This Privacy Policy (the "Policy") sets out how the OKAK service, available at okak.club (the "Service"), processes and protects information about its users. It has been drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and other regulations of the Russian Federation.
The Policy covers all data the Service receives about the User while they use the okak.club website, the personal account area at app.okak.club and related client applications.
Before using the Service, the User must read this Policy. Starting to use the Service constitutes the User's consent to the processing of their data as described in this document.
If the User disagrees with any provision of this Policy, they must stop using the Service.
This Policy forms an integral part of the Service's Public Offer.
Personal data — any information relating directly or indirectly to an identified or identifiable individual (the data subject).
Processing of personal data — any operation performed on personal data, including collection, recording, systematisation, accumulation, storage, updating, use, transfer, anonymisation, blocking, deletion and destruction.
User — a legally capable individual aged 18 or over who uses the Service.
Account — the User's data within the Service, accessed using an email address and password.
Data provided by the User during registration and use of the Service:
Data generated automatically while the Service is used:
The Service does not request or process names, passport details, residential addresses, telephone numbers, income information, special categories of personal data or biometric personal data.
Bank card details and other payment credentials are never received by the Service. Payment details are entered on the side of a payment aggregator compliant with the PCI DSS security standard. The Service receives only the fact, amount and status of the payment.
The Service does not keep logs of the websites visited by the User and does not monitor the content of traffic transmitted through the secure connection software.
Data is processed solely for the following purposes:
The Service does not use the content of User messages to train machine learning models and does not pass it to third parties for that purpose.
The Service does not send marketing communications without separate consent and does not share data with third parties for advertising purposes.
Personal data is processed on the following legal grounds:
The Service does not sell User data or share it with third parties for commercial purposes.
Data may be shared only in the following cases and to the minimum extent necessary:
User data is retained for as long as the account exists and the contractual relationship with the Service continues.
Payment records are retained for the period prescribed by the laws of the Russian Federation for documents evidencing transactions.
Server log data is retained for no more than 12 (twelve) months from the date it is generated.
The User may at any time request deletion of their account and associated data by writing to support@okak.club or via the Telegram bot @okak_sup_bot. Such requests are fulfilled within 30 (thirty) calendar days of receipt, except for data whose retention is required by law.
After an account is deleted, the Service may retain anonymised statistical data that does not allow the User to be identified.
The User has the right to:
To exercise these rights, the User sends a request to support@okak.club from the email address used at registration, or via the Telegram bot @okak_sup_bot. Requests are handled within 30 (thirty) calendar days.
The Service uses cookies necessary for the website and personal account area to function: maintaining the authorisation session, protecting against cross-site request forgery, and storing language and interface preferences.
The Service does not use third-party advertising or tracking cookies to profile Users for advertising purposes.
The User may disable cookies in their browser settings; in that case, authorisation and some Service functions may become unavailable.
The Service applies legal, organisational and technical measures to protect data against unlawful or accidental access, alteration, blocking, copying, distribution and destruction.
These measures include: TLS encryption of traffic between the User and the Service, storage of passwords solely as irreversible cryptographic hashes, access control across systems, two-factor authentication for administrative access, logging of administrator actions, regular backups and infrastructure security audits.
Data is stored on the Service's protected servers. Access is granted to a limited number of authorised persons, to the extent required to perform their duties and subject to confidentiality.
The User is responsible for keeping their password and access keys confidential. The Service is not liable for the consequences of the User disclosing them to third parties.
The Service is intended for persons aged 18 and over and does not knowingly collect data from minors. If a minor is found to have registered, their account and associated data will be deleted.
The Service may amend this Policy, including in response to changes in legislation or in the functionality of the Service.
An updated version takes effect once published at okak.club, unless the version itself specifies otherwise. The date of the latest update is stated in each version.
The User is responsible for reviewing the current version of the Policy. Continued use of the Service after a new version is published constitutes agreement to the changes.
Service: OKAK
Website: https://okak.club
For questions about personal data processing, withdrawal of consent and account deletion: support@okak.club
Support Telegram bot: @okak_sup_bot