Privacy Policy

This Privacy Policy describes what personal data the Profiforce website and service (the “Site”, “we”) collect and how we use it. Data controller: Sole proprietor (IE) Gleb Bychkov, TIN (ՀՎՀՀ) 20318469, state registration number 286.1589295, address: Republic of Armenia, Yerevan, Arabkir district, Khapantsyan St. 51/4, apt. 6, 0014, e-mail hello@profiforce.com.

1. What we collect

Your email address and name (if provided) when you register, sign in to your account or pay; if you sign in with Telegram — your Telegram ID, name and username; your plan and subscription term, the automations you have added, your payment and request history and payment statuses; support requests and conversations with the AI consultant in Telegram (message texts and the Telegram ID linked to your account); technical data — functional cookies and IP addresses in server logs; anonymised visit statistics — page address, referrer, device type, screen and browser window size, scaling, system theme and browser language, country, time on page and the visitor’s NETWORK instead of the full IP address (the last part of the address is dropped, so such a record cannot identify a particular person). If you are signed in to your account, visit statistics are linked to your account, and in the setup wizard we see which steps are done and whether the automation is running — but not what you entered. The data you enter in the setup wizard (keys and access to third-party services, the knowledge base) is stored on our servers encrypted and used only to run your automations. We do not receive or store card details: payments are processed by the payment provider.

1.1. Data we process on behalf of our clients. Profiforce automations process data of people our clients work with: job candidates, employees and members of work chats, tenants and guests, etc. The controller (operator) of this data is our client, who decides why and how it is processed. We process it only on the client’s instructions (section 13 of the Offer), do not use it for our own purposes and do not train models on it. If your data reached us through a client’s bot, please contact the client first — the contact is shown in the bot (the /privacy command); we will help them fulfil your request. If you use an automation for yourself (job search, utility outage alerts), we process the data you provide to it (your CV and work history, addresses to watch for outages, tasks and messages) only to run it.

2. How we use data

To register you and sign you in to your account (via an email link or with Telegram); to process and charge subscriptions and requests and provide access to the service; to send payment confirmations, receipts and reminders about your subscription term and upcoming data deletion; to notify you about automation updates (at your request); to answer your requests and questions to the AI consultant; to analyse frequent questions to improve the site and the help center; to run your automations; to help with setup and improve the service based on how customers use the site and the wizard; to comply with the law. The purpose “improving the service” does not apply to data we process on behalf of clients.

3. Legal bases

Performance of the contract (providing the subscription and services on request), your consent (requested notifications) and legitimate interest (Site security, sales accounting).

4. Cookies

The Site uses functional cookies only: cart, selected language and currency, applied promo code, account session and a technical notification cookie. The Cloudflare check may set its own technical cookie when it needs to confirm that a request came from a human. There are no advertising or third-party analytics cookies; if they appear, we will update this Policy and ask for consent.

5. Who we share data with

Payment providers — to process payments; the email service — to send emails; the hosting provider (Hostinger International Ltd., server in the United Kingdom) — to host the Site and store data; Cloudflare — to protect the forms and the live demo from bots: the Turnstile check runs invisibly and processes technical browser data and the IP address (see the Turnstile Privacy Policy Addendum). We determine the visitor’s country from a Cloudflare technical header and do not pass visitor addresses to third-party geolocation services. AI model providers (OpenRouter and, through it, Google and OpenAI, as well as Groq) — the text of messages to the AI consultant, the live demo and support, as well as the data your automations process on the subscription AI (messages, photos, voice notes, documents), to generate a reply or sort a request; these providers may be located outside the Republic of Armenia, including in the USA. Requests from automations to the subscription AI are sent with data retention by the provider and use for training prohibited (Zero Data Retention mode) where the provider supports it. Telegram — for conversations in Telegram and Telegram sign-in. Sharing is limited to the necessary minimum; we do not sell personal data or share it for advertising.

6. Retention

Account data — while you have an account, or until deletion on request; payment data — as required by accounting law; update-notification emails — until you unsubscribe or request deletion; the visit log (including the part linked to an account) — 90 days; conversations with the AI consultant — 12 months; automation settings and setup wizard data — while the subscription is active and for 90 days after it ends, then deleted automatically (we warn you 30 and 7 days before deletion), or earlier on request; data processed by automations — for the periods the client chose in the settings and no longer than 90 days after the subscription ends. Backups are kept for a limited time and are replaced as new ones are made.

7. Your rights

You may request a copy of your data, its correction or deletion, or withdraw consent — write to hello@profiforce.com. We will respond within a reasonable time and delete data unless we are legally required to keep it. You may also lodge a complaint with the authorised personal data protection body of the Republic of Armenia (the Personal Data Protection Agency under the Ministry of Justice).

8. Security

The connection is protected with HTTPS; sessions are cryptographically signed; access to data is restricted; secrets are stored outside the source code. If unauthorised access to data occurs, we will promptly notify the affected clients and, where required, the competent authority.

9. Children

The Site is not intended for persons under 16; we do not knowingly collect their data. If a client’s bot accepts data of persons under 16, consent is given by a legal representative — the client ensures this.

10. Changes

We may update this Policy; the current version is always published on this page.

Personal data processing is governed by the laws of the Republic of Armenia, including the Law “On Protection of Personal Data”. Data questions: hello@profiforce.com. Version dated October 27, 2026.