Privacy policy

Version of 23 October 2026

1. General provisions

This policy describes what data is collected on vexel.services and when working with clients, why, where it is stored and how it is protected. The website owner and service provider is VEXEL (the “Contractor”). Questions about data — contact@vexel.services.

By using the website or sending a request, the visitor agrees to this policy. The terms of work with clients are in the public offer.

2. What data is collected

Data the visitor sends themselves:

• via the form: email and/or Telegram username, task description, selected package;
• in Telegram or email correspondence: name or username, contacts, project description and anything else the visitor chooses to share.

Data sent automatically:

• together with a request: page language, country (by IP address) and visit source — an ad tag or the site the visitor came from, and the landing page;
• when the Telegram or email link on the website is clicked: the fact of the click, page language, country and visit source. The IP address itself is not included in the notification;
• technical data that a browser sends to any website: IP address, browser and device type, request time. It is processed by Cloudflare to deliver the website and protect it from attacks.

3. Cookies and browser storage

• There are no advertising or tracking cookies on the website.
• Cloudflare may set the technical cookie cf_clearance when checking that the visitor is not a bot. It is used only to protect the website.
• Two entries are saved in browser storage (localStorage): the selected colour theme, and the source of the first visit with the landing page — for 30 days. They do not leave the browser unless the visitor sends a request or clicks the Telegram or email link.
• Visits are counted by Cloudflare Web Analytics: without cookies and without cross-site tracking, as anonymised statistics.
• This data can be deleted in the browser settings — the website will keep working.

4. Why

• To reply to a request, discuss the task, prepare an estimate and an agreement.
• To do the work, deliver the result, keep records and settle payments.
• To understand which sources bring visitors and improve the website.
• To protect the website from attacks, spam and abuse.

Data is not sold and is not shared with third parties for advertising.

5. Services involved

• Cloudflare — website hosting, attack protection, anonymised visit statistics.
• Telegram — requests and notifications from the website reach the Contractor via a bot; correspondence also takes place there.
• Email service — email correspondence.

Each service has its own data processing policy. Data is shared with other parties only on a lawful request from an authorised body or to protect the Contractor’s rights in a dispute.

6. Client project data

During the work, the Contractor may get access to the Client’s data: access to servers and services, databases, orders and the data of the Client’s customers.

• This data is used only for the task in the agreement: no copying beyond what is necessary, no sharing with third parties and no use for other purposes.
• Access is given only to the Contractor and assistants who need it for the task, under a confidentiality obligation.
• After the work is complete, working copies of the data are deleted; at the Client’s request — immediately, with confirmation.
• The Client is responsible for the lawful collection and use of their customers’ data. The Contractor processes it only on the Client’s instructions.

7. Data protection

• Access credentials and passwords are kept in an encrypted password manager, not in chats or open files.
• The website works only over a secure connection (HTTPS).
• The request form is protected from spam and automated submissions.
• The Client is advised to provide access with the minimum rights needed and to change it after the work is complete.

8. Retention

• Requests and correspondence — while the discussion and work are ongoing, and up to 3 years after, for records and possible claims. They are then deleted.
• Visit source in the browser — 30 days.
• Client project data — until the work is complete (section 6).

9. Visitor rights

A visitor can ask what data is held, correct it, delete it or withdraw consent to processing. Requests go to contact@vexel.services and are answered without delay. Data needed for records and settlements on work already done is kept until the end of the period in section 8.

10. Age

The website and services are intended for persons over 18.

11. Changes

This policy may be updated. The current version is always on this page; the date of the change is shown at the top.