ORGFORMAT PRIVACY NOTICE

1. About this Notice and the Controller

This Privacy Notice explains how information relating to users of the ORGFORMAT website and the ORGFORMAT Studio web application (“Studio”) is processed.

The controller is Ivan V. Kravchenko, an individual and citizen of the Russian Federation (“we”, “us”, or the “Controller”).

This Notice applies to the current public version of the website and Studio. Separate privacy documents may apply to future cloud, paid, enterprise, or other ORGFORMAT services.

This Notice does not limit any privacy rights that apply to you under mandatory law in your country or region.

2. Studio is local-first: your models stay under your control

Studio is a browser-based local-first application.

The content of .orgf files — including models, structures, texts, tags, descriptions, and other model data — is not transmitted to the Controller’s servers through Studio’s ordinary functionality. We do not store, view, or analyse that content as model content.

Your models remain on your device and under your control. We do not use model content for training, advertising, profiling, web analytics, or any other purpose.

3. Information we may process

The current public version of ORGFORMAT has no registration, user accounts, member areas, newsletter subscription, or website contact form.

We may process the following limited categories of information:

• analytics data, but only after you consent to analytics;
• technical data needed to operate, secure, and maintain the website and Studio; and
• support correspondence data, if you independently contact us at support@orgformat.com.

We use this information only to operate and secure ORGFORMAT, understand the use of public pages and limited Studio events, respond to requests, and comply with legal obligations.

4. Yandex Metrica, cookies, and analytics consent

Separate Yandex Metrica tags are used on the public ORGFORMAT website and in Studio.

On public website pages, Yandex Metrica is used for basic audience and page-performance statistics.

In Studio, Yandex Metrica is used only for limited product statistics: a Studio launch and the opening of a model by a predefined technical method. Studio does not send any of the following to Yandex Metrica:

• .orgf file or model content;
• file names, paths, addresses, or source URLs;
• card text, tags, descriptions, model structure, node counts, or other model characteristics;
• user identifiers, free-form or user-generated event parameters, CRM data, offline conversion data, or third-party personal data.

Studio does not use Session Replay, Webvisor, form analysis, user-ID features, advertising retargeting, or other deep behavioural analytics tools.

Yandex Metrica is configured in GDPR mode. Its tag loads only after you opt in through the cookie banner. If you decline analytics, the Metrica tag does not load, and you can still use Studio and its core functionality.

You may change or withdraw your analytics choice through the cookie-banner settings. The banner may store your choice locally in your browser. You can also delete cookies or local storage through your browser settings.

After consent, Yandex Metrica may process technical and statistical information about a visit, including page and event information, time of access, referral source, browser and device information, language, connection parameters, IP address, and browser identifiers that may be stored in cookies or local storage.

5. Technical operation and local preferences

The infrastructure used to deliver the website and Studio may process limited technical information required for page delivery, security, abuse prevention, error diagnosis, and service stability. This may include an IP address, date and time of access, requested page address, browser, device, and network connection information.

Studio may save limited interface preferences directly in your browser, such as a theme or display settings. These preferences remain on your device and can be removed through browser controls.

We do not link technical data or interface preferences to the content of your .orgf models.

6. Support correspondence

The website does not include a contact form. You may independently email us at support@orgformat.com.

When you contact us, we may process your email address, name if you provide it, the contents of your message, and any materials you attach. We use this information only to respond to you, resolve a technical issue, comply with legal obligations, or protect the rights of you or ORGFORMAT.

Please do not send .orgf files, third-party personal data, trade secrets, or other confidential information unless this is necessary for a specific request and has been separately agreed.

7. Legal bases, recipients, and international processing

Where the GDPR, UK GDPR, or similar law applies:

• we rely on your consent for analytics;
• we rely on legitimate interests, including operating, securing, and improving ORGFORMAT and responding to support requests, where those interests are not overridden by your rights; and
• we may process information where necessary to comply with a legal obligation or establish, exercise, or defend legal claims.

Yandex Metrica processes the analytics information described in section 4 as the provider of the analytics service. Hosting, email, and other technical providers may process limited technical or support information where necessary to provide their services.

Depending on the provider and your location, information may be processed in countries other than the country in which you reside. Where required by applicable law, we use the provider’s applicable data-processing terms and safeguards for such processing.

We do not sell personal information. We do not provide the contents of your models to third parties.

8. Retention and security

We retain analytics data, technical logs, and support correspondence only for as long as reasonably necessary for the purposes described in this Notice, to meet legal requirements, or to establish, exercise, or defend legal claims. Retention periods may also depend on the settings and retention practices of the relevant service provider.

We use reasonable legal, organisational, and technical measures to protect information against unauthorised access, alteration, disclosure, or destruction.

9. Your privacy rights

Depending on applicable law, you may have the right to request access to your personal data, correction, deletion, restriction of processing, objection to processing, or data portability. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

You may also have the right to complain to the competent data-protection authority in your country or region.

To exercise rights or ask questions, contact support@orgformat.com. We may request information reasonably necessary to verify your identity and process your request.

We do not use personal data for decisions based solely on automated processing that produce legal or similarly significant effects on you.

10. Updates and contact

We may update this Notice when ORGFORMAT functionality, technical infrastructure, or applicable law changes. The current version will be published on the ORGFORMAT website with its version number and effective date.

For privacy questions or requests, contact:

support@orgformat.com

© 2026 ORGFORMAT. All rights reserved.