This policy explains what personal data the website opencart-modules.com.ua (the “website”) collects, why, who it is shared with, how long it is kept and how you can control it. By using the website, creating an account or placing an order, you agree to this policy.
1. Who we are
The website belongs to the AirProjects web studio (airprojects.pro/ua). We sell modules for OpenCart and ocStore and are responsible for processing your personal data on this website.
For any questions about your data, email mail@airprojects.pro or call +38 096 164 64 46, +38 073 164 64 46.
2. What data we collect
- Account data: name, email address and password. The password is stored only in an irreversibly encrypted form — we cannot see it.
- Sign in with Google: if you sign in with Google, we receive your name, email address and Google account ID. We get no access to your mailbox, contacts or other Google data.
- Orders: which modules you bought, amounts, currency, language, payment status and date, and the shop domains the licences are issued for.
- Payment data: the transaction number and the payment system’s response about the result. It may include masked card details (for example, the first and last digits of the number). The full card number, expiry date and CVV are entered on the payment system’s page — we neither receive nor store them.
- Licences: the licence key and the domain it is bound to.
- Technical data: IP address, browser and device type — for sessions, abuse protection and in server logs.
- Correspondence: whatever you tell us yourself when you write to us or contact support.
3. Why we use it
- to create and run your account and give you access to purchases, module archives and licence keys;
- to process orders, accept payment and issue a licence for your domain;
- to send service emails about orders, licences and password resets;
- to answer your requests and provide support;
- to protect the website and accounts: limit login attempts and detect abuse;
- to meet legal requirements, in particular for payment accounting.
We process data because it is necessary to perform our contract with you (selling a module and licence), to comply with legal obligations, to protect the website (legitimate interest) or with your consent — for example, when you choose to sign in with Google.
We do not send marketing emails and we do not sell your data.
4. Who we share data with
Only those the website cannot work without, and only to the extent needed:
- WayForPay — the payment system you use to pay for orders. We pass on your name, email address, the amount and the order number. You enter your card details directly on WayForPay’s side, and they are processed under its rules.
- AirProjects licence server — creates the licence key. It receives only the domain and the module name. The module installed in your shop periodically checks the licence and sends only the key and the shop domain for this — no data about your customers, orders or settings.
- Google — if you use Sign in with Google. For guests the website loads a Google script for the quick sign-in prompt; Google may receive technical browser data under its own privacy policy.
- Hosting and email — the server the website runs on and sends emails through.
- Public authorities — only in the cases and manner expressly required by law.
5. Cookies
The website uses only necessary cookies: a session cookie (so you stay signed in and your cart is kept between pages) and a token that protects forms against request forgery. The website cannot work without them, so no separate consent is required.
We do not use analytics services or advertising cookies. If you use Sign in with Google, Google may set its own cookies.
6. How long we keep data
- account data — as long as your account exists;
- orders and payment data — for the periods required by accounting and tax law;
- licences — while the licence is valid, because otherwise the module in your shop could not check it;
- password reset links — valid for 60 minutes and deleted automatically;
- sessions end after a period of inactivity; server logs are kept for a limited time.
7. How we protect data
The website runs over a secure HTTPS connection, passwords are stored only in encrypted form, login attempts are limited, and only the website administrators have access to order data.
8. Your rights
Under the Law of Ukraine “On Personal Data Protection” and, for visitors from the EU, the General Data Protection Regulation (GDPR), you have the right to:
- know what data we hold about you and receive a copy;
- correct inaccurate data;
- request deletion of your data or restriction of its processing;
- object to processing and withdraw consent where processing is based on it;
- complain to the Ukrainian Parliament Commissioner for Human Rights or to the supervisory authority of your country.
To exercise these rights, email mail@airprojects.pro from the address registered in your account. We will reply within 30 days. Payment data that the law requires us to keep can be deleted only after the required periods expire.
9. Children
The website is intended for owners and developers of online shops. We do not knowingly collect data from children.
10. Changes to this policy
We may update this policy, for example when new features appear on the website. The current version is always available on this page, with the date of the latest changes shown at the top.
11. Contacts
AirProjects, airprojects.pro/ua
Email: mail@airprojects.pro
Phone: +38 096 164 64 46, +38 073 164 64 46