Privacy Policy

Last updated: August 18, 2026

1. Who we are

Duvento is operated by Oleksandr Shynkar, an individual entrepreneur (ФОП) registered in Ukraine, Vinnytsia, acting as the data controller for the Duvento Cloud service described below.

Contact: support@duvento.com

This policy applies to Duvento Cloud (the hosted subscription service). If you run the self-hosted, open-source edition of Duvento on your own server, this policy does not apply — you are the sole controller of any data processed by your own instance, and Duvento (the company) has no access to it whatsoever.

2. What data we collect

Account data: name, email address, workspace/company name, password (stored hashed), language preference.

Billing data: we do not store full card details. Payment processing is handled by our payment provider, WayForPay; we retain only transaction status, amount, currency, and a payment reference for our own records.

Data you enter about your clients: as part of using Duvento, you may enter names, emails, and other details about your own clients (agencies' customers) in order to track their domains, SSL certificates, and other assets. For this data, Duvento acts as a data processor on your behalf — you (the agency) remain the data controller and are responsible for having a lawful basis to process your clients' data. We process it only to provide the service to you.

Support data: the content of support tickets and messages you send us.

Usage data: basic technical logs (IP address, browser type, timestamps) for security and troubleshooting purposes.

Communications data: if you contact us via email or the contact form, we keep that correspondence.

Performance of a contract — account data, billing data, and the data you enter to use the service.
Legitimate interest — security logs, fraud prevention, product improvement.
Consent — marketing communications (you can withdraw this at any time), and non-essential cookies (see our Cookie Policy).

4. How we use your data

To provide and maintain the Duvento Cloud service (dashboards, reminders, SSL checks, reports).
To process payments and manage your subscription.
To respond to support requests.
To send service-related emails (renewal reminders you've configured, billing notices, security alerts).
With your separate consent, to send product updates or marketing emails — you can opt out at any time.

We do not sell your data. We do not use your data to train third-party AI models.

WayForPay — payment processing.
Our email/SMTP provider — to deliver renewal reminders and transactional emails.
Our hosting provider — infrastructure for running Duvento Cloud.
Telegram — only if you explicitly connect Telegram notifications for your workspace.

We do not share your data with advertisers. Duvento products are ad-free.

6. International data transfers

Our infrastructure may be located outside your country. Where we transfer personal data internationally, we take reasonable steps to ensure it is protected consistently with this policy and applicable law (e.g., standard contractual clauses where required for EU data).

7. Data retention

We retain account and client-asset data for as long as your workspace is active, plus a reasonable period after cancellation in case you wish to reactivate or export it. You can request deletion at any time (see Section 8). Billing records are kept as long as required by applicable tax and accounting law.

8. Your rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Export your data in a portable format (see also our self-host export feature)
Object to or restrict certain processing
Withdraw consent at any time, without affecting past processing

To exercise any of these rights, contact us at support@duvento.com. If you're in the EU and unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

9. Security

We use reasonable technical and organizational measures (encrypted connections, hashed passwords, access controls) to protect your data. No system is 100% secure, and we cannot guarantee absolute security.

10. Children

Duvento is a B2B tool intended for business use and is not directed at children. We do not knowingly collect data from anyone under 16.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or an in-app notice. Continued use of Duvento Cloud after changes take effect constitutes acceptance.

12. Contact

Questions about this policy or your data: support@duvento.com