PRIVACY POLICY

DMT Finance Control

Version: 1.0 Publication date: 27 May 2026 Primary legal version: Ukrainian Service: DMT Finance Control Website: https://dmt.net.ua E-mail: support@dmt.net.ua

This Privacy Policy explains what data is collected, used, stored and transferred by sole proprietor Makeiev Denys Olehovych, taxpayer registration number 3050700771, address: Ukraine, Zakarpattia Region, Mukachevo, 41/64 D. Golytskoho St., e-mail: support@dmt.net.ua, hereinafter referred to as the “Data Controller”, when using the online service DMT Finance Control.

1. Data We Collect

1.1. We may collect:

• user name or business name;
• e-mail;
• phone number if provided;
• password in protected form;
• account data;
• names of companies, projects or workspaces;
• financial accounts, categories, income, expenses, transfers and balances;
• imported files, bank statements, CRM data, NovaPay/SalesDrive data;
• technical data: IP address, browser, device, login date and time;
• security logs and service logs;
• payment history;
• support requests;
• data necessary for AI assistant functionality.

1.2. We do not request and should not receive bank passwords, full payment keys, .env secrets, JWTs, API keys or other critical secrets unless a separate secure integration expressly requires it.

2. Purpose of Processing

2.1. Data is processed for:

• registration and authorization;
• providing access to the service;
• financial tracking within the service;
• import, categorization and analysis of transactions;
• charts, reports and forecasts;
• payment processing;
• user support;
• access recovery;
• service security;
• legal compliance;
• service improvement.

3. AI Features

3.1. The service may use an AI assistant as an additional feature.

3.2. Only data necessary to generate a response may be sent to AI: the user’s question, selected service section, aggregated financial indicators, amounts, categories, dates and anonymized transaction context.

3.3. Passwords, tokens, API keys, payment keys, JWTs, .env secrets or full bank details must not be sent to AI.

3.4. AI may be enabled or disabled by the service administration. If AI is temporarily unavailable, the user may see a relevant message.

4. Cookies and Analytics

4.1. The service may use technical cookies necessary for login, security and account operation.

4.2. At MVP launch, Google Analytics and Meta Pixel are not used.

4.3. If analytics or advertising tools are added later, this Policy will be updated.

5. Payments

5.1. Payments may be made through LiqPay, WayForPay, bank transfer or other available methods.

5.2. Payment data is processed by the relevant payment provider. We do not store full bank card details.

5.3. We may store information about payment fact, amount, plan, period, payment status and transaction identifier.

6. Third-Party Services

6.1. The service may use:

• Hosting Ukraine / Ukraine.com.ua;
• LiqPay;
• WayForPay;
• Let’s Encrypt;
• OpenAI API;
• GitHub;
• SMTP services and domain mail;
• other technical providers.

6.2. Third-party services process data only to the extent necessary for service operation, payments, hosting, security, communication or AI functionality.

7. Data Retention

7.1. The main infrastructure is planned or hosted on a Hosting Ukraine / Ukraine.com.ua VPS using Ubuntu, Docker, PostgreSQL, Nginx and Let’s Encrypt SSL.

7.2. Data is retained during the lifetime of the account.

7.3. After an account deletion request, data is deleted or anonymized within 30 calendar days, except for data that must be retained by law.

7.4. Backups may be retained for up to 90 calendar days.

7.5. Payment, tax, accounting or legally significant records may be retained longer if required by law.

8. Data Protection

8.1. We use reasonable technical and organizational measures:

• SSL connection;
• access control;
• password protection;
• backups;
• restricted server access;
• security logs.

8.2. No system can guarantee absolute security. The User is also responsible for the security of devices, passwords and e-mail.

9. User Rights

9.1. The User has the right to:

• know what data is processed;
• request correction of inaccurate data;
• request account deletion;
• withdraw consent if consent is the basis for processing;
• contact support@dmt.net.ua regarding personal data.

10. Account Deletion

10.1. The User may request account deletion via support@dmt.net.ua.

10.2. After confirmation, the account and related data are deleted or anonymized within 30 calendar days.

10.3. Some data may be retained longer if necessary for accounting, tax, payment or legal records.

11. International Data Transfers

11.1. Some third-party services, including AI or technical providers, may process data outside Ukraine.

11.2. In such cases, only the amount of data necessary for the relevant function is transferred.

12. Changes to This Policy

12.1. We may update this Policy.

12.2. A new version becomes effective upon publication on the website.

12.3. If changes are material, we may notify users through the interface or by e-mail.

13. Language Versions

13.1. This Policy may be available in Ukrainian, Russian and English.

13.2. In case of discrepancies, the Ukrainian version prevails.

14. Contacts

Sole proprietor Makeiev Denys Olehovych Taxpayer registration number: 3050700771 Address: Ukraine, Zakarpattia Region, Mukachevo, 41/64 D. Golytskoho St. E-mail: support@dmt.net.ua Website: https://dmt.net.ua