This Privacy Policy explains how eContractor, the econtractor.com.ua website and the related CRM ERP platform process personal data of visitors, customer representatives and platform users.
The website and platform are operated by eContractor. Questions about privacy, access, correction or deletion of data can be sent to info@econtractor.com.ua.
This policy applies to econtractor.com.ua, lead forms, demo requests, CRM sign-in and user activity inside the eContractor platform.
Website forms may collect a name, email, phone number, company name, selected plan or other context needed to respond to the request.
We may also process technical data required for website operation and security, including IP address, browser data, request date and time, source page and anti-spam tokens.
This data is used to process requests, respond to messages, prepare a demo, advise on platform setup and protect forms from automated abuse.
Inside the CRM ERP platform, eContractor may process account user data such as name, email, role, access permissions, profile image, login history, authorization tokens and interface settings.
The platform may also contain operational data entered by the customer or its users: leads, customers, jobs, tasks, documents, products, services, warehouses, financial records, files, comments, events and other business-process data.
The customer is responsible for the lawful entry of personal data relating to its customers, employees, contractors, suppliers and other persons, and for having a valid legal basis for such processing.
If Google sign-in is enabled, the user authenticates through Google OAuth / Google Sign-In, and eContractor receives only the data required to identify the user and provide access.
During Google authorization, the system may receive the user's email, profile name and profile image. These data are used to verify CRM access and create or update the user profile.
eContractor does not use Google data for advertising, sale, profiling, credit scoring or transfer to advertising platforms or data brokers.
The user may revoke eContractor access in Google Account security settings. After revocation, Google sign-in may stop working while other access methods may remain available depending on account settings.
Data is used to provide access to the platform, authenticate users, operate the CRM, process requests, provide consultations and support, issue invoices, administer accounts and maintain security.
Customer operational data is used for the expected platform functions: leads, tasks, jobs, warehouse, documents, payments, reports, integrations, API, notifications and automations.
Aggregated or anonymized statistics may be used to improve the product if they do not identify a specific person or company.
We do not sell personal data and do not share it with third parties for their own marketing.
Data may be shared only where needed to operate the service: hosting providers, email services, authorization providers, integration services, payment or accounting tools used by the customer or required to perform an agreement.
We may disclose data if required by law, court decision or a competent authority, or where necessary to protect the rights, security and legitimate interests of eContractor, customers or users.
We apply reasonable organizational and technical safeguards, including access restrictions, user authorization, secure cookies, permission separation and backup or technical procedures appropriate to the service.
The authToken cookie may be set as HttpOnly, Secure and SameSite=Lax to maintain a user session. Its standard lifetime may be up to 7 days unless configured otherwise.
No electronic service can guarantee absolute protection against every risk. Users must keep credentials confidential and report suspected unauthorized access promptly.
Website request data is retained for the period necessary to process the request, communicate, sell, support and meet legal or accounting duties.
CRM account data is retained while the contract or active use continues, and after termination may be retained for a reasonable period for backup, security, dispute resolution and financial or legal obligations.
Deletion requests are reviewed considering legal grounds, technical limitations, contractual obligations and the need to keep certain records for reporting or rights protection.
A user may request access, correction, restriction of processing or deletion of personal data where this does not conflict with law, contract or legitimate interests of eContractor.
Requests should be sent to info@econtractor.com.ua. To protect data, we may ask for identity confirmation or proof of authority to represent the relevant company.
If data was entered into the CRM by a customer, the request may be redirected to or coordinated with the relevant account administrator.
We may update this Privacy Policy when service functions, integrations, processing methods or legal requirements change.
The current version is published at econtractor.com.ua/ua/privacy or the corresponding localized URL. If changes materially affect processing, users may be notified through available channels.