PRIVACY POLICY

of the website udmx.net and the «SvetoMaster»
1. General
1.1. This Privacy Policy (the «Policy») explains how the operator processes personal data of users of the website udmx.net (the «Website»), the computer program «SvetoMaster» (the «Software»), the Personal Account, the forum, comments and technical support.
1.2. The operator (the «Operator», «we») is the holder of the exclusive right to the Software. The Operator’s details are set out in section 14.
1.3. This Policy applies to visitors of the Website, registered users, users of the Software, persons purchasing or using a License to the Software or the PRO Add-on, authorized users of business customers, authors of comments and forum posts, and persons contacting technical support.
1.4. Terms such as «Account», «Personal Account», «License» and «PRO Add-on» have the meanings given in the Website’s User Agreement and the applicable license offers.
2. Personal data we process
2.1. Account data: email address, email-confirmation status, password in a secured hashed form (we have no access to the plaintext password), registration date, sign-in date and time, Account status, and the history of registration, password-recovery, password-change and Account-deletion actions.
2.2. Display name and public content: the display name or nickname you choose, comments, forum topics and messages, images and links you post, and their publication/edit history. This content is public and may be accessible to anyone, to search engines and to web-archiving services. You must not include in public content your email address, password, payment details, third parties’ personal data or other information not intended for public disclosure.
2.3. License and Software-use data: Account email; License type and status; License start and end dates; purchased Plan; Trial Period details; the number of permitted Activations; activated and deactivated Computers; a technical device identifier and a derived technical value used to bind the License to a Computer; Activation and License-check date and time; Software version; PRO Add-on purchase and status; Technical Limit; the history of operations needed to account for the License, Activations and Technical Limit; referral attribution (which referral link a user registered through, its date, and information about invited users); and the crediting, verification, use and cancellation of bonus tokens. The technical device information we process is limited to what is necessary to identify the Computer and protect the right to use the Software.
2.4. Content you submit: information you voluntarily enter or transmit when using Software features and when contacting support (for example, project data, operation logs, a diagnostic report generated at your initiative, and other materials you send). You must not submit passwords, full card numbers, third parties’ personal data or other confidential information that is not necessary.
2.5. Payment data: payer’s email, order number, payment date and amount, the purchased right, payment status, the payment provider’s transaction identifier, and refund/cancellation information. We do not receive or store the full bank card number, its expiry date, the security code or other full card details — these are entered and processed by the payment service and the participating financial institutions under their own documents.
2.6. Technical and security data (collected automatically when you visit the Website, sign in, or use network features of the Software): IP address; date and time of the request; the requested page or network function; referrer; browser and its version; operating system and device type; browser language; cookies; session identifier; successful and failed sign-in attempts; technical errors; and data needed to detect automated requests, abuse, intrusion and circumvention of restrictions. This data is used to protect Accounts, prevent fraud, restrict unauthorized access, investigate incidents and confirm actions taken after authorization.
3. Purposes of processing
3.1. We process personal data to: register, maintain and delete Accounts; authenticate users; send passwords, download links and service notifications; conclude and perform the User Agreement and license agreements; provide the Trial Period, paid Licenses and the PRO Add-on; activate the Software and control the number of permitted Computers; account for the Technical Limit and administer bonus tokens and referral and other marketing programs; process and confirm payments and refunds; operate the Personal Account, forum, comments and other Website features; handle requests and provide technical support; send service messages about Account security, payments, License status and legal-document changes; ensure information security and prevent fraud, License circumvention and other abuse; diagnose errors and maintain the Website and Software; obtain aggregated, de-identified statistics of Website use; and comply with applicable law.
4. Legal bases
4.1. Depending on the situation, we rely on: the performance of a contract with you (and steps taken at your request before entering into a contract); compliance with our legal obligations; your consent (in particular for non-essential analytics cookies and for the distribution of personal data you choose to make public); and our legitimate interests (in particular ensuring security, preventing fraud and defending legal claims), provided your rights and freedoms do not override them.
5. Cookies
5.1. The Website uses cookies — small pieces of data stored by your browser.
5.2. Essential cookies are required for signing in, keeping your session, protecting against request forgery, security, remembering your cookie choice and operating requested features. Without them, sign-in and some Website features may be unavailable.
5.3. Analytics cookies are used to obtain usage statistics, analyze navigation, detect errors and improve the Website. They are not required for registration, sign-in, purchase or use of a License.
5.4. You can refuse or delete cookies in your browser settings and still use the core features of the Website. Deleting essential cookies may sign you out. Cookie lifetimes depend on their purpose: session cookies are removed when the session ends or the browser closes; persistent cookies expire after a set period or when you delete them.
6. Analytics services
6.1. The foreign-language pages of the Website use the web-analytics services Google Analytics (provided by Google) and Yandex Metrica (provided by Yandex). These services may receive and process: IP address; cookies and similar identifiers; browser, operating system and device information; visit date, time and duration; pages viewed; referrer; approximate location; and actions on the Website.
6.2. Each provider processes this data in accordance with its own documents and privacy terms. We configure these services to limit the data shared and to disable unnecessary advertising and identification features, and we do not pass to them your email address, password, support-request content, payment details or other direct identifiers.
6.3. Analytics services are not used to make decisions about granting or terminating a License. You can opt out of Google Analytics using Google’s browser add-on and control analytics via your browser and the tools the providers offer.
7. International data transfers
7.1. Because we use Google Analytics and Yandex Metrica, and because our service providers may operate in different countries, some technical data may be transferred to and processed in countries other than your own, including outside the European Economic Area and in the Russian Federation (Yandex).
7.2. Where such transfers occur, they rely on the safeguards implemented by the respective providers and on the legal mechanisms available to them (such as standard contractual clauses or equivalent measures). We limit the data involved to what is necessary for analytics.
8. Sharing with third parties
8.1. We use the payment service Robokassa to process payments. To carry out a payment we may pass to it your email, order number, amount, payment purpose and the purchased right. Card details are entered on the payment provider’s or the financial institution’s side; we do not receive or store the full card number or security code.
8.2. We may also grant access to personal data to our hosting and infrastructure provider, our email provider, and persons maintaining our information systems — only to the extent necessary and subject to confidentiality — as well as to public authorities and courts where required by law.
8.3. Processors acting on our behalf may not use the data for their own purposes. We do not sell personal data and do not provide email lists to advertisers for their own mailings.
9. Retention
9.1. Account, License, Activation and PRO Add-on data is processed while the Account exists and the related contractual relationship is in effect. After Account deletion, data is deleted or de-identified, except for data we must retain to comply with the law, for accounting and tax purposes, to confirm payments, to handle claims, to defend legal rights, or to prevent repeat abuse or fraud.
9.2. Payment records are retained for the periods required by accounting and tax law. Authorization logs, IP addresses and security-incident records are retained, as a rule, for no more than 12 months, unless a longer period is needed to investigate an incident, prevent repeat abuse, comply with the law or resolve a dispute. Support correspondence may be retained for up to three years after a request is resolved. Public content and display names are processed until deleted by you or by us; after Account deletion the display name of a comment/post author is replaced with «Deleted user», while the content itself may be retained to preserve the continuity of discussions and to comply with the law. Analytics data is retained according to the providers’ settings, the analytics-cookie lifetime and the moment you withdraw consent.
10. Your rights
10.1. Subject to applicable law, you have the right to: access your personal data and obtain information about its processing; request correction, restriction or deletion of incomplete, outdated, inaccurate, unlawfully obtained or unnecessary data; withdraw consent where processing is based on consent (including consent to analytics cookies); object to processing; request that unlawful processing cease; receive your data in a portable form where applicable; and lodge a complaint with a competent data-protection authority.
10.2. Requests are sent to the email address in section 14. To identify you, please state your Account email, the substance of your request and information confirming your connection to the relevant data. We may ask for reasonable verification of Account ownership. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal; after withdrawal, processing may continue where another legal basis exists.
11. Security
11.1. We take reasonable legal, organizational and technical measures to protect personal data against unauthorized or accidental access, destruction, alteration, blocking, copying, disclosure and other unlawful actions. Depending on the data, these include access control, user authentication, secure password storage, encrypted connections, backups, software updates, security-event logging, restricted administrative access and measures against automated attacks. Access is granted only to persons who need it for their duties. If a data breach occurs, we take measures to stop it, reduce harm, investigate and send any notifications required by law.
12. Children
12.1. Registration and independent acceptance of contractual terms are intended for persons of full legal capacity who are at least eighteen years old. We do not knowingly collect data about minors and will delete such data if it is provided without a lawful basis, unless the law requires its retention.
13. Changes to this Policy
13.1. We may amend this Policy when the law, the data we process, the services we use, or the operation of the Website or Software change. The current version is always available on the Website; a new version states its revision number and effective date. Where a change materially affects processing, registered users may be notified by email or in the Personal Account.
14. Operator details
14.1. Email for privacy requests and claims: support (at) udmx.net. Technical support: https://udmx.net/soft/support. Website: udmx.net
Version No. 2 of 01.07.2026