1. General provisions
1.1. This Policy sets out the procedure for processing and protecting the personal data of users of the DealApp (Дилап) service (the mobile apps and the дилап.рф website, the «Service») and has been developed in accordance with Federal Law No. 152-FZ of 27 July 2006 «On Personal Data».
1.2. The personal data operator is DILAP Limited Liability Company (ООО «ДИЛАП») (the «Operator»). The Operator’s details are given at the end of this document.
1.3. The Policy applies to all personal data that the Operator receives from clients, specialists and website visitors.
2. What data we process
Clients: phone number; name or pseudonym; photograph (optional); city; language; interests specified in the profile; history of bookings and consultations; messages and files in consultation chats; requests to the AI assistant Lucy; reviews; wallet transactions (without full bank card details).
Specialists: additionally — surname, first name and patronymic; information about education and experience; legal status, INN (taxpayer ID), OGRNIP (sole proprietor registration number), bank details; status as a payer of professional income tax; schedule, tariffs, information about income and payouts.
Technical data: device identifier and push notification token, IP address, information about the app and operating system versions, event logs, cookies on the website (see the Cookie Policy).
Bank card details are entered on the side of the YooKassa payment service and are not transferred to the Operator.
3. Purposes of processing
- registration and authorisation in the Service;
- matching with specialists, booking, conducting consultations and exchanging messages;
- accepting payments, accounting for wallet funds, settlements with and payouts to specialists, issuing receipts;
- verification of specialists;
- user support and handling of requests;
- ensuring security and preventing fraud;
- compliance with legal requirements (accounting and tax records);
- sending advertising and informational messages — only where separate consent has been given.
4. Legal grounds
Consent of the personal data subject (consent to processing); conclusion and performance of a contract to which the data subject is a party (the offers for clients and specialists); fulfilment of obligations imposed on the Operator by law.
5. Processing procedure
5.1. Processing includes the collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, transfer (provision, access), anonymisation, blocking, deletion and destruction of personal data, using automated means.
5.2. The recording, systematisation, accumulation, storage and clarification of personal data of citizens of the Russian Federation are carried out using databases located in the Russian Federation.
5.3. Video and audio communication during consultations is not recorded. Chat messages and files are stored so that the client and the specialist can refer back to them.
5.4. The specialist sees the client data needed for the consultation. In anonymous mode, the specialist is shown a pseudonym instead of the client’s name and photograph.
6. Disclosure to third parties
The Operator discloses personal data only to the extent necessary for the purposes of processing:
- to the specialist or client — to conduct a consultation;
- to the YooKassa payment service — to accept payments, make payouts and issue receipts;
- to the app stores’ push notification delivery services — the device token and the notification text;
- to government authorities — in cases provided for by law.
Personal data is not sold.
7. Retention periods
Personal data is stored for as long as the account remains active. After the account is deleted (with a 30-day waiting period), the data is deleted or anonymised, except for information the Operator is required by law to retain (accounting documents — for at least 5 years) and records of financial transactions, which are retained in anonymised form.
8. Rights of the personal data subject
You have the right to obtain information about the processing of your data, to request its clarification, blocking or destruction, to withdraw your consent, and to appeal against the Operator’s actions to Roskomnadzor (the Russian data protection authority) or in court. Please send requests to the email address given in the Operator’s details with the subject line «Personal data». The response time is no more than 10 business days, which may be extended by 5 business days as permitted by law.
You can delete your account in the app settings.
9. Data protection
The Operator applies legal, organisational and technical protection measures: encryption of connections, access control, logging of administrator actions, backups, and regular software updates.
10. Amendments to the Policy
The Operator may amend the Policy. A new version takes effect from the moment it is published on this page.
Operator details
- Service operator
- Общество с ограниченной ответственностью «ДИЛАП»
DILAP Limited Liability Company (official name in Russian) - OGRN
- 1242400023370
- INN / KPP
- 2465364170 / 246501001
- Registered address
- Красноярский край, г. Красноярск, ул. 9 Мая, д. 69, кв. 60
- Bank details
- Account 40702810931000069935, BIC 040407627
- Phone
- +7 996 055-00-56
- [email protected]