Last updated: July 19, 2026
We seek to collect only the minimum amount of personal data reasonably necessary to operate, secure, and support the Website and its services.
1. Data Controller
This Website is operated under the business name Hetman Software. In this Privacy Policy, “Hetman Software”, “we”, “us”, and “our” refer to Individual Entrepreneur Yuliia Vasylivna Miroshnychenko, trading as Hetman Software.
The controller of personal data processed through this Website is Individual Entrepreneur Yuliia Vasylivna Miroshnychenko, trading as Hetman Software.
Registered address: 6A Viacheslava Chornovola Street, Apartment 309, Brovary, Brovary District, Kyiv Region, 07405, Ukraine.
Privacy and data protection enquiries may be sent to: support@hetmanrecovery.com.
2. Scope of This Privacy Policy
This Privacy Policy applies when you:
- browse the Website;
- contact us by email or through a Website form;
- use the AI-powered chat assistant;
- subscribe to email communications, where that option is available;
- otherwise voluntarily provide information to us.
This Privacy Policy does not govern independent online stores, marketplaces, payment providers, distributors, resellers, or other third-party websites that may offer Hetman Software products or that may be linked from the Website.
3. No Analytics, Advertising, or Cross-Site Tracking
We do not use Google Analytics, Cloudflare Web Analytics, Cloudflare Real User Monitoring (RUM), Meta Pixel, advertising pixels, behavioural advertising systems, browser fingerprinting, or similar technologies intended to analyse visitor behaviour or track visitors across websites.
We do not create advertising profiles, use personal data for targeted advertising, or sell personal data.
Limited technical logs may still be generated by the Website server, hosting infrastructure, and security services as necessary to deliver, maintain, and protect the Website. These logs are described below.
4. Personal Data We May Process
4.1. Technical and Security Data
When you access the Website, our server, hosting infrastructure, and security providers may automatically process limited technical information, including:
- IP address;
- date and time of the request;
- requested URL and HTTP method;
- browser type and version;
- operating system and device type;
- referring page, where supplied by the browser;
- HTTP status code and technical error information;
- information associated with malicious traffic, abuse, or security events.
This information is processed only for Website delivery, diagnostics, server administration, fraud and abuse prevention, and protection against attacks. It is not used for advertising or cross-site tracking.
4.2. Support and Other Communications
If you contact us, we may process information that you voluntarily include in your message, such as:
- your name;
- your email address;
- the content of your request;
- technical information about software, a device, storage media, or a problem;
- screenshots, logs, diagnostic reports, or other files you choose to provide;
- a license key, order number, or store name that you voluntarily provide for support purposes.
Please do not send passwords, complete payment card details, private encryption keys, or personal files that are not necessary for resolving your request.
4.3. AI Chat Messages
When you use the AI-powered chat assistant, we process the messages that you enter, the assistant’s responses, a temporary session identifier, and limited technical information necessary to provide, secure, and troubleshoot the chat service.
The AI chat uses the OpenAI API. The text submitted through the chat is transmitted to OpenAI for the purpose of generating a response. OpenAI processes this information under its applicable business terms, data processing terms, security measures, and service configuration.
You should not submit passwords, payment information, software activation credentials, confidential business information, health information, or other sensitive personal data through the AI chat.
We do not use AI chat messages for advertising, cross-site tracking, or marketing profiling.
The AI assistant may produce incomplete or inaccurate responses. Its responses are provided for general informational purposes and are not used by us to make decisions that produce legal or similarly significant effects concerning users.
4.4. Email Subscriptions
If you voluntarily subscribe to product updates, technical articles, or other email communications, we may process your email address and records associated with your subscription, such as the date of subscription and unsubscribe status.
You may withdraw your consent at any time by using the unsubscribe link in an email or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Information We Do Not Collect Through This Website
Hetman Software does not collect payment card information, bank account details, billing addresses, or physical delivery addresses through this Website.
The Website does not directly process payments and does not accept orders for physical media.
Hetman Software products may be offered by independent online stores, software marketplaces, distributors, or resellers. When you choose to purchase a product from a third party, you provide your personal and payment information directly to that third party. The third party determines how it processes that information, and its own terms and privacy policy apply.
We do not send personal data collected through this Website to an independent store for the purpose of processing a purchase. If you later provide an order number, license key, store name, or similar information directly to our support service, we process it only as necessary to respond to your request.
6. Purposes and Legal Bases for Processing
| Processing activity | Purpose | Legal basis under the GDPR |
|---|---|---|
| Website requests and technical logs | Delivering the Website, diagnosing errors, maintaining availability, and protecting the Website against malicious activity | Legitimate interests — Article 6(1)(f) |
| Support and other communications | Responding to questions, providing technical support, and resolving product or licensing issues | Steps taken at the user’s request before entering into a contract, performance of a contract, or legitimate interests — Articles 6(1)(b) and 6(1)(f) |
| AI chat | Providing the chat functionality and generating responses requested by the user | Performance of a user-requested service or legitimate interests — Articles 6(1)(b) and 6(1)(f) |
| Email subscriptions | Sending communications requested by the subscriber and maintaining subscription records | Consent — Article 6(1)(a) |
| Security investigations | Detecting fraud, abuse, attacks, unauthorised access, and violations of applicable terms | Legitimate interests and, where applicable, compliance with legal obligations — Articles 6(1)(f) and 6(1)(c) |
| Legal requests and disputes | Complying with applicable law and establishing, exercising, or defending legal claims | Legal obligation or legitimate interests — Articles 6(1)(c) and 6(1)(f) |
7. Cookies
The public Website uses the two first-party cookies described below. They are not used for analytics, advertising, profiling, or cross-site tracking.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
cookie_panel |
Hetman Software | Remembers that the visitor has closed the Website’s cookie information notice so that it is not displayed repeatedly. It is not used to identify the visitor or track browsing activity. | Up to 14 months | First-party functional and user-preference cookie |
PHPSESSID |
Hetman Software | Stores a random technical session identifier used to maintain the temporary state of the AI chat and associate messages within the current conversation. Chat messages are not stored inside the cookie itself. | Browser session | First-party strictly necessary session cookie |
The PHPSESSID cookie is created when a PHP session is required, including when the AI chat functionality is loaded or used. The chat may not maintain the current conversation if this cookie is blocked.
Restricted WordPress administration pages may use additional authentication and security cookies when authorised Hetman Software personnel log in. These cookies are not set for ordinary Website visitors and are not used for public-user tracking.
In exceptional cases, Cloudflare may use a temporary strictly necessary security cookie when it presents a security challenge or verifies that a request is legitimate. Such a cookie is used for security purposes, not analytics or advertising.
You may delete or block cookies through your browser settings. Blocking a necessary session cookie may prevent the corresponding Website function from operating correctly.
8. Service Providers and Recipients
We do not sell, rent, or disclose personal data for advertising purposes. We may make limited personal data available to service providers only where necessary to operate, secure, or support the Website.
Recipients may include:
- hosting and server infrastructure providers that store Website files, technical logs, emails, or support information;
- Cloudflare, which may process network request data to provide DNS, content delivery, firewall, DDoS protection, traffic security, and abuse prevention;
- OpenAI, which processes text submitted through the AI chat to generate requested responses;
- email and communication service providers used to receive and respond to messages or deliver requested email subscriptions;
- professional advisers, regulators, courts, or public authorities where disclosure is required by law or necessary to establish, exercise, or defend legal claims.
Service providers may process personal data only for the relevant service and subject to their contractual obligations and applicable law.
Additional information is available in the relevant providers’ notices:
9. External Stores and Third-Party Websites
The Website may contain links to independent software stores, payment providers, social networks, video platforms, documentation resources, or other third-party websites.
When you follow a link to a third-party website, that third party may receive technical information such as your IP address and the referring page, depending on your browser configuration.
We do not control the privacy practices of independent third parties. You should review the privacy policy of the relevant third-party website before providing personal or payment information.
10. International Processing and Transfers
Hetman Software operates from Ukraine. If you access the Website from another country, personal data described in this Privacy Policy may be processed in Ukraine.
Some technical service providers may process data in the European Economic Area, the United States, or other countries in which they or their subprocessors operate.
Where international data-transfer requirements apply, transfers are made using an available lawful mechanism, which may include an adequacy decision, Standard Contractual Clauses approved by the European Commission, or another safeguard recognised by applicable data protection law.
You may contact us for additional information about safeguards applicable to a particular transfer.
11. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, taking into account operational, security, contractual, and legal requirements.
- Technical and security logs: retained for the period configured in the relevant server, hosting, and security systems. Relevant records may be retained for longer where necessary to investigate an attack, abuse, technical incident, or legal claim.
- Support and email correspondence: retained for as long as necessary to answer the request, provide follow-up support, maintain reasonable business records, and resolve possible disputes.
- AI chat information: processed and retained only for as long as necessary to provide, secure, and troubleshoot the chat service, subject to the technical configuration and retention terms of the systems and providers involved.
- Email subscription records: retained until you unsubscribe and, where necessary, for a limited period afterwards to document the unsubscribe request and prevent further messages.
cookie_panel: retained for up to 14 months unless deleted earlier through browser settings.PHPSESSID: normally expires when the browser session ends.
Information may be retained for a longer period where required by law or reasonably necessary to establish, exercise, or defend legal claims. When information is no longer required, it is deleted, anonymised, or securely overwritten according to the nature of the relevant system.
12. Data Security
We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, destruction, disclosure, or unauthorised access.
These measures may include:
- encrypted HTTPS connections;
- restricted administrative access;
- network and application security controls;
- software and server maintenance;
- access logging and abuse prevention;
- data minimisation and limited retention.
No internet transmission or storage system can be guaranteed to be completely secure. Please avoid sending information that is not necessary for your request.
13. Your Data Protection Rights
Subject to applicable law and the circumstances of the processing, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request deletion of personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive eligible personal data in a structured, commonly used, and machine-readable format;
- request transmission of eligible data to another controller;
- withdraw consent where processing is based on consent;
- obtain information about safeguards used for applicable international transfers;
- lodge a complaint with a competent data protection supervisory authority.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. The Website does not rely on consent for analytics or advertising because those technologies are not used.
To exercise a privacy right, contact support@hetmanrecovery.com. Please describe your request and the information or communication to which it relates.
We may request limited additional information where reasonably necessary to verify your identity and prevent unauthorised access, disclosure, or deletion. We will respond within the period required by applicable law.
14. Right to Object
Where we process personal data on the basis of legitimate interests, you may object to that processing on grounds relating to your particular situation.
We will stop the relevant processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.
15. Complaints
We encourage you to contact us first so that we can investigate and address your concern.
Where the GDPR applies, you also have the right to lodge a complaint with the data protection supervisory authority in your country of habitual residence, place of work, or place of the alleged infringement.
16. Automated Decision-Making
We do not use personal data collected through the Website to make solely automated decisions that produce legal or similarly significant effects concerning users.
Responses generated by the AI chat assistant are informational outputs requested by the user and are not used to determine eligibility, access, pricing, employment, credit, insurance, or other legal rights.
17. Children’s Privacy
The Website and Hetman Software products are not specifically directed to children. Children should not submit personal data through the support service, subscription form, or AI chat without the involvement of a parent or legal guardian where required by applicable law.
If we learn that a child provided personal data in circumstances where parental authorisation was legally required, we will take reasonable steps to delete it.
18. Changes to This Privacy Policy
We may update this Privacy Policy when the Website, its technical infrastructure, our service providers, or applicable legal requirements change.
The updated version will be published on this page with a revised “Last updated” date. Where required by law, we will provide additional notice of material changes.
19. Contact Us
Questions, requests, and complaints relating to this Privacy Policy or the processing of personal data may be sent to: support@hetmanrecovery.com.