Last updated 12 September 2026
This Privacy Policy explains what personal data Watbot, LLC ("we", "us" or "our") processes when you use the website heicgram.com (the "Site"), why we process it, on what legal basis, how long we keep it, and what rights you have.
The Site serves an international audience. This Policy is written to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable privacy laws. The Russian version of this Policy additionally addresses the requirements of Russian Federal Law No. 152-FZ "On Personal Data".
The data controller is:
Watbot, LLC
Address: Office 302, 90/1 Novozhenova Street, Ufa, Republic of Bashkortostan, 450105, Russia
Registration number: 1197746194601
Tax ID: 9718132634
Privacy enquiries: privacy@heicgram.com
We have not appointed a representative in the European Union or the United Kingdom. Under Article 27(2) GDPR the obligation to do so does not apply because our processing is occasional, does not include large-scale processing of special categories of data or data relating to criminal convictions, and is unlikely to result in a risk to the rights and freedoms of individuals. We will appoint a representative if this changes. We are not required to appoint a Data Protection Officer.
Image conversion is performed by code that is loaded into your browser and runs on your device. Your files, their contents and metadata are never transmitted to our servers, are not stored by us, and are not accessible to us. We therefore do not process your files in any way and cannot recover or delete them on request — they never left your device.
3.1. Technical data. When you access the Site, our servers automatically receive your IP address, the date and time of the request, the address of the requested page, the referring page, information about your browser and operating system (user agent), and the response status. This data is written to server logs.
3.2. Approximate location (country). To show you the cookie notice required by the law of your country, we derive only the country code from your IP address. The lookup is performed on our own server using a local copy of the GeoLite2 database by MaxMind; your IP address is not sent to any third party for this purpose, and the result is not stored beyond the request.
3.3. Your preferences. The Site remembers the language you selected (cookie lang), your theme (browser local storage key theme), and your cookie choices (cookies cpol and cnot).
3.4. Contact form. If you write to us through the form on the Site, we receive the name, email address, and message you provide, along with the technical data described in 3.1. Your message is delivered to our support mailbox; we do not keep a separate database of enquiries.
3.5. Web analytics. We use Google Analytics. Google Analytics is provided by Google Ireland Limited (Ireland) for users in the EEA, Switzerland and the United Kingdom, and by Google LLC (United States) for everyone else. It collects information about visits: pages viewed, referring source, device type, browser, screen resolution, approximate location and interactions with pages. It sets its own cookies, listed in the Cookie Policy. We do not match analytics data to identifiable individuals; Google advertising features and data sharing with Google's advertising services are turned off and IP addresses are processed in truncated form.
3.6. We do not process special categories of personal data (such as health data or political opinions) or biometric data, do not make decisions with legal effects based solely on automated processing, and do not sell personal data.
The cookies and similar technologies we use, their purposes and lifetimes, and how to manage them are described in the Cookie Policy.
5.1. We share personal data only to the extent necessary for the purposes above with:
5.2. We may disclose personal data to public authorities where required by law, and to a successor in the event of a merger, reorganisation, or sale of the business.
5.3. We do not sell personal data and do not share it with advertising networks.
We are established in the Russian Federation, and our servers and service providers may be located in Russia or in other countries outside the European Economic Area and the United Kingdom. Russia is not covered by an adequacy decision of the European Commission.
If you are in the EEA or the UK, the transfer of the technical data described in Section 3.1 is necessary to provide you with the Service you have requested under the Terms of Service (Article 49(1)(b) GDPR). Data collected by Google Analytics is processed by Google Ireland Limited within the EEA and may be transferred to Google LLC in the United States under the European Commission's standard contractual clauses together with the additional safeguards described in Google's data processing terms; the United States is covered by an adequacy decision for organisations certified under the EU-US Data Privacy Framework, in which Google LLC participates. We keep the data we collect to a minimum and apply the security measures described in Section 8.
| Data | Retention |
|---|---|
| Server logs (IP address, user agent, page addresses) | No more than 30 days |
| Country derived from IP address | Not stored |
| Preferences (language, theme, cookie choices) | Up to 2 years or until you clear browser data |
| Contact-form messages | No more than 12 months after the last message |
| Web analytics data | According to the terms of Google Analytics |
When the retention period expires, data is deleted or anonymised.
We apply technical and organisational measures appropriate to the risk, including transport encryption (HTTPS), restricted access to servers and logs, data minimisation, and rate limiting. The most important safeguard is built into the Service itself: your files never leave your device. No method of transmission over the Internet is completely secure, so we cannot guarantee absolute security.
9.1. Depending on where you live, you may have the right to:
9.2. To exercise your rights, email us at privacy@heicgram.com or write to our postal address. We may ask you to verify your identity to protect your data. We respond within one month; this period may be extended by two further months for complex requests, in which case we will let you know.
9.3. You can withdraw your consent to analytics cookies at any time via "Cookie settings" in the footer of the Site.
9.4. Residents of California and other US states. We do not sell or share personal information for cross-context behavioural advertising, and we do not use it for profiling with legal or similarly significant effects. You may request access to or deletion of your personal information using the contact details above; we will not discriminate against you for exercising your rights.
The Site is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us at privacy@heicgram.com and we will delete it.
Because analytics on the Site runs only with your consent, we do not respond to browser "Do Not Track" signals separately. Your cookie choices control all optional tracking on the Site.
The Site may contain links to third-party websites. We are not responsible for their privacy practices; please review their policies before providing them with any data.
We may update this Policy from time to time. The updated version is published on this page with a new "last updated" date. Where changes are material, we will provide a more prominent notice on the Site.
For questions about this Policy or your personal data, email privacy@heicgram.com. For all other questions, email support@heicgram.com.