Privacy Policy | Isoline

Scope and contact

This policy covers the Isoline website, desktop application and cloud workspace services. “Isoline”, “we” and “us” refer to MATSVEI SHULMAN, an individual entrepreneur in Armenia operating as Isoline. Contact [email protected] for privacy questions or requests. The service is offered worldwide where lawful. This policy describes information handling; it does not announce that every feature or paid plan is publicly available.

Business address: Nar dos 121, Yerevan 0099, Armenia.

For account administration, security and our own communications, we determine how information is used. When an organization puts other people’s information into a workspace, that organization is responsible for its lawful use and instructions; we process that workspace information to provide the service. This policy does not replace a data-processing agreement where one is required.

Information we process

Accounts and security: email address, password hashes, authentication and recovery records, the Terms version and time of your agreement, sessions, invitations and any security settings you enable.
Workspaces: membership, roles, permissions, profile names and settings, proxy or network configuration you supply, entitlements, usage limits, launch coordination and action logs.
Synchronized profiles: files you synchronize, which can contain cookies, signed-in sessions, history, bookmarks, extensions, local storage and other website data. Saved proxy credentials are private workspace content.
Service operation: IP addresses, request times, browser or device information, app versions, errors and security events needed to deliver, troubleshoot and protect the service. Ordinary product logs are designed to exclude raw profile contents and credentials.
Communications: messages and attachments you send, support requests and feedback. If paid services are offered, relevant order, subscription and transaction records may also be processed; this notice does not activate payments.

Do not send passwords, cookies, session tokens, proxy credentials, private keys or entire profiles in ordinary support email.

Browser execution happens on your device. Cloud synchronization uploads the profile data you choose to synchronize. Synchronized profile contents are not end-to-end encrypted against Isoline: the service can read them. Transport protection, private storage access and account authorization protect access, but do not make the service unable to read the data.

Workspace permissions determine which members can access shared profiles. Check invitations and permissions before sharing a profile containing signed-in sessions or personal information. Websites you visit and proxy, VPN or other network providers you choose receive information under their own policies. Isoline does not control their processing.

Purposes and legal grounds

We use information to provide accounts and workspaces, authenticate users, synchronize and restore profiles, enforce permissions and limits, provide support, prevent fraud and abuse, maintain service security and comply with law. We process information you supply under your service agreement and authorized instructions, and as permitted or required by law. Where applicable law recognizes contractual necessity or legitimate interests, those grounds support service provision and security, abuse prevention and administration, subject to your rights. Required records use legal obligations; optional consent-based activities use your consent. Essential account and security information is necessary to use the service. Marketing consent, where required, is optional and can be withdrawn.

Recipients and international processing

When you purchase a subscription, Polar acts as merchant of record and processes checkout, payments, tax and billing information under its own privacy policy. Payment card details are collected by the payment provider and are not stored by Isoline. We process the subscription, purchase and provider identifiers needed to apply your workspace plan and handle billing support.

Information may be handled by hosting and delivery providers, private object storage, email providers and support or professional advisers, only for the relevant purpose. Current infrastructure includes Cloudflare for delivery and protection, Backblaze B2 for private object storage, and Resend where configured for account email. Authorized workspace members receive content you share with them. We may disclose necessary information for lawful requests, protection against serious harm, or a business transfer subject to applicable privacy obligations. We do not sell personal information or use profile contents for advertising.

Processing locations depend on the service and provider and may be outside your country. Where transfer safeguards are required, they must apply to the relevant transfer. Contact us for information about the locations and safeguards applicable to your use.

Retention, deletion and security

We retain information while needed for the account or workspace and the purposes above. Profile deletion first places a profile in Trash for seven days; permanent deletion is then scheduled. Removal from every backup is not immediate: backup rotation, verified deletion and legal holds can affect timing. Security, support and required business records may remain as needed for their purpose or legal obligations. Deleting a local copy does not by itself delete cloud or shared copies.

We use access controls, protected transport and storage, password hashing and operating-system credential protection. No service can promise absolute security. You remain responsible for device security, workspace access and information you upload.

Website storage and your rights

The static marketing website uses self-hosted fonts and no advertising cookies or behavioral analytics. Hosting and security request data may still be processed. The application uses local storage and credentials necessary for its operation; websites opened in a profile may set their own cookies and storage.

Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, or complain to a privacy authority. Email us; we may verify your identity and workspace authority. Organization-controlled workspace requests may need to go to that organization. Legal exceptions can limit a request. Unsubscribe from optional marketing without stopping essential account or security notices. The service is intended for adults, not children under 18.

Changes

We may update this policy as processing or legal requirements change. The date above identifies this version. We will provide additional notice and obtain consent where required. See our Terms of Service and Acceptable Use Policy.