Privacy policy

1. Controller

The controller responsible for data processing on this website under the GDPR is:

• Onravetoni
• E-Mail: info@onravetoni.com
• Tel.: +380 93 290 5348

2. The short version

• No advertising or tracking cookies, no retargeting pixels.
• Our analytics (Umami) works without cookies and stores nothing on your device.
• We do not sell personal data.
• Only name, email and message are required in the contact form — everything else is optional.

3. Hosting and server logs

The website and database are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (data centre in Falkenstein, Germany), which processes data solely on our behalf.

When you visit the site, technically necessary data is processed: IP address, date and time, page requested, referrer, browser and operating system. It is used for secure operation, attack prevention and debugging (Art. 6(1)(f) GDPR) and kept only as long as needed for that.

4. Contact form and enquiries

When you use the form we process: name, email, subject and message; optionally your website address, budget range and preferred start; the selected service, the page you came from, the site language and — if present — the referring domain and campaign parameters (utm_*) from the URL. None of this is stored on your device; it is only sent with the form.

The purpose is to handle your enquiry and prepare a proposal (Art. 6(1)(b) GDPR) and our legitimate interest in knowing which channels generate enquiries (Art. 6(1)(f) GDPR).

Internally we route enquiries via a private Telegram channel of our team, email delivery through Resend (Resend, Inc., USA) and our own client system Growth Hub (hub.onravetoni.com). After submitting you receive an automatic confirmation email that contains none of your message content.

We delete enquiries once they are fully handled, and no later than 12 months after the last contact if no contract is concluded, subject to statutory retention duties.

5. Email, Telegram and support chat

If you write to us by email or Telegram, we process the data to reply (Art. 6(1)(b) or (f) GDPR). Telegram's own privacy terms also apply.

Support-chat messages on the website are stored in our database and forwarded to our team in Telegram. A chat identifier is kept in your browser's local storage so the conversation survives a reload (see section 7).

6. Analytics with Umami

We use Umami, a privacy-friendly open-source analytics tool that we run ourselves. It sets no cookies and stores nothing on your device. It records pages viewed, referrer, campaign parameters, device type, browser, country and clicks on certain buttons (e.g. “Send enquiry”). IP addresses are not stored; visits are grouped only by an anonymised, periodically rotating value.

The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR). You can object, for example by blocking JavaScript or the script in your browser.

7. Cookies and local storage

We only use strictly necessary storage, which does not require consent:

• Login cookies (session, CSRF protection, post-login redirect) — only if you sign in to the client area; up to 30 days.
• “onravetoni-theme” in local storage — remembers whether you chose the light or dark theme.
• “onravetoni_support_chat_session” in local storage — only if you use the support chat, to keep the conversation.

8. Client area and sign-in

You sign in to the client area via an email link delivered through Resend. We store your email, account data and tool usage to perform the contract (Art. 6(1)(b) GDPR) until the account is deleted.

When you use AI tools (“workers”), your input is sent to the selected AI provider for processing (e.g. Anthropic, OpenAI, Google, Groq, DeepSeek, OpenRouter). Please do not enter sensitive personal data there. In private mode, processing happens locally on your computer and nothing is sent to us. In cloud mode we do not store the text of requests and answers by default — only technical billing data (model, tokens, cost, time, status). How long the AI provider keeps data is governed by its own terms.

9. Payments

Online payments, balance top-ups and automatic subscriptions are currently disabled. This website does not collect card details or send payment data to payment providers.

10. International transfers

Our team works from Ukraine. Enquiries and project data are processed there where needed to answer your enquiry or perform the contract (Art. 49(1)(b) GDPR).

Some providers (including Resend and AI providers) are based in the USA or other third countries. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on EU Standard Contractual Clauses.

11. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Just write to info@onravetoni.com; we reply within one month.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work.

There is no automated decision-making, including profiling.