Privacy Policy

The data controller is the individual entrepreneur Hladko O.V., tax number 3109008870, 9 Yablunieva St., Vinnytski Khutory, Vinnytsia district, Vinnytsia region, 23219, Ukraine.

Data questions: [email protected].

Processing is carried out under the Law of Ukraine “On Personal Data Protection” No. 2297-VI and, for people located in the European Union, with regard to the General Data Protection Regulation (GDPR).

Account data: Telegram identifier, name, chosen interface language, role in the company and, optionally, phone number and pay notes.

Operational data entered by the Customer: property names and addresses, access codes and entry instructions, check-in and check-out dates, work tasks, checklists, photo reports, and messages exchanged in work chats.

Payment data: an anonymised payment token, amounts, dates and statuses. Card number, expiry date and CVV are never received or stored — they are entered directly on the acquiring bank’s page.

Technical data: request logs needed to diagnose faults and protect against abuse.

Data is processed to: provide and operate the Service; create and dispatch work tasks; deliver messages to workers; take payment and meet tax obligations; provide support; and protect the Service against unauthorised access.

Legal bases: performance of a contract (the public offer), consent, compliance with legal obligations, and the legitimate interest in keeping the Service secure.

Data is not used for advertising, profiling or automated decisions with legal effect, and is not sold to third parties.

The Customer is responsible for having a legal basis to enter such data and for informing the people concerned.

The following processors are used to run the Service:

Data may also be disclosed to state authorities where Ukrainian law expressly requires it.

The primary data store is located in the European Union (Frankfurt, Germany). Some providers listed in clause 5.1 may process data outside Ukraine and the EU. Such transfers are made under agreements with those providers and taking account of the safeguards they document.

Task photos are deleted automatically 30 days after upload.

Account and operational data is kept for as long as the Service is used and is deleted on the Customer’s request. Where a subscription is cancelled or refunded, operational data (properties, tasks, team data) is deleted automatically 90 days after access ends. Data required for accounting and tax records is kept for the period set by Ukrainian law.

Measures in place include: encryption in transit (TLS) and at rest; separation of access between companies enforced at the database level; and service keys held outside the client application with restricted access.

Under Article 8 of the Law of Ukraine “On Personal Data Protection” you have the right to: know the source and location of your data; be informed of the terms on which access to it is granted; access your data; require its correction or deletion; withdraw consent; and seek protection of your rights from the relevant authorities. Where GDPR applies, you additionally have rights of access, rectification, erasure, restriction, portability and objection.

To exercise these rights, write to [email protected]. We respond within 30 calendar days.

Complaints may be made to the Ukrainian Parliament Commissioner for Human Rights or, for people in the EU, to the relevant supervisory authority.

The str.systems website uses no tracking cookies and sets no advertising or analytics identifiers. The Service itself runs inside Telegram and uses no cookies.

This Policy may be amended. A new version takes effect when published on this page with its version date.