Privacy Policy

PLEASE READ THIS POLICY CAREFULLY

BEFORE USING THE SOFTWARE We recommend saving and printing this document, as it contains legally binding terms.

1. Introduction

1.1. This Privacy Policy describes the measures taken to protect information provided by users when using our MakSec application (hereinafter referred to as the "Application").

2. About the Company and Relationships with Users

2.1. MAKSEC (hereinafter referred to as the "Company") is a business entity established and registered in the Russian Federation under Primary State Registration Number (OGRN) 1256600045767. Taxpayer Identification Number (INN): 6678144480.

2.2. Company Contact Information:

2.2.1. Receipt of Messages and Calls. Any electronic messages shall be deemed received by You 24 hours after they are sent to You via the built-in notification system of the MakSec Application, SMS message, push notification, or email (where applicable), or from the moment they are published on our Website (where applicable).

2.2.2. Correspondence Address. Unless otherwise specified, correspondence for the Company must be sent to the following address: info@maksec.ru

3. Information Processed by the Company and Provided by Users

3.1. The Company receives information from the MakSec Application.

3.2. Information processing is carried out within the territory of the Russian Federation.

3.3. The Company does not take possession of Your personal data, does not store it, does not dispose of it, and does not perform any other actions that may qualify as the use of such data.

3.4. If You provide any information or materials relating to a third party, You must ensure that such sharing of information with us and our subsequent use of such information complies with applicable law. For example, You must notify the third party about the processing of his/her data and obtain his/her consent where required by applicable law.

3.5. You may also consent to the disclosure to us of information about You by third parties who obtained such information from You.

3.6. If You do not agree to the Company's processing of information, You may not use the Company's products and services.

3.7. The Company processes the following data:

3.7.1. License information for the purpose of verifying the legitimacy of the Application's use, enabling interaction between the Application and OOO MAKSEC infrastructure for updates, databases, etc.;

3.7.2. Product information, in particular which functionality is being used;

3.7.3. Device information (model, operating system, analyzed applications and services, etc.), which may be required for technical support and also helps us analyze cybersecurity threats by showing how many devices were exposed to a specific threat;

3.7.4. Detected threats for the analysis of threats, their sources, fraud methods, etc., allowing us to improve the quality and effectiveness of protection for each user;

3.7.5. Information about visited URLs. URLs are transmitted to us to verify whether they are malicious. Such information also helps create lists of safe/malicious websites used to reduce false positives. Information about logins and passwords is removed from visited URLs, if contained in the original browser request, before the hostname or IP address is processed. There is no purpose to process user logins or passwords. All reasonable and sufficient measures are taken to avoid processing such data;

3.7.6. Operating system events, suspicious files, dump files, and trace files. New malware can usually only be detected through suspicious behavior. Therefore, data about processes running on the device is analyzed. If an unknown file with suspicious behavior is detected on the device, it may automatically be sent to us for deeper analysis using machine learning technologies and, in certain cases, by virus analysts;

3.7.7. User contact information. Email addresses and phone numbers are used for authorization in the Application. Email addresses may also be used to send security notifications (for example, important alerts). Names, nicknames, or other identifying user information are not processed;

3.7.8. Phone numbers and messenger identifiers.

4. Grounds for Information Processing

4.1. Information is processed for specific and predefined purposes that comply with Russian Federation legislation and are related to the activities of OOO MAKSEC.

4.1.1. To ensure performance of the contract with users and provide the declared functionality of products and services;

4.1.2. To protect users from known cybersecurity threats;

4.1.3. To verify user licenses;

4.1.4. To update antivirus databases used;

4.1.5. To improve the effectiveness of protecting devices, networks, and information systems, including faster responses to new cybersecurity and network threats, improving the effectiveness of product protection components, and reducing false positives;

4.1.6. To detect complex and new cybersecurity threats and accelerate responses to them;

4.1.7. To improve the quality and usability of products and services, including functionality and user interface;

4.1.8. To provide technical support for products and services.

5. Legal Grounds for Information Processing

5.1. The legal grounds for processing depend on the purposes of data processing:

5.1.1. performance of the license agreement for use of the Application (contract);

5.1.2. legal requirements (for example, taxation purposes or requests from law enforcement authorities);

5.1.3. legitimate interest, regarding storage and processing of information within our infrastructure and analysis for recent and potential cyber threats using artificial intelligence and/or expert analysis by our specialists (for example, statistical analysis, where data is anonymized during such processing).

6. Information Security: How We Protect Your Confidential Information

6.1. The foundation of our business is information protection. All data You provide is confidential by default. We take reasonable and sufficient technical and organizational measures to protect information, taking into account possible risks and applying advanced information security practices and standards.

6.2. The foundations of our information security system include:

6.2.1. the presence of information security specialists who meet the requirements of Russian Federation legislation on information security;

6.2.2. assessment of information security risks and implementation of appropriate organizational measures and information protection tools;

6.2.3. evaluation of the effectiveness of protection measures;

6.2.4. appropriate training and access control for our employees and contractors who need to know the information in order to process it on our behalf and who are bound by strict contractual confidentiality obligations regarding the data.

7. Notice of Amendments

7.1. The Company will endeavor to notify You in advance of all amendments, except those listed below, before they take effect, by posting an updated version of the Policy in the relevant section of the Software or by publishing it on the website. In the event of the following amendments, You will also be notified; however, the

following amendments may take effect earlier than the above-mentioned period:

7.1.1. amendments made in Your favor;

7.1.2. amendments relating to new products and services provided to You.

7.2. Disagreement with Amendments. If amendments are made, You will be informed of the date they come into effect. If You do not agree with the amendments to the Agreement, You must close Your Account and delete the Application.