Privacy Policy
Version 2026-10-21, effective 2026-10-21
This policy explains how PE Klimovych Anastasiia, an individual entrepreneur (ФОП) registered in Ukraine, taxpayer number (RNOKPP) 3478811607, 18 Myru St., Vodychky village, Khmelnytskyi district, Khmelnytska region, 31334, Ukraine (Adminka, we) processes personal data in connection with the site connect.adminka.pro (the Site) and the Adminka Connect service (the Service). It is written to meet the Law of Ukraine "On Personal Data Protection" and, for people in the EU/EEA, the General Data Protection Regulation (GDPR).
Contact for any privacy question: info@adminka.pro.
1. Two different roles
- We are the controller for data about Site visitors, people who send us the call-back form, and users of Accounts (sections 2–4).
- We are the processor for the data the Service reads from our customers' CRMs (for example, the customer's clients, contacts and deals). The customer is the controller of that data; we process it only on the customer's instructions under the Data Processing Agreement. If you are a customer's client and want to exercise your rights over that data, contact the company whose CRM holds it; we will help them.
2. What we collect and why
| Data | When | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| IP address, browser type, requested pages, time (server logs) | Every Site visit | Security, troubleshooting | Legitimate interest (Art. 6(1)(f)) |
| Name, contact (phone, email or Telegram), company, message, what you asked for, the page and campaign tags (UTM) you came from | You send the call-back form | Contact you back and handle your request | Steps before a contract at your request (Art. 6(1)(b)); legitimate interest |
| Google account name and email | You sign in | Open and secure your Account | Contract (Art. 6(1)(b)) |
| Your acceptance of our documents (version, time, IP) | Sign-up | Prove what was agreed | Legal obligation / legitimate interest |
| Your CRM API key (stored encrypted), account settings | You connect a CRM | Provide the Service | Contract |
| Billing records (plan, amounts, status); card payments are handled by WayForPay — we never see card details | You subscribe | Billing, accounting | Contract; legal obligation (Art. 6(1)(c)) |
| Support correspondence | You write to us | Answer you | Contract / legitimate interest |
| Analytics and advertising data: pages viewed, actions on the page, where you came from (referrer, campaign tags, the ad), device and browser, approximate location (derived from the IP address), random identifiers kept in cookies, our internal user ID | Only after you click "Accept" in the cookie banner | See how the Site and Accounts are used and improve them; measure our marketing campaigns | Consent (Art. 6(1)(a)) |
Analytics and advertising pixels run only with your consent (section 3). We do not sell personal data.
3. Cookies and browser storage
Always (strictly necessary, no consent needed):
- a session cookie and an XSRF-TOKEN cookie — to keep you signed in to your Account and to protect forms against forgery;
- a locale cookie — only if you switch the language yourself, to remember your choice;
- an analytics_consent cookie — remembers your answer in the cookie banner for 6 months.
Only with your consent (analytics and advertising): on your first visit to connect.adminka.pro or app.connect.adminka.pro a banner asks whether you agree to analytics and advertising cookies. Until you click "Accept", none of this code is loaded. If you accept, we load Google Tag Manager, and through it our analytics and ad measurement tools:
- Google Analytics — cookies
_gaand_ga_<id>(random identifiers, up to 2 years), to count visits and see how the Site and Accounts are used; - advertising pixels, such as the Meta Pixel (Facebook, Instagram; cookies
_fbp,_fbc, up to 90 days) and Google Ads tags (cookies_gcl_*, up to 90 days), to understand which ad led to a sign-up or a payment, and to show our ads to people who have visited the Site.
Along with events (sign-up, trial start, CRM connected, checkout started) these tools receive only our internal user ID — no email, name, phone number or data from your CRM. Google processes analytics data on our behalf. Meta and Google, as advertising platforms, also process the data they receive for their own purposes under their own privacy policies. Section 4 lists the tools we use; we add any new one to that list before it goes live.
Your choice applies to both connect.adminka.pro and app.connect.adminka.pro. You can change it at any time with the Cookie settings link at the bottom of the page. If you withdraw consent, these tools stop loading and we delete their cookies the page can reach.
4. Who receives the data
| Recipient | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting and backups (all Site and Service data) | Germany (EU) |
| KeepinCRM (our own CRM account) | Stores call-back requests as leads | Ukraine |
| Telegram | Internal notification to our team about a new call-back request | Outside the EU |
| WayForPay | Card payments and recurring billing | Ukraine |
| Sign-in with Google | Global | |
| Google (Google Ireland Limited; Google LLC) | Web analytics and ad measurement — Google Tag Manager, Google Analytics, Google Ads, only with your consent | EU / USA |
| Meta (Meta Platforms Ireland Limited; Meta Platforms, Inc.) | Ad measurement and remarketing — the Meta Pixel (Facebook, Instagram), only with your consent | EU / USA |
| Reporting tools the customer connects (for example, Google Data Studio, Microsoft Power BI) | Receive the customer's reporting tables at the customer's instruction | Depends on the tool |
| Microsoft | Our email (Microsoft 365) | EU / global |
Our team works from Ukraine. We share data with authorities only where the law requires it.
5. International transfers
Data is stored in Germany. It is accessed by our team in Ukraine and, for the services above, by providers outside the EU/EEA. For transfers from the EU/EEA to countries without an EU adequacy decision (including Ukraine) we rely on the European Commission's Standard Contractual Clauses or the provider's equivalent safeguards. Google LLC and Meta Platforms, Inc. are certified under the EU–U.S. Data Privacy Framework. You can request a copy of the relevant safeguards at info@adminka.pro.
6. How long we keep data
| Data | Retention |
|---|---|
| Server logs | Short-term: size-limited and overwritten automatically, and deleted on every redeploy of the Site |
| Call-back requests | Up to 3 years after the last contact, unless you become a customer |
| Account data | While the Account exists, then up to 30 days |
| Customer Data (CRM data) | While the subscription or trial runs, then deleted within 30 days (see the Terms) |
| Backups | Rotated out within 21 days |
| Analytics data (Google Analytics) | Deleted automatically after no more than 14 months; the cookies expire after up to 2 years or when you withdraw consent |
| Advertising data (Meta Pixel, Google Ads) | Kept by Meta and Google under their own retention rules; the cookies expire after up to 90 days or when you withdraw consent |
| Billing and acceptance records | As long as accounting and tax law requires |
7. Security
Encrypted connections (HTTPS); CRM API keys encrypted at rest; a separate database for each customer; administrative access limited to authorised staff; nightly backups.
8. Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to processing, receive it in a portable format, and withdraw consent where processing is based on consent (GDPR Articles 15–21; Article 8 of the Law of Ukraine "On Personal Data Protection"). Write to info@adminka.pro; we answer within 30 days.
You may also complain to a supervisory authority: in the EU/EEA — the data protection authority of your country; in Ukraine — the Ukrainian Parliament Commissioner for Human Rights.
9. Children
The Site and the Service are intended for businesses and are not directed at children.
10. Google user data
This section covers what we receive from Google when you sign in with Google or use our Data Studio connectors ("Adminka for KeepinCRM", "Adminka for KeyCRM", "Adminka for Pipedrive").
- What we receive. Google Sign-In gives us your Google account ID, name and email address (the
openid,emailandprofilescopes). The connectors run in Google Apps Script with one permission, Connect to an external service (script.external_request), which they use only to call our API at app.connect.adminka.pro and load your own CRM reporting tables into Data Studio; each call tells us which table, fields and date range the report needs. The connectors do not read your Gmail, Drive, Data Studio reports or any other Google data. - How we use it. Your account ID, name and email: to create your Account, sign you in, show which Account a connector is linked to, and email you about the Service (section 2). The connector's request details: only to return the data the report asked for.
- Sharing. We do not sell Google user data, use it for advertising, or transfer it to anyone except the providers in section 4 as needed to run the Service, to comply with the law, or with your consent. Nobody at Adminka reads it except for security, legal compliance or support you ask for.
- Storage, protection and deletion. It is kept and protected as described in sections 6 and 7. You can disconnect a connector at any time in your Account (Settings → Data Studio access) or at myaccount.google.com/permissions, and ask us to delete your data at info@adminka.pro.
- Limited Use. Adminka Connect's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
11. Changes
We will publish changes to this policy on this page, with the new version and date at the top, and notify Account holders of material changes by email.