iBoost · legal

Privacy Policy

What this site collects, why it needs it, who receives it, and how to opt out.

Last updated 22 August 2026

In short. We collect two things: what you type into the form, and how visitors use the site. The second without a name, an e-mail or a phone number — your browser holds a random identifier that means nothing anywhere outside this site. We do not sell data, and we share it only with the services named below.

1. Who is responsible

The site iboost.ua and the data collected through it belong to iBoost, a team that builds AI automation for businesses. For anything to do with your data, write to [email protected] or Telegram @iboost_ai. We answer within 30 days, usually much sooner.

2. What you send us yourself

When you fill in the form, we receive exactly what you typed, plus a few technical fields that tell us where you came from:

your name and contact — e-mail, Telegram or phone, whichever you choose to give;
your description of the task — everything you write in the free field;
whether you would like a call;
the page you submitted from, the interface language and the referrer;
your IP address and browser User-Agent — kept with the enquiry so we can filter spam and abuse;
advertising click identifiers (gclid, wbraid, gbraid) and utm_* tags, if you arrived from an ad;
your path through the site before writing — which pages and chapters you read (see section 3).

The form contains a hidden trap field for bots. People never see it and never fill it in; if it is filled, the submission is discarded silently.

A new enquiry is also mirrored to our internal working chat in Telegram so that nobody misses it. It carries the same content you wrote in the form.

3. What is collected automatically

To understand which material people actually read, we keep our own record of on-site behaviour. It holds no name, no e-mail, no phone number and no IP address. Instead your browser stores a random visitor identifier generated for this site, which means nothing anywhere else.

Attached to it:

the number of visits and total time on the site;
which pages you opened, how many seconds on each, and how far you scrolled;
which chapters you actually read — a chapter counts only if it stayed on screen for at least one and a half seconds;
device type (mobile or desktop) and interface language;
how many times you clicked through to our contacts — Telegram, mail, phone;
the referrer and advertising tags, where present.

These records are sent to our server when you close the tab or switch away. If you later submit the form, your path is attached to the enquiry — that is how we learn which texts bring clients and which merely look good.

Google Analytics 4 (property G-8RF6ZB467T) runs separately, with its own cookies, as standard Google web analytics.

4. What we send to Google

We advertise on Google, and the ad system has to know which impressions and clicks lead to enquiries — otherwise it spends your attention and our money blindly. So the following reaches Google:

A conversion event — the fact that an enquiry arrived from an ad (account AW-18268265124).
Enhanced conversions. If you leave an e-mail or a phone number, we send Google not the contact itself but its irreversible SHA-256 hash — a string from which the original cannot be recovered. Google uses it only to match the enquiry to the click you made.
Offline conversions. When an enquiry becomes a client, we tell Google so, together with the click identifier and the same hash — so that the advertising learns from real deals rather than from the number of forms filled in.
Remarketing audiences. Google may build de-identified lists of site visitors in order to show you our advertising later.

We never send Google your name, the text of your enquiry, or your contact in the clear.

5. Cookies and local storage

The site sets almost no cookies of its own — what it needs lives in the browser's local storage and is never sent automatically with every request:

Key	What it holds	Lifetime
`iboost_vid`	A random visitor identifier. Not tied to a person and meaningless outside iboost.ua	Until you clear site data
`iboost_journey`	Your path through the site: pages, time, depth, chapters read	Until you clear site data
`iboost_attr`	Advertising click identifier and `utm_*` tags	90 days
`_ga`, `_ga_*`	Google Analytics 4 cookies	Per Google's rules, typically up to 2 years
`_gcl_*`	Google Ads cookies for conversion measurement	Per Google's rules, typically up to 90 days

You can delete all of the above at any time by clearing site data in your browser. The site keeps working; we simply stop recognising that you were here before.

6. Why we do this

To answer you. Without a name and a contact we cannot reply — the basis is taking steps at your request before entering into a contract.
To protect the site from spam. The IP address and User-Agent are kept for exactly this, as our legitimate interest.
To understand what works. Analytics and behavioural records exist so that we write more usefully and stop spending an advertising budget on traffic that has no use for us. This is also a legitimate interest, and it is precisely why those records are de-identified.
To measure advertising. Sending conversions to Google is a legitimate interest in advertising that works; you may object to it (section 9).

7. Who else receives data

Google Ireland Ltd. / Google LLC — analytics and advertising (sections 3–4). Google's policy.
Telegram — only if you write to us there yourself, and as the channel for our internal notifications about new enquiries.
Cloudflare — content delivery and attack protection; site traffic passes through it.

We do not sell data, do not pass it to advertising brokers, and do not publish enquiries. Disclosure to state authorities is possible only on a legal basis.

8. How long we keep it

Enquiries — while the conversation continues and for up to 3 years afterwards, so that agreements can be evidenced. Then deleted or anonymised.
Behavioural records — up to 12 months.
Server logs — up to 30 days.
Data inside Google Analytics and Google Ads — per Google's retention settings, which are visible in those services.

9. Your rights

You have the right to know what data of yours we hold, to receive a copy, to correct inaccuracies, to request deletion, to restrict processing, and to object to it — including objecting to the use of your data for advertising. Where processing rests on your consent, you may withdraw it at any time; this does not make lawful processing before the withdrawal unlawful.

To exercise any of these, write to [email protected]. No formalities are needed — a message from the address you gave us, or an indication of how to find you in our records, is enough. If you believe we are handling data wrongly, you may complain to the Ukrainian Parliament Commissioner for Human Rights, or, if you are in the EU, to your national supervisory authority.

10. How to turn tracking off

Our own behavioural record — clear site data in your browser, or use a private window. Without the iboost_vid key nothing accumulates.
Google Analytics — the official opt-out extension, or any tracker blocker.
Personalised Google advertising — switch it off in Google's My Ad Center.

11. Security

The site is served over HTTPS only. Enquiries are stored on our own server with restricted access, and the service key the site uses to pass them into our internal system never reaches the browser — the form posts to our own domain rather than straight into third-party storage. No system is perfectly secure, so please do not put passwords, payment details or other sensitive information into the free-text field: it is not built for them.

12. Children

The site addresses businesses, and we do not knowingly collect children's data. If you believe a child has sent us their data, write to us and we will delete it.

13. Changes

We update this document whenever what the site actually does changes. The date of the last update is always at the top. Where changes are material, we will say so on the site.

14. Contact

Mail: [email protected]
Telegram: @iboost_ai
Terms of service: iboost.ua/en/terms