Privacy Policy

1. Who is responsible

The data controller for the Website is i37b. For any privacy request — access, deletion, withdrawal of consent or a complaint — contact us at privacy@i37b.com.

If your request concerns data inside the i37b application (your company’s accounts, transactions or financial records), it is handled under the in-product privacy notice available after you sign in.

2. Scope of this policy

This policy covers only the public marketing Website (i37b.com, including the Russian version at i37b.com/ru/). It does not cover the i37b application, third-party websites we link to, or services you reach by following a link such as “Start free”.

3. What data we process

Data you actively provide: none. The Website has no forms, accounts or comments, so you do not submit personal data to us by using it.

Technical server data: like any web server, our hosting records standard request logs (IP address, browser user-agent, requested URL, date and time, referrer). We use these solely to keep the Website secure and available and to diagnose faults.

Analytics data: only if you accept analytics in the consent banner, our analytics providers process information about your visit (pages viewed, approximate location derived from IP, device and browser type, and interactions such as clicking a call-to-action). We do not use this to identify you by name.

4. Cookies and analytics

The Website uses no analytics or marketing cookies until you choose “Accept” in the consent banner. Declining keeps all analytics fully switched off, and the Website remains fully functional without them. There are no strictly necessary cookies for normal browsing.

Google Analytics 4 (both language versions): after consent, Google sets cookies (e.g. _ga and _ga_*) to distinguish visitors and measure usage. These cookies are scoped to the .i37b.com domain, which means they may also be sent with requests to our other subdomains such as app.i37b.com. We have IP-anonymisation behaviour enabled and do not combine this data with any account profile.

Yandex Metrica (Russian version /ru/ only): after consent, on the Russian version of the Website only, Yandex Metrica sets its own cookies to measure usage. Session recording (Webvisor) and click-mapping are disabled. Metrica is not loaded on the English version.

You can withdraw consent at any time (see “Your choices and rights”). Clearing the analytics cookies in your browser, or clearing this site’s local storage, will make the consent banner ask again.

5. Why we process data (legal bases)

Under the EU/UK GDPR, where it applies, our legal bases are: (a) your consent (Article 6(1)(a)) for all analytics; and (b) our legitimate interests (Article 6(1)(f)) for keeping the Website secure and available through standard server logs.

You can withdraw consent for analytics at any time without affecting the lawfulness of processing carried out before withdrawal.

6. International data transfers

Google Analytics may transfer data to Google servers outside your country, including the United States. Google relies on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses for such transfers.

Yandex Metrica, which runs on the Russian version only, transfers data to Yandex servers in the Russian Federation. Because Russia is not subject to an EU adequacy decision, we load Metrica solely on the basis of your explicit consent under Article 49(1)(a) GDPR, and only on the /ru/ version of the Website.

7. How long we keep data

Server logs are retained for a short period (typically up to 30 days) and then deleted or anonymised, unless needed longer to investigate a security incident.

Analytics data is retained according to the providers’ settings and our configured retention period (no longer than 14 months for Google Analytics user- and event-level data).

8. Your choices and rights

You can accept or decline analytics at any time through the consent banner, and change your mind later by clearing cookies for this site.

Where the GDPR or a similar law applies, you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent. To exercise any of these, email privacy@i37b.com.

You also have the right to lodge a complaint with your local data protection authority.

9. Data security

The Website is served only over encrypted HTTPS connections (HSTS enforced). It is a static site with no backend database and stores no payment details. Access to analytics accounts is restricted to authorised personnel.

10. Children

i37b is a business tool intended for companies and professionals. The Website is not directed at children and we do not knowingly collect data from anyone under 16.

11. Changes to this policy

We may update this policy as the Website evolves. When we do, we change the “Last updated” date above. For material changes that affect analytics, we will ask for your consent again.

12. Contact

Questions about this policy or your personal data: privacy@i37b.com.