Privacy Policy
What data the uspacy.ibiz.com.ua website and iBusiness apps for Uspacy collect, why, where it is stored and how to delete it.
1. Who we are
iBusiness (ibiz.com.ua) develops apps and integrations for the Uspacy CRM. We are the controller of the personal data collected by this website, and we process the data passed to us by installed apps. For any questions about your data, email vbakay@ibiz.com.ua.
Personal data controller: sole proprietor (FOP) Volodymyr Liubomyrovych Bakai, ID code 3220504992.
We process data in accordance with the Law of Ukraine “On Personal Data Protection” and, for users in the EU, also in accordance with the General Data Protection Regulation (GDPR).
2. The uspacy.ibiz.com.ua website
Request form
When you submit a request, we receive your name, email and/or phone number, the message text, the request type, the address of the page the form was sent from, and the UTM tags of the advertising visit (if any). From this data, a request (lead) is created in our Uspacy CRM (ibusiness.uspacy.ua) so that we can reply and prepare an offer. The legal basis is your consent, which you give by submitting the form.
App announcement subscription
On the pages of apps in development, you can leave your email, name and the address of your Uspacy workspace (optional). This data also goes to our CRM as a request — so that we can tell you about the release and, if you specified a workspace, invite you to testing. The website itself does not store this data.
Cookies
The website does not use analytics or advertising trackers. If you arrived via a link with UTM tags, they are stored in a cookie in your browser for 90 days and added to your request when you submit it — this is how we understand where the request came from. The website sets no other cookies.
Third-party services on the pages
- Website chat — the Uspacy widget. Messages and contact details you leave in it go to our Uspacy CRM; the widget may store data in your browser to continue the conversation.
- Google Fonts — your browser loads them from Google's servers, so Google receives your IP address.
- Website hosting keeps technical web server logs (IP address, time and address of the request) for security and diagnostics.
3. Apps for Uspacy (SMS Club and others)
The apps run in your Uspacy workspace, and their server side runs on our server billing-api.ibiz.com.ua (Hetzner data center, Germany).
During installation
- Uspacy passes us the address of your workspace and an access token for it (with the rights of the person who installed the app). The token is needed for the app to work with your workspace's CRM: read phone numbers and card fields, add notes to the activity feed.
- We create a record of your workspace (company) and the app license in our CRM, as well as contacts of the workspace's employees — name, email, phone number and position from the Uspacy profile. This is needed for support, license notifications and communication about the apps.
- A service chat “iBusiness — Техпідтримка” (iBusiness — Support) appears in the workspace. Messages in it are forwarded to our CRM so that we can reply.
SMS Club
- The SMS Club API token is stored on our server in encrypted form and is never shown in the browser.
- Sent SMS: recipient number, text, sender name, delivery status, who sent it and from which card. This is needed for the history, delivery statuses and the note in the card's activity feed. We do not separately store the CRM data substituted into templates — only the final SMS text.
- Settings: SMS templates, selected sender names, low balance threshold, person responsible.
- We pass the SMS number and text to SMS Club (smsclub.mobi), which sends the message from your account. SMS Club processes this data under its own privacy policy.
Request log
For support and incident investigation, we log the apps' requests to our server and our requests to Uspacy and SMS Club together with the responses: time, address, status, user, IP address, request and response body. Tokens, passwords and keys in the log are replaced with “***”. The log is kept for 12 months and then deleted automatically. The workspace administrator can see the log for their workspace in the app settings.
4. Who we share data with
- Uspacy — the platform our CRM and your apps run on.
- SMS Club — only for sending SMS from your account.
- Hetzner Online GmbH (Germany) — the app server; hosting provider — the website.
- Google — fonts on the website and Uspacy file storage for images.
We do not sell data or use it for advertising. We provide data to public authorities only in cases provided for by law.
5. How long we keep data
- Requests and contacts in the CRM — while our cooperation continues or until you ask us to delete them.
- App data (settings, SMS history) — while the app is installed in your workspace. After the app is removed, we will delete it on your request.
- Request log — 12 months.
- License and payment data — as long as accounting legislation requires.
6. Security
Connections to the website and the app server are encrypted (HTTPS). Access tokens are stored only on the server, SMS Club API tokens — in encrypted form. Only iBusiness staff who need it for their work have access to the server and the CRM. App requests are verified by the Uspacy signature, so one workspace's data is not accessible to another.
7. Your rights
You can find out what data of yours we process, get a copy of it, correct or delete it, restrict processing or withdraw your consent. You can remove an app at any time in the Uspacy Marketplace. To exercise your rights, email vbakay@ibiz.com.ua — we will reply within 30 days. You can also contact the Ukrainian Parliament Commissioner for Human Rights.
8. Changes
If we change this policy, the new version will appear on this page with a new date. We will notify app users of significant changes in the “iBusiness — Техпідтримка” service chat.