Privacy Policy

1. General Provisions

1.1. This Privacy Policy (hereinafter referred to as the "Policy") applies to all information that the Individual Entrepreneur Kruglov Alexey Alexeevich (hereinafter referred to as the "Operator") may receive about the user while using the PEREFILE service (hereinafter referred to as the "Service").

1.2. Personal data is processed on the grounds listed in clause 1.5. The use of cookies is described in the Cookie Policy, an integral part of this Policy.

1.3. If the user disagrees with the terms of the Policy, they must stop using the Service.

1.4. This Policy applies only to the PEREFILE Service. The Operator does not control and is not responsible for third-party websites that the user may access via links available in the Service.

1.5. The legal grounds for processing personal data are:

• Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data"
• Offer agreement between the Operator and the User
• User consent to the processing of personal data

2. Data Collection

2.1. The Operator collects the following types of information:

2.1.1. Personal Information

• Username
• Email address
• Phone number (if required)
• Payment information (processed by the payment system)

2.1.2. Technical Information

• IP address
• Browser and device data
• Information about Service usage sessions
• Cookie data

2.1.3. File Information

• Metadata of uploaded files (size, format, creation date)
• Conversion history (without access to file contents)

2.2. The Operator does NOT have access to the content of files uploaded by users and does not analyze them.

3. Data Usage

3.1. The collected information is used for the following purposes:

• Providing access to Service features
• User identification
• Payment processing and subscription management
• Communication with the user (technical support, notifications)
• Improving Service quality
• Service usage analysis and statistics compilation
• Compliance with Russian Federation legislation

3.2. The Operator does not transfer personal data to third parties without the user's consent, except in cases provided by Russian legislation.

3.3. Anonymized data may be used for statistical analysis and Service improvement.

4. Data Protection

4.1. The Operator takes necessary organizational and technical measures to protect user's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution.

4.2. Protection measures include:

• Use of SSL encryption for data transmission
• Data storage on secure servers in Russia
• Restricted access to personal data
• Regular security system updates
• Use of modern cryptography methods

4.3. Access to personal data is limited to individuals who need this information to perform their duties to ensure the Service operation.

4.4. In case of security incidents, the Operator acts in accordance with Russian Federation legislation requirements and takes measures to minimize possible consequences.

4.5. Personal data is stored for the period necessary to achieve processing purposes. User files are automatically deleted according to the terms of the selected plan. Data of the Site's own visit statistics is stored for 12 months from the last visit to the Site, and information about individual visits (sessions, viewed pages, actions) - for 12 months from the date of the visit; after that it is deleted automatically. The IP address, browser fingerprint, guest session identifier and browser information recorded with conversions, file uploads and result ratings are stored for 30 days from the date of recording and are then automatically anonymized; the link between conversions and visit statistics data is stored for 12 months. File names and paths of conversions made without signing in are stored for 30 days from the date of conversion, after which only the file extension remains; for a registered user, file names are kept while the account exists and are erased when it is deleted. The log of account sign-ins and account security events (IP address, browser information) is stored for one year.

5. Cookies

5.1. The Service uses cookies of three categories:

• Essential - signing in (access_token, refresh_token, pf_session), protecting forms against forged requests (csrf_token), counting free conversions without registration (pf_fp - browser fingerprint), remembering that the cookie notice was closed (pf_cookie_notice). The Service does not work without them.
• Analytics - Yandex Metrica (cookies prefixed with _ym) and the Service's own visit statistics (vid, sid).
• Advertising - Yandex Advertising Network cookies for showing and selecting ads.

5.2. On the first visit the Service informs the user that it uses cookies and links to the Cookie Policy. By continuing to use the Service, the user agrees to the use of cookies in accordance with it. The list of cookies, purposes, retention periods and Yandex services are described in that Policy.

5.3. The user can delete or block cookies in the browser settings and opt out of data collection by Yandex Metrica with its official opt-out add-on (section 7 of the Cookie Policy).

5.4. If essential cookies are blocked, signing in and free conversions without registration will be unavailable; blocking analytics and advertising cookies does not affect how the Service works.

6. Third Parties

6.1. The Operator may engage third parties to provide certain services:

• Payment systems - payment processing (Tinkoff Bank)
• Hosting providers - data storage and processing on servers
• YANDEX LLC - Yandex Metrica (analytics) and the Yandex Advertising Network (ads) (section 5)
• Email services - sending notifications to users
• YANDEX LLC - storing results on Yandex Disk if the user has connected Disk to their account (section 7)

6.2. Third parties only receive access to information necessary to perform their functions and are obligated to maintain confidentiality.

6.3. The Operator requires third parties to comply with data protection standards no less stringent than those established in this Policy.

7. Connecting Yandex Disk

7.1. The user may choose to connect their Yandex Disk to their PEREFILE account to save conversion results to it. The user grants access on the Yandex ID page. The Operator requests only the permissions the chosen feature needs:

• permission to write to Disk - on the first save of a result to Disk or when connecting Disk in the profile;
• permission to read files on Disk - only if the user picks files from Disk for conversion; this is a separate feature, and read permission is requested separately;
• Disk details (account login and name, total and free space) - together with either permission above: to show in the profile which Disk is connected and to avoid starting a transfer for which there is no space on Disk.

7.2. After connection, the Operator stores:

• the Disk access token - in encrypted form;
• the login and name of the Yandex Disk account - to show in the profile which Disk is connected;
• the autosave setting and details of saves: which result was written to Disk, when and under what name.

7.3. The Operator uses access to Disk only as follows:

• writes conversion results to the PEREFILE folder on Disk - only on the user's command ("Save to Yandex Disk") or when the user has turned on autosave;
• does not overwrite or delete files on Disk: if a name is taken, a number is added to the new file's name;
• does not view or read files on Disk without a separate read permission granted by the user;
• when the user picks files from Disk, shows the contents of their folders (names, sizes, modification dates) only in the picker and does not store this information; downloads only the files the user has chosen, and only on the user's command ("Add").

7.4. Access can be revoked at any time:

• in the account: "Profile" -> "Connected clouds" -> "Disconnect". The Operator deletes the access token and revokes it with Yandex;
• in Yandex ID settings, in the section for managing app access.

7.5. Files already saved to Disk remain with the user after disconnection - the Operator does not delete them. When a PEREFILE account is deleted, Disk access tokens and connection details are deleted.

7.6. Storage of files on Yandex Disk is governed by the terms of use of Yandex services. Only files the user chose to save to their own Disk are transferred to Yandex.

8. User Rights

8.1. In accordance with Russian Federation legislation, the user has the right to:

• Obtain information about their personal data
• Clarify, update or correct their data
• Request deletion of their personal data
• Withdraw consent to personal data processing
• Restrict processing of their data
• Receive their data in machine-readable format

8.2. To exercise their rights, the user can contact: support@perefile.com

8.3. Requests are processed within the timeframes established by Russian Federation legislation.

8.4. When deleting an account, personal data is deleted, except for data required to be stored by law.

9. Children's Data Protection

9.1. The Service is not intended for persons under 18 years of age.

9.2. The Operator does not intentionally collect personal data of persons under 18 years of age.

9.3. If the Operator becomes aware that personal data was received from a person under 18 years of age, such data will be immediately deleted.

9.4. Parents or legal guardians may contact us to delete data of minors.

10. Policy Changes

10.1. The Operator reserves the right to make changes to this Privacy Policy.

10.2. The Operator will notify users of significant changes by posting a notice in the Service or sending an email.

10.3. A new version of the Policy takes effect when published in the Service.

10.4. The current version of the Policy is always available at: perefile.com/privacy

11. Contact Information

11.1. For all questions related to personal data processing, you can contact:

• Email: support@perefile.com
• Postal address: Moscow, Altufyevskoye Highway, 91, bldg. 1