Privacy policy

Last updated: 30 April 2026

1. General Provisions

1.1. Purpose of the Document. This Privacy Policy (hereinafter - the "Policy") is developed by "ImStocker" LLC (hereinafter - "we", "us", or "our") in accordance with applicable data protection legislation. The Policy defines how we collect, use, store and protect information about individuals ("Users" or "you") who use our Service.

1.2. Scope. This Policy applies to all personal data processing operations carried out by us when you:

register and use your personal account;
use the feedback form;
interact with the Service (automatic data collection via web analytics);
subscribe to and receive informational and marketing communications.

1.3. Principles. We process personal data lawfully, fairly and in a transparent manner. Data collection is limited to what is necessary for the specified purposes. Processing may be carried out by automated means or otherwise.

1.4. Marketing and informational communications. We may send you informational and marketing messages (news, promotional offers, updates about the Service) to the email address you provide only if you have given your prior, explicit and separate consent to receive such communications. You may withdraw this consent at any time.

1.5. Public availability. This Policy is a public document and is permanently available at: https://imstocker.com/en/page/privacy.

1.6. Acceptance of the Policy. By using the Service or by ticking the consent box on the relevant forms, you acknowledge that you have read and agree to the terms of this Policy.

2. Definitions

In this Policy the following terms shall have the meanings set out below:

Personal data - any information relating to an identified or identifiable natural person ('data subject').
Controller - "ImStocker" LLC, which alone or jointly with others determines the purposes and means of the processing of personal data.
Service - the ImStocker software platform, including the website at imstocker.com and its subdomains, applications and software products made available to Users.
User - any individual who visits the Service, registers a personal account, uses the feedback form, or subscribes to marketing communications.
Processing - any operation or set of operations performed on personal data, whether or not by automated means (collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction).
Marketing communications - emails sent by us containing information about new features, updates, promotions, special offers and other marketing content, provided your separate consent has been obtained.
Cookies - small text files placed on your device by a web server that enable us to analyse your interaction with the Service and improve its functionality. You can manage your cookie preferences through your browser settings

3. Purposes of Personal Data Processing

We process personal data solely for the following purposes:

3.1. Provision of the Service:

User registration, identification and access to the personal account and ImStocker software;
Performance of the User Agreement (Terms of Service) and delivery of personalised features;
Ensuring security, fraud prevention and system stability monitoring.

3.2. Communication and support:

Responding to your inquiries and providing customer support;
Sending service-related (transactional) notifications necessary for the operation of your account (e.g., registration confirmation, password reset).

3.3. Informational and marketing interaction:

Sending news, updates, special offers and promotional materials;
Conducting surveys and market research to improve the Service.
This purpose is pursued only with your separate, explicit consent.

3.4. Analytics and Service improvement:

Analysing user behaviour on the Service through web analytics tools (Yandex.Metrica, Umami) in order to improve the interface and user experience.

4. Legal Bases for Processing

We process personal data only on the following legal grounds:

4.1. Performance of a contract (the User Agreement). Processing is necessary for the performance of our obligations to you, including providing access to the personal account, the ImStocker software and technical support.

4.2. Consent. You provide your consent freely, by a clear affirmative act, in the following cases:

when you register or submit a form - for the processing of your personal data within the scope and for the purposes described in this Policy;
when you tick a specific checkbox - for receiving informational and marketing communications (in accordance with applicable e‑privacy and data protection laws);
when you continue using the website after seeing the cookie notice - for the use of non‑essential cookies and analytics tools, unless you adjust your browser settings

4.3. Legitimate interests. Processing may be carried out for the purposes of our legitimate interests, provided that such interests are not overridden by your rights and freedoms. Legitimate interests include ensuring information security of the Service, fraud prevention, and establishment, exercise or defence of legal claims.

4.4. Compliance with a legal obligation. Processing may be necessary for compliance with applicable laws (e.g., retention of payment data for tax purposes, responding to lawful requests from public authorities).

4.5. Special categories of data. We do not process special categories of personal data (revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation) or data relating to criminal convictions and offences.

5. Categories of Data, Data Subjects and Data Collection

5.1. Data subjects. We process data of the following categories of individuals:

visitors of the website imstocker.com;
registered Users of the Service;
subscribers to informational and marketing communications;
individuals who contact us via the feedback form.

5.2. Data collected. We collect only the data that is necessary for the purposes set out in Section 3.

Registration and access to the personal account:
- email address;
- nickname (pseudonym).
Informational and marketing communications:
- email address;
- information about subscriptions and interests (optional, if you provide them);
- email open and click‑through statistics (for measuring campaign effectiveness).
Feedback/Support requests:
- email address;
- name (or pseudonym);
- any other personal data you voluntarily include in the text of your request.
Technical data (automatically collected):
- cookie data;
- IP address, browser type and version, operating system and other technical information about the device;
- referral source (the webpage from which you arrived at the Service);
- data on interaction with the Service interface (through Yandex.Metrica and Umami).

5.3. Anonymisation. The technical data collected by analytics tools is processed in anonymised form (without the ability to directly identify you), unless you have logged into your personal account and we combine such data with your account information for analytical purposes.

6. Data Recipients

6.1. Data processors. To achieve the purposes stated in this Policy, we may engage third‑party service providers (email delivery services, cloud infrastructure providers, hosting companies). When we do so, we enter into a data processing agreement that requires them to process personal data only on our documented instructions, to implement appropriate technical and organisational measures, and to ensure compliance with applicable data protection laws. We remain liable to you for the actions of such processors.

6.2. List of processors. Upon your written request, we will provide you with a list of the main categories of recipients and, where possible, the names of specific recipients.

6.3. Data Location and Localization. We are a company based in the Russian Federation. Your personal data is primarily stored and processed on servers located within the Russian Federation. We ensure that the collection and storage of personal data of citizens of the Russian Federation are carried out using databases located in Russia, in compliance with local localization requirements.

6.4. International Transfers. If you are accessing the Service from outside the Russian Federation, please be aware that your information may be transferred to, stored, and processed in the Russian Federation. By using our Service and providing your information, you acknowledge such transfer and processing. We take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

7. Data Retention

7.1. Retention Principles. We retain personal data for no longer than is necessary for the purposes for which it is processed. The specific period for which data is stored is determined by the nature of the purpose and applicable legal requirements.

7.2. Retention Periods:

Personal Account Data: Personal data related to your account is processed for the duration of the User Agreement (the period of your use of the Service). After the account is deleted or becomes inactive, we may retain certain data for as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements (including statutory limitation periods for legal claims).
Marketing Communications: The email address used for marketing is processed until you withdraw your consent (unsubscribe) or until we cease such marketing activities.
Support Requests: Data provided via feedback forms is retained for the period necessary to fully resolve the inquiry and for a reasonable period thereafter to ensure the quality of our support.
Technical Data (Cookies): The storage period for technical data is determined by the lifespan of the specific cookie and the settings of the analytics systems (such as Yandex.Metrica and Umami), which can be managed via your browser settings.

7.3. Data Deletion. Once the purposes of processing are achieved, or upon a valid request for deletion or withdrawal of consent, personal data is securely destroyed or permanently anonymised so that it can no longer be associated with an identified or identifiable individual.

7.4. Verification of Destruction. In accordance with our internal procedures and applicable law, the destruction of personal data is documented by an internal act and, where applicable, by log entries in our information systems to ensure the data is non-recoverable.

8. Data Subject Rights

8.1. Your rights. You have the following rights:

Right of access - to obtain confirmation as to whether we process your personal data and to receive a copy of the data we hold.
Right to rectification - to have inaccurate personal data corrected and incomplete data completed.
Right to erasure ('right to be forgotten') - to request deletion of your personal data in certain circumstances.
Right to restriction of processing - to obtain a temporary restriction of processing in specific cases.
Right to data portability - to receive your personal data in a structured, commonly used and machine‑readable format and to transmit it to another controller.
Right to object - to object, on grounds relating to your particular situation, to processing based on our legitimate interests, including profiling (we do not engage in automated individual decision‑making, including profiling).
Right to withdraw consent - if processing is based on your consent, you may withdraw it at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint - to file a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

8.2. How to exercise your rights. You may exercise your rights by sending a request to us:

by email from the address associated with your account: support@imstocker.com;
via the feedback form on the website: https://imstocker.com/en/page/feedback.

8.3. Response time. We will respond within the timeframes established by applicable law (usually from 10 business days to one month depending on your location and the complexity of the request). That period may be extended by two further months where necessary, taking into account the complexity and number of requests. In such case we will inform you of the extension within one month of receipt of the request.

8.4. Consequence of deletion. You acknowledge that deletion of data necessary for the functioning of the personal account will make it impossible to continue using the Service.

9. Cookies and Similar Technologies

9.1. What are cookies? Cookies are small text files placed on your device by the website. They help us provide core functionality (e.g., login), remember your preferences, and analyse how you interact with the Service.

9.2. Types of cookies we use:

Strictly necessary cookies - essential for the operation of the Service (e.g., session cookies for login). These are set automatically and do not require your consent.
Analytical/performance cookies - used by Yandex.Metrica and Umami to collect anonymised data about the number of visitors, pages viewed, traffic sources, etc. These cookies are only placed with your prior consent, which you can provide through the cookie banner on our website.

9.3. Managing cookies. You can manage or withdraw your consent at any time by changing your browser settings. Please note that disabling certain types of cookies may affect the functionality of the Service.

10. Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including, as appropriate, encryption, access controls, regular testing and assessment of the effectiveness of the measures, and procedures for handling security incidents. Our staff and any third parties acting on our behalf are bound by confidentiality obligations.

11. Changes to the Policy

11.1. Right to amend. We reserve the right to modify this Policy at any time. The new version takes effect from the moment it is published on the website, unless otherwise stated in the updated version.

11.2. User notification. If we make material changes that affect your rights or the way we process personal data, we will notify you by posting a prominent notice on the website or in your personal account, or by sending an email to the address you provided, at least 7 (seven) days before the changes take effect.

11.3. Acceptance of changes. If you continue to use the Service after the changes take effect, you are deemed to have accepted the revised Policy, unless the changes introduce new purposes of processing or expand the scope of data collected. In such cases, we will seek your separate consent before applying the changes.

12. Contact Information

If you have any questions about this Policy or wish to exercise your rights, please contact us:

Data Controller:
"Imstocker" LLC
Email: support@imstocker.com
Website: https://imstocker.com/en/page/feedback