Privacy Policy | Isoline

Scope and contact

This policy covers the Isoline website, desktop application and cloud workspace services. “Isoline”, “we” and “us” refer to MATSVEI SHULMAN, an individual entrepreneur in Armenia operating as Isoline. Contact support@isolinebrowser.com for privacy questions or requests. The service is offered worldwide where lawful. This policy describes information handling; it does not announce that every feature or paid plan is publicly available.

Business address: Nar dos 121, Yerevan 0099, Armenia.

For account administration, security and our own communications, we determine how information is used. When an organization puts other people’s information into a workspace, that organization is responsible for its lawful use and instructions; we process that workspace information to provide the service. This policy does not replace a data-processing agreement where one is required.

Information we process

Accounts and security: email address, password hashes, authentication and recovery records, the Terms version and time of your agreement, sessions, invitations and any security settings you enable.
Workspaces: membership, roles, permissions, profile names and settings, proxy or network configuration you supply, entitlements, usage limits, launch coordination and action logs.
Synchronized profiles: files you synchronize, which can contain cookies, signed-in sessions, history, bookmarks, extensions, local storage and other website data. Saved proxy credentials are private workspace content.
Processes and tasks: saved Process names, versions and operation definitions, including website addresses, selectors and any literal text you enter; Task inputs, selected profiles, schedules and start deadlines; the initiating account, device and automation-key identifiers; and execution status, timestamps, step outcomes and recovery information. Task inputs are stored as private task data for execution, separately from the metadata shown in Task log.
Service operation: IP addresses, request times, browser or device information, app versions, errors and security events needed to deliver, troubleshoot and protect the service. Ordinary product logs are designed to exclude raw profile contents and credentials.
Billing: your workspace’s plan, selected capacity, quoted and agreed prices, currency and billing interval; purchase and payment-provider references; subscription status, paid-term dates, cancellation state and payment-reconciliation records.
Communications: messages and attachments you send, support requests and feedback. Opening the support page from the app does not automatically attach your profiles or account details.

Do not send passwords, cookies, session tokens, proxy credentials, private keys or entire profiles in ordinary support email. Saved Process definitions and Task inputs support ordinary text, not secret storage; do not put credentials or other secrets in them. Process definitions can be read by workspace members with the relevant automation permission.

Browser execution happens on your device. Cloud synchronization uploads the profile data you choose to synchronize. Synchronized profile contents are not end-to-end encrypted against Isoline: the service can read them. Transport protection, private storage access and account authorization protect access, but do not make the service unable to read the data.

Workspace permissions determine which members can access shared profiles. Check invitations and permissions before sharing a profile containing signed-in sessions or personal information. Websites you visit and proxy, VPN or other network providers you choose receive information under their own policies. Isoline does not control their processing.

Saved tasks also execute on your selected device. Their definitions, inputs, scheduling information and execution records are held by the cloud service to coordinate execution and enforce permissions. Task log contains execution metadata; it does not store page text, screenshots, cookies or external-agent conversations. A Process may still change website data that is later included in the profile’s normal synchronization.

If you connect your own API client, MCP client, SDK integration or AI agent, the access you authorize can expose profile or page data to that client. For example, an authorized page-automation client may read page content, cookies or web storage within its permitted profile. That client and any service it sends information to determine their own retention and use. Review their permissions and privacy practices before connecting them. Revoking access prevents future authorized access but does not delete copies already obtained by a third party.

Purposes and legal grounds

We use information to provide accounts and workspaces, authenticate users, synchronize and restore profiles, run and coordinate authorized tasks, record their outcomes, apply subscription payments and limits, provide support, prevent fraud and abuse, maintain service security and comply with law. We process information you supply under your service agreement and authorized instructions, and as permitted or required by law. Where applicable law recognizes contractual necessity or legitimate interests, those grounds support service provision and security, abuse prevention and administration, subject to your rights. Required records use legal obligations; optional consent-based activities use your consent. Essential account and security information is necessary to use the service. Marketing consent, where required, is optional and can be withdrawn.

Recipients and international processing

When you purchase a subscription, Polar acts as merchant of record and processes checkout, payments, tax and billing information under its own Privacy Policy. Isoline supplies the selected purchase terms and a workspace customer reference to connect the payment to the correct workspace. Polar and its payment providers collect the billing and payment information required at checkout. Isoline does not store full payment-card details. We receive the subscription and purchase status and provider references needed to apply your workspace plan, reconcile payments and handle billing support; we do not send browser-profile contents to Polar for billing.

Information may be handled by hosting and delivery providers, private object storage, email providers and support or professional advisers, only for the relevant purpose. Current infrastructure includes Cloudflare for delivery and protection, Backblaze B2 for private object storage, and Resend where configured for account email. Authorized workspace members receive content you share with them. We may disclose necessary information for lawful requests, protection against serious harm, or a business transfer subject to applicable privacy obligations. We do not sell personal information or use profile contents for advertising.

The support form stores the email address and message you submit in our database so we can reply; Cloudflare Turnstile checks that a person, not an automated script, sent it. Crash and error reports from the desktop app and cloud service go to Sentry. They contain the app version, operating system, error details and stack traces, and are configured to exclude profile contents, browsing history, cookies, credentials, file paths and website addresses.

The Isoline operator is in Armenia. Our deployment inventory places the account and workspace database in the United States, and private profile and recovery storage in Backblaze’s EU Central region in Amsterdam, Netherlands. Local browsing remains on your device. Cloudflare delivery, account email, support and Polar payments can involve other countries. Shared workspace members and connected external clients may also receive information abroad. Contact us for applicable processing and transfer details; this notice does not itself create a transfer safeguard or processing agreement.

Retention, deletion and security

We retain information while needed for the account or workspace and the purposes above. Profile deletion first places a profile in Trash for seven days; permanent deletion is then scheduled. Removal from every backup is not immediate: backup rotation, verified deletion and legal holds can affect timing. Security, support and required business records may remain as needed for their purpose or legal obligations. Deleting a local copy does not by itself delete cloud or shared copies.

Saved Process versions and Task records, including submitted inputs, remain after a task finishes, fails or is cancelled. Deleting a Process removes it from the active list; it does not by itself erase its retained versions or related Task records. These records support execution history, troubleshooting and recovery. They are not automatically purged just because an execution ends. Contact us to request deletion or ask about retained information; applicable legal obligations and other people’s rights may limit a request.

Cancellation or expiry of a paid subscription changes workspace limits; it does not request deletion of the account, workspace, profiles or automation records. Billing records may remain where necessary for payment reconciliation, refunds, disputes or legal recordkeeping. Polar retains information it controls under its own policy.

Retention depends on the record:

Account and workspace data support the continuing service; account closure and privacy requests require a separate review, not merely subscription cancellation.
Process versions, Task inputs and Task log currently have no automatic age-based purge. Removal requests must identify the workspace and records so we can assess active execution, recovery needs and other members’ rights.
Support records are assessed against the unresolved request, follow-up complaints and any associated claim. Security records are assessed against the incident, fraud prevention and required evidence; neither category is kept solely for marketing.
Billing records support the agreed term, reconciliation, refunds, disputes and applicable tax or accounting obligations. The applicable recordkeeping requirement, rather than the subscription end date alone, determines their retention.
Database recovery uses six weekly backup chains, with approximately 42 days of coverage. Profile-deletion evidence is configured for 400 days. These are recovery and audit settings, not a promise that every copy disappears on a fixed day; legal holds, incomplete backup rotation and verified deletion can extend that time.

For access, correction or deletion, contact support@isolinebrowser.com with your account email, workspace and the request’s scope. Do not attach profile contents or credentials. We verify identity and authority, explain any retained categories and grounds, and respond within the applicable legal deadline. A request does not authorize deleting another member’s independent data.

We use access controls, protected transport and storage, password hashing and operating-system credential protection. No service can promise absolute security. You remain responsible for device security, workspace access and information you upload.

Website storage and your rights

The static marketing website uses self-hosted fonts and no advertising cookies or behavioral analytics. Hosting and security request data may still be processed. The application uses local storage and credentials necessary for its operation; websites opened in a profile may set their own cookies and storage.

Visit counts come from Cloudflare Web Analytics, which sets no cookies and does not build profiles of visitors. The support page loads Cloudflare Turnstile to block automated spam.

Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, or complain to a privacy authority. Email us; we may verify your identity and workspace authority. Organization-controlled workspace requests may need to go to that organization. Legal exceptions can limit a request. Unsubscribe from optional marketing without stopping essential account or security notices. The service is intended for adults, not children under 18.

Changes

We may update this policy as processing or legal requirements change. The date above identifies this version. We will provide additional notice and obtain consent where required. See our Terms of Service and Acceptable Use Policy.