development) and legal obligations.

4. Digital-cleanup reports

We work only with the data owner and only with public sources. Before the check starts, you confirm ownership of the email with a code.

• We check only what you allow: name, email, phone, nicknames, domains
• We do not look up other people's data — no partner, employee or debtor checks. We decline such orders and refund the payment
• We do not try to access private accounts or bypass service protection
• We send the report only to the confirmed email
• We keep report materials for 30 days after delivery, then delete them
• We do not publish cases or findings without written consent
• We do not sell or share data with third parties beyond the technical providers listed in section 6

If the report contains no findings, we refund 100% under the Refund Policy.

5. AI and automated processing

We use AI tools for code drafts, texts and internal tasks. Only the data needed for the task is shared with those tools; we do not use client data to train public models.

Bots we build may answer the client's customers automatically. The client is responsible for the scenarios, the lawfulness of messages and notices to their customers.

6. Who we share data with

We do not sell personal data. Access is limited to providers without whom the service cannot be delivered:

• Hosting and cloud infrastructure
• Payment providers: banks, blockchain network
• Email and communication providers
• Anonymised website analytics (Umami)
• AI model providers, limited to a specific task
• Monitoring and backup services

Each provider gets the minimum access and must protect the data. We may disclose data where required by law or a court request.

Some providers may process data outside Armenia. In such cases we rely on contractual data-protection safeguards.

7. How long we keep data

• Project data and correspondence: during the work and 12 months after completion, unless agreed otherwise
• Accounting and payment documents: for the period required by law
• Digital-cleanup report materials: 30 days after delivery
• Technical logs and anonymised analytics: up to 12 months
• Requests where work never started: up to 6 months

After the period ends, we delete or anonymise the data. Deletion on request is described in section 9.

8. Security

We use encryption in transit (HTTPS/TLS), access control, least privilege, backups and logging. Only people who need production access for their work have it.

No internet service can guarantee absolute security. If an incident affects your data, we will notify you as required by law.

9. Your rights

You have the right to:

• Know what data of yours we process
• Correct inaccurate data
• Delete data where there is no lawful basis to keep it
• Restrict or object to processing
• Receive your data in a machine-readable format
• Withdraw consent, without affecting actions already taken

Email [email protected] and we will reply within 30 calendar days. If you believe we broke the law, you can contact the authorised data-protection body of Armenia.

10. Cookies and analytics

The site uses strictly necessary cookies and anonymised visit analytics. We do not set advertising cookies or sell data to ad networks.

You can disable cookies in your browser; some site features may work differently.

11. Children

Our services are not intended for people under 18. We provide digital-footprint reports only to adults. If we learn that we received a child's data without a guardian's consent, we delete it.

12. Changes to this policy

We may update this policy. The new version is published on this page with its date. If changes are material, we notify clients by email or in the project.

13. Contact

Questions about personal data: use the contact page or email [email protected].