Privacy Policy
Last updated: February 26, 2026
This Privacy Policy (hereinafter referred to as the "Policy") describes the procedures for collecting, storing, processing, using and protecting personal data of users of the VARIK PRO service (hereinafter referred to as the "Service", "we", "us"). The Policy has been developed in accordance with Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data", Federal Law No. 149-FZ dated July 27, 2006 "On Information, Information Technologies and Protection of Information", as well as other regulatory legal acts of the Russian Federation. By using the Service, you confirm that you have read this Policy and give your consent to the processing of personal data under the specified conditions.
1. Personal Data Operator
The personal data operator is VARIK PRO (hereinafter referred to as the "Operator"). Contact email address: info@varik.pro. The Operator determines the purposes and methods of processing personal data, ensures their security and is responsible for compliance with the requirements of the legislation of the Russian Federation in the field of personal data.
2. Legal Basis for Data Processing
Processing of personal data is carried out on the basis of: (a) consent of the personal data subject (Article 6, Paragraph 1, Subparagraph 1 of Federal Law No. 152-FZ); (b) performance of a contract to which the personal data subject is a party (Article 6, Paragraph 1, Subparagraph 5); (c) legitimate interests of the Operator that do not violate the rights and freedoms of the personal data subject. Consent to the processing of personal data may be withdrawn by the subject at any time by sending a notification to info@varik.pro.
3. Categories of Data Collected
We collect the following categories of personal data: (a) Registration and authentication data — email address, password (in encrypted form), username. (b) Data from OAuth providers — when authorizing through Google, Discord, Telegram, we gain access exclusively to your public profile: name, email address and account identifier. We do not request and do not gain access to your contacts, files, messages, calendar or other data in these services. (c) Technical data — IP address, browser type and version, operating system, date and time of access, session identifiers. (d) Service usage data — information about subscriptions, payments made, features used.
4. Purposes of Data Processing
Personal data is processed exclusively for the following purposes: (a) creating and managing user accounts; (b) authentication and authorization of access to the Service; (c) providing services and features of the Service; (d) processing payments and maintaining financial records; (e) sending notifications about subscription status, maintenance and Service updates; (f) ensuring information security and fraud prevention; (g) analyzing Service usage to improve service quality. We do not sell, rent or transfer your personal data to third parties for marketing or advertising purposes.
5. Data Obtained Through OAuth Providers
When authorizing through third-party services (Google, Discord, Telegram), we request a minimal set of permissions (scopes) necessary exclusively for user identification: email address and basic profile information. We do not request, receive or store: extended permissions to read/write data in your account; access to your contacts, files, documents or correspondence; payment data linked to your account with the provider. You can revoke the Service's access to your account at any time through the security settings of the respective provider (for example, the "Security" page in Google Account, "Authorized Apps" settings in Discord, "Connected Applications" settings in Telegram).
6. Technical Logging and User Content
As part of providing access to computing and network resources, the Service processes technical service data necessary for ensuring the operability of the infrastructure, load control and prevention of abuse. Such data includes: metadata about the time and duration of sessions, volume of data transferred, server identifiers. The Service is not intended for storing user content. The Operator does not carry out systematic, purposeful monitoring, inspection or recording of the content of traffic passing through the provided network resources. The Operator does not systematically store the history of visited addresses, DNS queries and other content of users' network activity, except when necessary to ensure security, diagnostics, prevent abuse or comply with legal requirements.
7. Data Sharing with Third Parties
We may transfer personal data to third parties only in the following cases: (a) with your explicit consent; (b) for payment processing through licensed payment aggregators that are required to ensure the confidentiality and security of data in accordance with PCI DSS requirements; (c) upon receipt of a motivated request from authorized government bodies in the manner prescribed by the legislation of the Russian Federation; (d) to protect the rights, property or safety of the Operator, Service users or third parties. All third parties receiving access to personal data are required to enter into a confidentiality agreement and ensure a level of data protection no lower than that established by this Policy.
8. Cross-Border Data Transfer
The Service's servers may be located outside the territory of the Russian Federation. Cross-border transfer of personal data is carried out in accordance with Article 12 of Federal Law No. 152-FZ. We ensure proper protection of personal data when transferring them to the territory of foreign states and take reasonable technical and organizational measures to prevent unauthorized access.
9. Cookies and Similar Technologies
We use cookies and similar technologies to ensure the operability of the Service, authenticate users and store user preferences (interface language, design theme). We use the following types of cookies: (a) strictly necessary — ensure authentication and security; (b) functional — save your settings. We do not use advertising or analytical third-party cookies to track your behavior on other websites. You can configure your browser to block or notify about the sending of cookies, however this may affect the operability of the Service.
10. Data Retention Periods
Personal data is stored for no longer than necessary to achieve the purposes of its processing, but not less than the periods established by the legislation of the Russian Federation. Account data is stored for the entire duration of the account and for 30 days after its deletion. Payment data is stored for 5 years in accordance with tax legislation requirements. Technical logs are stored for no more than 12 months. Upon expiration of storage periods, data is destroyed or anonymized.
11. Your Rights
In accordance with Federal Law No. 152-FZ, you have the right to: (a) obtain information about the processing of your personal data; (b) demand clarification, blocking or destruction of your personal data if it is incomplete, outdated, inaccurate or unlawfully processed; (c) withdraw consent to the processing of personal data; (d) appeal the actions or inaction of the Operator to the authorized body for the protection of personal data subjects' rights (Roskomnadzor) or to a court; (e) request deletion of your account and all associated data. To exercise your rights, send a request to info@varik.pro. We will review your request within 10 business days.
12. Protection of Minors' Data
The Service is not intended for persons under 16 years of age. We do not knowingly collect personal data of minors. If we become aware that a user has not reached the age of 16, their account will be blocked and personal data will be deleted. If you are a parent or legal guardian and believe that your child has provided us with personal data, please contact us.
13. Changes to This Policy
We reserve the right to make changes to this Policy. We will notify you of significant changes by email or by posting a prominent notice in the Service no less than 7 days before the changes take effect. By continuing to use the Service after the publication of the updated Policy, you confirm your consent to the changes made.
14. Contact Information
For all questions related to the processing of personal data, as well as to exercise your rights, you can contact us: email — info@varik.pro. We undertake to review your request and provide a response within the time limits established by law.