Personal Data Processing Policy

1. General provisions

This Privacy Policy describes how the Operator processes and protects personal data when Users access AITale. It is prepared under Federal Law No. 152-FZ on Personal Data and other applicable Russian legislation.

2. Key terms

Personal data means information relating to an identified or identifiable person. Processing includes collection, recording, organization, storage, updating, retrieval, use, transfer, anonymization, blocking and deletion. Automated processing uses computing systems.

3. Purposes of processing

• Register and authenticate Users and maintain Accounts.
• Provide Platform features, process generation requests and deliver results.
• Accept payments, maintain the Balance and comply with accounting and legal duties.
• Respond to support requests, improve security, prevent abuse and diagnose errors.
• Send service messages and, where separate consent exists, informational or promotional messages.

4. Legal grounds

Processing is based on the User's consent, performance of the User Agreement, the Operator's statutory obligations and other grounds permitted by Russian law. Publicly available data is processed only where a lawful basis exists.

5. Categories of data

• Account information such as email address, identifiers and authentication data.
• Payment and transaction information received from payment providers; full payment-card data is not stored by the Operator.
• Technical information including IP address, device, browser, cookies, request logs and security events.
• Prompts, uploaded files, generated results and support correspondence supplied by the User.
• Data received from Telegram, MAX, VK or another integration when the User signs in through that service.

6. User content

Prompts and uploaded content are processed to perform the User's request and may be sent to the selected external AI provider. Users must not submit third-party personal data without an appropriate legal basis.

Generated files are normally retained for the period shown in the interface and may then be automatically deleted. The User should download any results that must be preserved.

7. Disclosure to third parties

Data may be shared only to the extent necessary with hosting, infrastructure, analytics, communication, payment and AI service providers, or where disclosure is required by law. Processors must observe applicable confidentiality and security duties.

8. External services and cross-border transfer

Some selected AI and infrastructure services may operate outside the Russian Federation. Where applicable, the Operator assesses and handles transfers according to Russian personal-data law. Sending a generation request requires transfer of the relevant prompt or file to the selected provider.

9. Retention and deletion

Data is retained only for as long as needed for the stated purposes, the User Agreement and mandatory legal periods. It is deleted or anonymized when the purpose or legal basis ends, unless continued retention is required by law.

10. Cookies and similar technologies

AITale uses necessary cookies for authentication, language, theme and security, and may use analytics cookies to understand service operation. Browser controls can restrict cookies, but essential Platform functions may then become unavailable.

11. Data security

The Operator applies reasonable legal, organizational and technical safeguards against unauthorized access, alteration, disclosure, blocking, copying or destruction. No internet transmission or storage method can provide an absolute guarantee.

12. Data-subject rights

• Request information about processing and access to personal data.
• Request correction, blocking or deletion of inaccurate or unlawfully processed data.
• Withdraw consent where processing relies on consent.
• Complain to the competent authority or court as provided by law.

13. User responsibilities

The User must provide accurate information, keep it up to date and respect the privacy of others when submitting content to the Platform.

14. Policy changes

The Operator may update this Policy. The new version takes effect when published unless it states otherwise. Continued use after publication indicates acceptance; Users may stop using the Platform and request deletion if they disagree.

Operator details