Legal

Personal data processing policy

Effective 18.08.2026

This policy describes how ИНДИВИДУАЛЬНЫЙ ПРЕДПРИНИМАТЕЛЬ ГУБЕНКО МАКСИМ СЕРГЕЕВИЧ (the “Operator”) processes personal data on https://macfullstack.ru and when issuing MacFullStack licenses. It is prepared under Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and other Russian law. The revision date is shown above.

1. Scope

This policy covers visiting the site, placing an order, creating and using an account, contact forms, release-note subscription, license checks by the app, and related server logs.

It does not cover local projects, databases, or services you run in the MacFullStack app on your computer: your site source is not uploaded here unless you send it yourself (for example attached to a support message).

By using the site you confirm that you have read this policy. Processing takes place in the Russian Federation and under Russian law, together with the public offer.

2. Operator

Personal data operator: ИНДИВИДУАЛЬНЫЙ ПРЕДПРИНИМАТЕЛЬ ГУБЕНКО МАКСИМ СЕРГЕЕВИЧ. INN 151005421305. OGRNIP 326265100102035. Product site: https://macfullstack.ru. Studio trade name: MAX:BENK (https://maxbenk.ru).

The Operator’s location is determined from the Unified State Register of Individual Entrepreneurs (EGRIP). Data-subject requests are handled by email; the residential registration address is not published on the site.

Privacy requests: privacy@macfullstack.ru. Contracts, licenses, and support: support@macfullstack.ru.

3. Legal bases (Art. 6 of 152-FZ)

Processing takes place where at least one basis applies:

• the data subject’s consent — site forms, the newsletter, and other cases where the law requires consent;
• entering into and performing a contract, and pre-contractual steps at the subject’s request (public offer, payment, license fulfillment, account, support);
• legal duties under Russian law (accounting and tax records, fiscal documents, lawful requests from authorities).

Necessary cookies (session, CSRF, language) are processed as technically required to run the site and keep it secure. We do not ask for a separate advertising or analytics opt-in: there are no such trackers.

4. Categories of data subjects

Site visitors; people who send a contact form; release-note subscribers; buyers and account users; representatives of legal entities or sole proprietors who leave a contact for a Teams purchase.

5. Personal data we process

Depending on the flow, the Operator may process:

• email address and name (if provided);
• message subject and body;
• order data: plan, amount in RUB, status, promo code, YooKassa payment ids;
• account password hash (the password is not stored in plaintext);
• license key, seat and device limits, term, activation data, and a technical device identifier as needed to enforce the device cap;
• IP address, request time, User-Agent, UI language — in server logs, anti-abuse controls, and when the app checks a license or the update feed;
• records of consent and offer acceptance (including IP).

The Operator does not receive or store card data: YooKassa processes payments. Special categories of personal data (Art. 10 of 152-FZ) and biometrics are not requested. The Operator does not take automated decisions that create legal effects beyond performing the license contract.

6. Purposes

• entering into and performing the MacFullStack license agreement;
• taking payment, issuing a key, running the account, and enforcing the device cap;
• replying to requests and providing support;
• sending release news — only with separate consent (and advertising law where the mailing is commercial);
• keeping the site working and safe (CSRF, session, rate limits);
• complying with law and protecting the Operator’s and the subject’s rights.

7. Processing operations and third parties

The Operator collects, records, organises, accumulates, stores, updates, retrieves, uses, discloses (provides, grants access), blocks, deletes, and destroys data as needed for the purposes above.

Payments are processed by YooKassa (a money-transfer operator; current details are on yookassa.ru). This site never sees the full card number.

Processors acting on the Operator’s instructions may include hosting and email infrastructure. A current list is available on request at privacy@macfullstack.ru.

Personal data is not sold. Disclosure may occur pursuant to a lawful request from a court, law-enforcement body, Roskomnadzor, or another authorised authority.

8. Data localisation and cross-border transfer

For personal data of Russian Federation citizens, the Operator complies with Art. 18(5) of 152-FZ: recording, organisation, accumulation, storage, updating, and retrieval use databases in the Russian Federation, or processors that guarantee this requirement.

Cross-border transfer is not a purpose of this site. If it becomes necessary, the Operator will meet Art. 12 of 152-FZ before such transfer starts.

9. Retention

• order and license data — for the life of the contract and for accounting/tax statutory periods;
• account data — while the account exists, plus a reasonable period after a deletion request (unless law requires longer);
• contact messages — up to 3 years after the last reply unless law requires otherwise;
• newsletter — until consent is withdrawn or the address is unsubscribed;
• server logs — typically up to 12 months unless an incident requires longer;
• consent records — for the processing period plus limitation periods.

10. Your rights (Art. 14 of 152-FZ)

You may request information about processing, access your data, require rectification, blocking or erasure, withdraw consent, restrict processing where the law allows, and complain to Roskomnadzor or a court.

Email privacy@macfullstack.ru from the address you used on the site. The Operator replies within 152-FZ time limits (as a rule, 10 business days from receipt of the request unless the law sets another period). The Operator may ask for information needed to identify the requester.

Withdrawal does not affect processing that was lawful before withdrawal, or processing still required to perform an existing contract or the law.

11. Cookies

The site sets only first-party necessary cookies: the Laravel session, CSRF token, and selected language. Names, lifetimes, and how to clear them are in the cookie policy. There are no ad pixels or analytics counters.

12. Security measures

Organisational and technical measures include HTTPS, restricted admin access, password hashing, CSRF, license API rate limits, and separation of card data (cards stay with YooKassa). The desktop app stores local secrets with macOS facilities (Keychain), not on this website.

13. Minors

The site and paid licenses are for people aged 18+. The Operator does not knowingly collect children’s data. If we learn a child’s data was obtained without a lawful basis, we will delete it — write to privacy@macfullstack.ru.

14. Changes

A new version is published on this page with an updated date and applies from publication unless the law requires otherwise. Material changes that affect prior consent are announced on the site or by email when required.

Seller / operator details