XSDForgeTable of Contents
- What this document is about
- Who we are and how to contact us
- What personal data about you we process, for what purpose, and for how long
- Where do we get your data?
- How we process your data
- On what basis do we process your data?
- Who we share your data with
- Use of cookies and other web analytics tools
- How we protect your data
- What rights do you have and how to exercise them?
- How will you be notified of policy changes?
Privacy Policy
What this document is about
This Policy explains what personal data we receive and process as part of the XSDForge service, including your use of the xsdforge.progmaticlab.ru, xsdforge.progmaticlab.com websites and the web version of the XSD schema editor, as well as your interactions with us regarding the use of the service.
In this document, we briefly explain:
- what data we process;
- why and on what basis;
- with whom the data may be transferred;
- how we protect it;
- what rights you have and how to exercise them.
Who are the subjects of personal data
We process the personal data of users of the XSDForge website and service, as well as individuals who contact us regarding the use of the XSDForge website or service.
Who we are and how to contact us
Progmatic Lab LLC – personal data operator within the XSDForge service.
Our details: OGRN 5167746319230, INN 7714957951, KPP 771401001.
Our address: 125124, Moscow, 3-ya Yamskogo Polya St., Building 2, Bldg. 7, Floor 3, Room X, Office 56.
You can contact us with any questions related to the processing of personal data by writing to xsdforge@progmaticlab.com.
What personal data about you we process, for what purpose, and for how long
| Processing purposes | What data is processed | Storage period |
|---|---|---|
Ensuring the use of XSDForge, including for:
|
| During the term of service use and 5 years from the date of the last account login |
Maintaining the stable and secure operation of XSDForge, including for:
|
| For 1 year from the date of their creation |
Processing your requests and communicating with you, including for the following purposes:
|
| During the term of use of the service and 5 years from the date of your last account login |
Compliance with accounting and tax laws |
| 6 years from the date of order placement receipt |
When using the XSDForge editor, the user can upload XSD, XML, or ZIP files. Such files are processed by the system solely to perform service functions (e.g., parsing or editing schemas).
The files are not used for algorithm training, analytics, or other secondary purposes and are not stored on servers after the user finishes working with the service, unless otherwise expressly stated in the service's functionality.
The user independently determines the content of the files uploaded. The operator does not purposefully process any personal data that may be contained in such files and does not analyze the contents of the files to identify personal data.
We destroy personal data when the processing purposes have been achieved, the retention periods have expired, or the data is no longer needed.
Data is also destroyed if you revoke your consent or request that processing be stopped, and we have no reason to continue it.
Destruction is carried out methods that prevent future access to the data. Data in backups is automatically deleted during scheduled backup rotation.
Where do we get your data?
We collect your personal data:
1. Directly from you, when you:
- register or log in to XSDForge;
- fill out forms on the website;
- send a request or message to technical support;
- respond to us during communications.
2. Automatically when using the service, when you:
- use our website or the web interface of the service;
- perform actions that are recorded in technical logs.
How we process your data
We process your personal data only for the purposes described above.
For these purposes, we perform both automated and non-automated processing of personal data and may perform the following actions:
- collecting and receiving data from you;
- recording and storing in our systems;
- systematizing and structuring data;
- storing in information systems;
- updating and amending data at your request;
- using data to perform service functions;
- transferring data to partners – in cases stipulated by the Policy;
- blocking and restricting access (if you request it or if required by law);
- deleting or destroying data upon expiration of the retention period or at your request.
On what basis do we process your data?
We process your data on the following grounds:
1. To conclude and perform a contract with you
We process your data when necessary to register for the service, provide access to XSDForge functionality, manage your account, provide support, and perform other actions related to your use of the service.
2. Based on your consent
We may process data if you have given consent, for example, to receive news and marketing communications.
You can revoke your consent at any time.
3. To protect our legitimate interests
We process data when necessary to:
- ensure the security and stability of XSDForge;
- prevent technical failures and abuse;
- improve service quality;
- analyze service performance.
4. To comply with legal requirements
We may also process your personal data if required by Russian Federation law, including accounting, archival storage, and other requirements.
Who we share your data with
We share your personal data with third parties only to the extent necessary to achieve the purposes of processing. We share your personal data with the following categories of recipients:
1. Contractors and partners who help us provide XSDForge
We transfer only the minimum amount of data necessary for the service to operate, including:
- infrastructure, data center, and cloud solution providers (including cloud infrastructure providers);
- CRM system and application processing tool providers;
- web analytics providers;
- authorization service providers (e.g., Yandex ID, VK ID, or other authentication services, if the user chooses to log in through such services).
If such organizations process data on our behalf, they are required to maintain confidentiality and comply with legal requirements. Otherwise, they process the data as independent processors.
2. Government Agencies
We may transfer your data to government agencies in cases expressly provided by law.
How we protect your data
In most cases, personal data is processed automatically without access by employees. If access is required to perform work tasks, it is granted only to authorized employees and only to the extent necessary for the relevant task.
To protect and ensure the confidentiality of personal data, employees who have access to such data must comply with internal rules and procedures for processing personal data, as well as the technical and organizational security measures we apply.
We take necessary and sufficient legal, organizational, and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, provision, distribution, and other unlawful actions.
The service infrastructure and data are hosted in cloud infrastructure located in the Russian Federation, including through VK Cloud and Yandex Cloud services. These providers apply their own cloud infrastructure security measures and state that they comply with the requirements of the Russian Federation legislation on personal data, including Federal Law No. 152-FZ.
The specific set of protection measures is determined taking into account the nature of the processed data, relevant risks, legal requirements, and available technical capabilities.
What rights do you have and how to exercise them?
We respect your rights as a personal data subject, as provided for by the Federal Law On Personal Data dated July 27, 2006, No. 152-FZ.
You have the right to:
- request access to your personal data;
- request clarification or correction of data;
- revoke consent;
- request that we stop processing your data if there are no legal grounds for it;
- request that we delete your data;
- appeal our actions to Roskomnadzor.
To exercise your rights, please contact us.
How will you be notified of policy changes?
We may update this Policy from time to time. The most current version is always available on this page. We recommend that you review the Policy periodically to stay informed of changes.