Privacy
Policy

We process only the data needed for operation of the Service, placing and performing Orders, processing payments, providing support, ensuring security, analytics, complying with law and protecting our rights.

Data provided by the User

We may process:

• e-mail address;
• name, nickname, login or username, if provided by the User;
• data specified during registration or when placing an Order without registration;
• links and identifiers of Order Objects;
• Order parameters: platform, category, quantity, country, Service type, Order comment and other selected settings;
• messages and support requests;
• data needed for a refund, payment check, disputed transaction or fraud protection;
• data needed to participate in the partner program or use the API, if the User uses those functions;
• other data voluntarily provided by the User through website forms, e-mail, chat, Telegram bot or other communication channels.

Order data without registration

Promobox may allow the User to place an Order without creating an Account. In that case, the User provides an e-mail address and data needed to place, pay for, perform and verify the Order.

The e-mail address provided when placing an Order without registration is used to:

• identify the Order;
• send Order notifications;
• contact the User regarding performance;
• process requests, claims and refunds;
• verify payments and prevent fraud;
• perform the Terms of Use and comply with legal requirements.

The User is responsible for the accuracy of the e-mail address specified when placing an Order.

Registration, Account and Personal Account data

If the User registers in the Service, we may process:

• e-mail address;
• login, username or profile name;
• protected access identifier, such as a password hash or OAuth identifier;
• Order history;
• User Balance data and related operations;
• API key data, if the User uses the API;
• partner data, if the User uses the partner program;
• technical login data needed for security.

We do not store the User’s password in plain text.

Data received when logging in through Google, Yandex or another OAuth service

If the User registers or logs in to the Service through Google, Yandex or another third-party authorization service, we may receive from that service the data that the User allowed it to transfer during authorization.

Usually this may include:

• e-mail address;
• name or displayed profile name;
• account identifier in the third-party service;
• avatar, if transferred by the third-party service.

We use this data only for registration, login to the Account, communication with the User, security and performance of the Terms of Use.

Promobox does not receive the User’s password from Google, Yandex or another third-party authorization service.

Payment data

When paying for Services, we may process data needed for accounting and payment verification:

• payment amount;
• payment method;
• payment date and status;
• Order number or identifier;
• payment transaction identifier;
• data needed for a refund, payment cancellation, disputed transaction check or fraud protection.

Promobox does not receive or store the full bank card number, CVV/CVC code or other data that would allow Promobox to make a card payment independently. Such data is processed by payment partners on their protected payment pages.

Technical data

When the User uses the website and the Service, basic technical data may be processed automatically:

• IP address;
• date and time of access to the Service;
• device type, browser and operating system;
• cookie and session identifiers;
• technical logs, errors and security events.

This data is needed for website operation, protection against abuse, error diagnostics, security and basic analytics.

Data from third-party services

We may receive data from payment partners, analytics services, anti-fraud systems, support services, hosting providers, e-mail services, Telegram bots and other technical providers if this is needed for operation of the Service, payment processing, support, security or Order performance.

We process personal data for the following purposes:

• operation of the website and the Service;
• placing, paying for, performing and verifying Orders;
• placing Orders without registration;
• registration, login and Account maintenance;
• maintaining the User Balance;
• sending service notices about Orders, payments, refunds, statuses and security;
• processing payments, refunds, cancellations and disputed transactions;
• user support and responding to requests;
• preventing fraud, abuse and unauthorized access;
• complying with requirements of law, banks, payment systems and public authorities;
• accounting and tax records;
• basic analytics, improving Service operation and fixing errors;
• sending informational and marketing messages about Promobox, if there is a legal basis for this;
• protecting the rights and legitimate interests of Promobox, users and third parties.

For users from the Russian Federation

We process personal data on the following bases:

• the User’s consent;
• performance of the Terms of Use, agreement or Order;
• performance of legal obligations;
• rights and legitimate interests of Promobox, provided that the User’s rights and freedoms are not violated;
• processing needed to review requests, refunds, disputes, prevent fraud and protect the Service.

For users from the EU / EEA and other jurisdictions where GDPR applies

If GDPR or similar legislation applies to the processing, we use the following legal bases:

• performance of a contract — when data is needed to place an Order, pay for it, perform a Service, provide an Account or support;
• consent — for certain types of cookies, marketing communications or other cases where consent is required;
• legitimate interest — for fraud prevention, security, analytics, protection of rights, Service improvement and dispute review;
• legal obligation — for accounting, tax, payment and other mandatory records, as well as for responding to lawful requests from public authorities;
• establishment, exercise or defence of legal claims — for preparing, bringing, defending or settling claims.

The User may request additional information about the applicable processing basis using the contacts in this Policy.

• We use cookies, local storage, session identifiers and similar technologies for website operation, security, analytics, saving settings and, where there is a legal basis, Promobox marketing functions.
• Cookies may be first-party cookies set by Promobox or third-party cookies set by providers of analytics, payments, support, security, communications or other technical services.

Cookie categories

• Essential cookies are needed for the website to work, for placing Orders, authorization, security, fraud prevention, session storage and correct interface operation. Without them, the website may not work correctly.
• Functional cookies help save User settings, such as language, currency, region, interface state or other preferences.
• Analytics cookies help us understand how the website is used, find errors and improve the Service.
• Marketing and measurement cookies may be used to evaluate the effectiveness of Promobox communications, measure conversions, adjust offers and analyze how Users interact with the website. Such cookies are used only where there is an applicable legal basis.

Cookie management

The User may manage cookies through browser settings, device settings, the cookie banner or other tools available on the website.

Disabling essential cookies may make certain website or Service functions unavailable or cause them to work incorrectly.

Cookie consent

If the law requires consent for the use of analytics, marketing, measurement or other non-essential cookies, such cookies are used after the User’s consent is obtained.

The User may change or withdraw consent to non-essential cookies through available website settings or browser settings.

We do not sell Users’ personal data to third parties.

We may share data with the following categories of recipients if this is needed for the purposes stated in this Policy:

• payment aggregators, banks, payment systems and payment processing services;
• hosting providers and technical infrastructure providers;
• analytics, monitoring and error diagnostics services;
• support services, online chats, Telegram bots and communication services;
• e-mail services and notification sending services;
• anti-fraud systems and security services;
• providers of Promobox marketing and measurement tools, if such tools are connected;
• contractors involved in technical support of the Service and performance of Orders;
• accounting, legal and audit advisers;
• public authorities, courts, law enforcement agencies and other authorized persons in cases provided for by law;
• legal successors or potential purchasers of the business in case of reorganization, transfer, sale or other change of control over the Service.

Third parties receive access only to the data they need to perform their functions, unless otherwise required by law.

If a third party processes personal data on behalf of Promobox, it must process the data only for agreed purposes, keep it confidential and take measures to protect the data.

We store personal data no longer than needed for the processing purposes, unless a longer period is required by law, payment system rules, accounting requirements, tax records, fraud prevention, dispute review or protection of rights.

Approximate retention periods:

• Account data — while the Account is active and for the period needed to protect rights and comply with legal requirements after deletion;
• Order data — for the period needed to perform the Order, process claims, cover the warranty period, maintain accounting records and protect rights;
• payment data and refund information — for the period needed for accounting and tax records, chargeback processing and compliance with payment system requirements;
• support requests — for the period needed to process the request and during the period of possible claims;
• technical logs and security data — for the period needed for diagnostics, security, fraud prevention and incident investigation;
• marketing data — until unsubscribe, consent withdrawal or termination of the legal basis for processing;
• cookies — for the period specified in the settings of the relevant cookies or until deleted by the User.

After the processing purposes are achieved, data is deleted, anonymized or archived, unless further storage is required by law or by Promobox’s legitimate interests.

We take necessary organizational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, distribution and other unlawful actions.

Such measures may include:

• access rights separation;
• use of secure connections;
• protected password storage;
• monitoring of suspicious activity;
• backups;
• logging of security events;
• restricted employee and contractor access to data;
• review of payment and anti-fraud events;
• other measures appropriate to the nature of the data and the risks.

At the same time, no method of data transmission or storage can be absolutely secure. The User should also follow security measures: use a strong password, not share access with third parties, check the correctness of the e-mail address and not use another person’s payment instruments.

Depending on applicable law, the User may have the following rights:

• receive information about the processing of their personal data;
• request access to their data;
• request correction of inaccurate or incomplete data;
• withdraw consent if processing is based on consent;
• request deletion of data;
• request restriction of processing;
• object to processing;
• request data portability;
• opt out of marketing messages;
• file a complaint with the competent personal data protection authority;
• challenge a decision based solely on automated processing if such decision produces legal effects or otherwise significantly affects the User.

To exercise rights, the User may send a request by e-mail: team@promobox.cc.

We may request additional information to verify the User’s identity and link the request to a specific Account, Order or payment.

Requests are reviewed within the time limits provided by applicable law. If the request is complex or requires additional verification, the period may be extended within the limits allowed by law.

Deleting data or restricting processing may make it impossible to use the Service, perform Orders, process refunds, respond to requests or comply with legal requirements.

We may use automated technical tools for:

• fraud protection;
• detection of suspicious payments;
• prevention of unauthorized access;
• analysis of technical errors;
• evaluation of the effectiveness of the interface and Promobox communications;
• personalization of certain website elements.

We do not make decisions based solely on automated processing that produce legal effects for the User or otherwise significantly affect the User, unless expressly stated separately or required to prevent fraud and protect the Service.

For questions about personal data processing, cookies, exercise of User rights, consent withdrawal or data deletion, please contact us:

E-mail: team@promobox.cc

Website: https://promobox.cc/

To help us process the request faster, please specify:

• the e-mail address used during registration or Order placement;
• the Order number, if the request is related to an Order;
• a description of the request;
• information that allows us to confirm that the request relates specifically to you.

Name: GEOIK

OGRN: 1176952006461

INN / KPP: 6950205590 / 695001001

Registered address: Russian Federation, 170100, Tver, Simeonovskaya St. 41, premises XXI, office 31.

Business address: Russian Federation, 170100, Tver, Simeonovskaya St. 41, premises XXI, office 31.

Bank account: 40702810407100002557

Bank: PJSC JSCB AVANGARD

Correspondent account: 30101810000000000201

BIC: 044525201

E-mail: team@promobox.cc

Website: https://promobox.cc/