Перейти к основному контенту
SinApps
// legal · privacy policy

Privacy Policy

Effective: May 14, 2026Version: 1.0Place of contract: Petropavlovsk-Kamchatsky, Russia

This Policy defines how HireMeUp processes and protects user personal data under RF Federal Law No. 152-FZ of 27 July 2006 'On Personal Data' and other applicable Russian regulations. The Russian version at /ru/legal/privacy is the legally binding original.

1.Data controller

The personal-data controller is Arseniy Vladimirovich Poddubsky, self-employed, INN 410909170825, registered in Petropavlovsk-Kamchatsky, Russia. Contact: support@sinapps.ru.

2.Definitions

  • Personal data (PD) — any information relating directly or indirectly to an identified or identifiable individual.
  • Processing — any operation on PD: collection, recording, storage, use, transfer, blocking, deletion.
  • Data subject — the individual to whom the processed data relates (the Service user).
  • Service — the HireMeUp platform at sinapps.ru.

3.Categories of data processed

  • email address;
  • full name (for employer registration or verification);
  • mobile phone (optional);
  • passport data and photo (only for paid tariffs, on voluntary verification);
  • company name, INN/OGRN (for business accounts);
  • profile info: photo, skills, portfolio;
  • geolocation: city / region (user-selectable);
  • transaction history: payments, subscription status, partner balances;
  • technical data: IP, browser/OS, cookies, security events.

4.Purposes of processing

  • user registration and identification;
  • delivery of the Service under the selected tariff;
  • payment processing via Robokassa;
  • employer verification (on request);
  • AI ranking and analysis of bids (de-identified);
  • support and service notifications;
  • partner-commission accounting;
  • compliance with Russian law including tax law;
  • security and incident investigation.

5.Legal basis

Processing is based on (Art. 6 of FZ-152):

  • the data subject's consent (given on registration);
  • performance of the agreement (Public Offer acceptance);
  • obligations imposed by Russian law (tax accounting, FZ-54 fiscal receipts).

6.How data is processed

Processing is automated using Supabase cloud infrastructure (Supabase Inc., storage region: Frankfurt, EU) with at-rest (AES-256) and in-transit (TLS 1.3) encryption.

Access is limited to the controller and authorized persons, only to the extent necessary for their duties.

Scanned ID documents are kept in secure storage accessible only via time-limited signed URLs and are deleted after the retention period.

7.Third-party data sharing

The controller shares the minimum necessary PD with the following parties:

  • LLC Business Element (Robokassa, INN 5407329863) — payment processing and fiscal receipts.
  • Supabase Inc. (US/EU) — cloud storage (Frankfurt servers).
  • Sberbank GigaChat / Yandex Cloud YandexGPT — AI processing of de-identified text. PD is not sent to these services.
  • Vercel Inc. — hosting and content delivery.
  • Telegram Messenger Inc. — service notifications (with consent).

8.Retention

Data is processed until consent is withdrawn or the service agreement ends. After that, PD is retained for 3 (three) years for tax-law compliance, then deleted or anonymized.

9.Data subject rights

The data subject may:

  • obtain information about the processing of their data;
  • request rectification, blocking, or deletion;
  • withdraw previously given consent;
  • complain to Roskomnadzor or a court.

Requests go to support@sinapps.ru and are answered within 30 (thirty) calendar days.

10.Cookies

The Service uses:

  • essential cookies (sessions, locale, CSRF) — the Service won't work without them;
  • functional cookies (preferences, theme) — improve UX;
  • analytics cookies (aggregated metrics) — help improve quality.

Users can disable cookies in browser settings; some features may be limited.

11.Policy changes

The controller may amend this Policy. The current version lives at /legal/privacy. Material changes are announced via email or in-product notice at least 7 days in advance.

12.Contacts

Use the channels on /legal/contacts.