Privacy policy

1. Who is responsible for the data

The controller of personal data is the REDCODE studio ("we"), website site.4you.com.ua. Contact for data matters: hello@4you.com.ua. This policy applies to the website, the client dashboard, the brief builder, the SiteSketch editor and related e-mail notifications.

2. What data we collect

Registration and dashboard. Name, e-mail, phone, password (stored as a hash), language and theme preferences, notification channels (Telegram, Viber, WhatsApp, Discord — if you provided them).

Orders and documents. Orders for websites, hosting, plugins and domains, invoices, support requests and the message history in tickets.

Project files. Files you upload in the dashboard to exchange with the studio. They are stored in private storage and are accessible only to you and studio administrators.

Briefs and sketches. Answers in the brief builder and layouts in the SiteSketch editor. Until you explicitly submit a brief or sketch, it remains your draft and does not reach the studio.

Technical data. IP address, browser and device type, request timestamps — standard server logs needed for security and diagnostics.

Form submissions. Name, contact and message text that you leave in the contact form on the home page.

3. Why we use it

• providing access to the dashboard and fulfilling your orders;
• issuing invoices and keeping accounting records;
• communicating about the project: statuses, invoices, ticket replies;
• showing prices in your region's currency;
• protecting against abuse, diagnosing errors, making backups;
• marketing mailings — only with your separate consent in the dashboard settings, which you can withdraw at any time.

4. Cookies and local storage

We do not use advertising trackers. The site stores in your browser:

• rc_token (localStorage) — the dashboard login token; it exists until you log out.
• rc_region and rc_region_src (cookies) — the selected pricing region and how it was determined: chosen by you manually (kept for a year) or detected automatically (kept for a day).
• theme (localStorage) — light or dark interface theme.

All of these are technical: without them the site cannot keep you logged in or show prices in the right currency. No analytics services are connected at the time this policy was published; if that changes, we will update this section.

5. Region detection by IP

To show prices in hryvnia or US dollars, the server determines your country from your IP address using a local GeoLite2 database. The IP address itself is not stored separately or passed anywhere; the result is only a region code in a cookie, which you can change with the switcher in the site header.

6. Who we share data with

Data is processed only by studio staff who need it for their work. Technical providers — the hosting provider, the e-mail service for notifications, payment systems at checkout — receive only the minimum required for their function. We do not sell data or pass it on for third-party advertising. Disclosure to public authorities is possible only in cases expressly provided by law.

7. How long we keep it

• Account data — while the account exists and up to 30 days after a deletion request.
• Invoices and payment-related documents — for the period required by tax and accounting legislation.
• Project files — while the account exists or until you delete them yourself.
• Unsubmitted briefs and sketches — until you clear them or for the draft retention period.
• Server logs — up to 90 days.

8. Your rights

You have the right to know what data we hold about you, receive a copy, correct inaccuracies, restrict processing, withdraw consent to mailings and request deletion. Most of this is available directly in the dashboard (profile, notification settings, files). For the rest, write to hello@4you.com.ua; we reply within 30 days. If you are in the EU, you also have the right to lodge a complaint with the data protection authority in your country.

9. How to delete your account

Write from the address the account is registered to, to hello@4you.com.ua, with the subject "Account deletion". We will confirm the request, delete the account, files and drafts within 30 days and keep only what we are legally obliged to keep (for example, paid invoices).

10. Security

Passwords are stored as hashes, the connection is protected by HTTPS, and dashboard access can additionally be protected with two-factor authentication. Project files are not accessible via direct links without authentication. We regularly update server software and make backups.

11. Changes to this policy

We may update this document. The date of the last change is shown at the bottom of the page; we will notify registered users of material changes by e-mail.