The essentials
This policy covers the Polygraph website. The app is being prepared for public launch; its data practices will be published before the relevant features become available.
- Launch notification — you voluntarily provide your email address to receive the requested message about Polygraph’s availability.
- Support — we use your contact details and message to handle your request, respond and, where necessary, check that the request concerns your data.
- Website operation — we process necessary technical information to deliver pages and prevent abuse.
- Your choice — you can withdraw a launch request and contact us about your data without creating an account.
1. Who is responsible for your data
The controller for this website is LLC POLYGRAPH SOCIAL, a limited liability company registered in Ukraine, EDRPOU registration number 46500880. “We” in this policy means this company. For support and privacy enquiries, contact [email protected] or +380 75 679 48 49.
2. What this policy covers
This policy covers browsing pages, requesting a launch notification, contacting us through the form, email or phone, and saving a selected link. Browsing and submitting a launch request do not create an account. At this stage, the website does not offer app registration or sign-in, take payments, or provide access to private chats or profiles. Examples shown on the pages are not your account or personal conversations.
3. What data we receive
The information involved depends on how you use the website.
When you request a launch notification
We store your email address, the form language, the source and date of your request, the version of the notice explaining how the address will be used, and a notification timestamp once the message is sent. Separately, we use a cryptographically transformed identifier of the request source and an attempt counter to limit spam. This transformation does not guarantee complete anonymity.
When you contact support
We receive your contact email, selected topic and message, and any reason, link or identifier you provide. We keep the request number, time, status, replies and necessary handling records. To protect the form, we also process a technical identifier for retries and a transformed identifier of the request source. When you email or call us, we receive contact details and the information you communicate during the conversation or correspondence. The web form does not accept attachments.
When you browse the website
To establish a connection, servers process your device’s network address (IP address), the time and URL of the request, browser information and the request outcome. Some of this information may enter technical logs for operation and security. If you choose to save a link, your browser stores the information explained in the cookies section.
- Provide only what is needed for your request. Do not send passwords, sign-in codes, full payment details, illegal material or unnecessary information about other people.
- To verify that data belongs to you, we may ask you to reply from the relevant email address or provide minimal additional confirmation. Identity documents are not needed for an ordinary enquiry.
4. Why we use data and on what basis
We use data for the purposes below. Reading this policy is not, by itself, consent to every type of processing.
- Launch notification — based on your voluntary consent, expressed by submitting the form with its accompanying notice. This does not authorise other marketing messages.
- Support — to consider your question and reply, based on our legitimate interest in communicating properly with visitors, taking their rights into account. We handle requests to exercise data rights to comply with relevant legal obligations.
- Operation and protection — based on our legitimate interest in website availability, error detection and preventing spam or unauthorised activity. We do not use this data for advertising profiling.
- Saved links — to carry out your explicit action and temporarily remember the selected destination. This does not verify your identity or grant access to content.
- Legal requirements and protection of rights — only where required by law or where information is necessary for a justified legal claim.
5. Withdrawing a launch request
Email [email protected] or choose “Privacy and website data” in support and ask to cancel your launch notification request. Include the address you submitted. You do not need an account or the app. Where necessary, we will verify that the address belongs to you, stop using it for the notification and consider deletion of related data. Withdrawal does not affect the lawfulness of processing before withdrawal. You can browse the information pages without submitting a request.
7. Who may receive data
Access is limited to authorised people who need it to operate the website, handle requests and protect data. We do not sell personal data or share the launch list with advertisers.
- Technical providers — hosting, database, backup and security services may process data within the services they provide to us and under the applicable processing terms.
- Business email — we use Google Workspace. When you email us or we reply, Google processes addresses, correspondence and technical information needed to provide email services.
- Other recipients — professional advisers or competent authorities may receive necessary information where justified by protecting rights or legal requirements.
8. Processing in other countries
Technical and email providers may process information outside Ukraine. In particular, Google Workspace uses international infrastructure. Before transferring data, we must identify the applicable legal basis and necessary safeguards. Using the website is not separate consent to any international transfer. Contact us for information about the providers, processing countries and safeguards relevant to your data.
9. How long we keep data
Retention must relate to the processing purpose rather than continue indefinitely. We apply these criteria:
- Launch request — until the requested notification is sent, you withdraw the request, or launch preparations end. We then remove the address from the notification list; minimal evidence of consent or withdrawal may remain only where there is a separate lawful need.
- Support and correspondence — while handling the matter and afterwards only as long as records are reasonably necessary to carry out the outcome, handle related enquiries, meet a legal obligation or protect rights. The scope and period depend on the matter and relevant legal time limits.
- Technical records — only for the period needed to operate, diagnose and protect the website. Records concerning a specific incident may remain longer during its investigation or legal proceedings.
- Browser data — saved links last up to 24 hours. Server backups have a separate replacement cycle; removal from the working system does not instantly overwrite every backup. Where data must lawfully be retained, we restrict its use to that purpose.
10. Your rights and requests
You can ask whether we process your data, request access and information about purposes and recipients, correct inaccuracies, withdraw consent, object to processing or request erasure in the circumstances provided by law. If the EU General Data Protection Regulation (GDPR) applies to your situation, it also provides rights to restriction and data portability under the relevant conditions.
Making a request
Email [email protected] or use the support form’s privacy topic. Describe the data and action concerned. We may clarify the request or verify that the data belongs to you to avoid disclosure to another person. We respond within the deadlines set by applicable law; if we cannot fulfil the request in full, we explain why.
Making a complaint
You may contact the Ukrainian Parliament Commissioner for Human Rights, another competent data protection authority or a court. You do not have to contact us first to seek that protection.
11. Protecting data
We restrict access to information, validate form requests and use measures to prevent abuse. Saved links are encrypted. No transmission or storage method provides an absolute security guarantee. If you notice a possible leak or someone else’s data on the website, tell support without copying or distributing unnecessary information.
12. Children’s data
Information pages can be browsed without requesting a launch notification. We do not ask for birth dates or collect children’s profiles through this website. If applicable law requires a legal representative’s involvement in your request or consent, seek their assistance. If you believe a child has provided data without the required consent, contact us so we can check and take appropriate action.
13. Policy changes
This initial edition applies from its first publication on the website. The update date above identifies the edition. Before using data in new ways, we will update the notices and ask for separate consent where required. Future documents for the app and website will be published before the relevant processing begins. They will not retroactively expand consent given for a launch notification.