Privacy Policy

1. Who is responsible for your data

The controller of your personal data is the non-governmental organisation «Special Operations Forces of the Resistance Movement of Ukraine» (NGO «SOF RMU»), operator of www.sof-rmu.com. For any data-related questions, write to info@sof-rmu.com.

2. What data we collect

Account: e-mail address (magic-link sign-in; no passwords are stored).

Join or partnership application: the data you provide yourself in a form or letter — name or call sign, contact, experience, the substance of your request.

Subscription: tier and payment status. Payments are processed by the payment provider Lemon Squeezy — card details never reach us and we do not store them.

Technical data: session cookies for sign-in, plus standard server logs (IP address, request time) for security and service stability.

Push notifications: a technical browser token — only if you enable them yourself.

3. Purposes and legal bases

Providing the service — account, subscription, access to analytics (performance of contract). Reviewing join and partnership applications — based on your consent expressed by submitting the application. Service security and abuse prevention — our legitimate interest. Compliance with legal obligations — where required by law.

We do not use your data for advertising, do not profile you and do not sell data to third parties.

4. Who we share data with

Only with vetted providers that process data under our instructions: Lemon Squeezy (payments), Resend (transactional e-mail), Cloudflare (infrastructure, media storage, attack protection) and the site hosting provider. Each of them is bound by its own data-protection obligations.

With public authorities — only upon a lawful request in the manner prescribed by law.

5. International transfers

Our providers may process data outside your country, including in the EU and the USA. In such cases recognised safeguards apply — standard contractual clauses or adequacy decisions.

6. How long we keep data

Account data — while the account exists; after deletion — up to 30 days in backups. Payment records — for the periods required by tax and accounting law. Applications — until the review is complete plus a reasonable period thereafter. Server logs — up to 90 days.

7. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, receive a machine-readable copy, object to processing and withdraw consent. To exercise these rights, write to info@sof-rmu.com — we will respond within 30 days. You also have the right to lodge a complaint with the data-protection supervisory authority in your country.

8. Security

We apply connection encryption (TLS), least-privilege access controls and the operational security discipline inherent to our organisation. No system is absolutely secure, but for us data protection is part of the same discipline as protecting people.

9. Cookies

We use only strictly necessary cookies — for the sign-in session and site operation. There are no advertising or tracking cookies. Should this change, we will update this policy and ask for your consent where the law requires it.

10. Children

The site is not intended for persons under 18, and we do not knowingly collect their data. If you become aware that a child has provided us with data, notify info@sof-rmu.com — we will delete it.

11. Changes to this policy

We may update this policy; the current version is always published on this page with its effective date. Material changes will be additionally announced to account holders.