← Back to home

Personal Data Processing Policy

1. General Provisions

1.1. This Policy defines the procedure for processing and protecting the personal data of users of the sfumata.ai website (hereinafter — the Website).

1.2. Personal data operator:

Individual Entrepreneur Sheluntsov Dmitry Andreevich

TIN: 390518049508 OGRNIP: 323390000035755 Address: Kaliningrad, Elovaya Alleya st., 64, apt. 1 E-mail: sfumata.ai@yandex.ru (hereinafter — the Operator), registry number 39-26-030371.

1.3. The Policy has been developed in accordance with:

  • Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data";
  • other regulatory legal acts of the Russian Federation.

1.4. The Policy applies to all personal data received from users.

1.5. Personal data subjects:

  • Website users;

2. Legal Grounds for Processing

Personal data processing is carried out on the basis of:

  • consent of the personal data subject;

3. List of Processed Personal Data

The Operator processes the following categories of personal data:

3.1. Identification data:

  • email address;
  • user name and identifier (ID) obtained through authorization services (Yandex, VK), including full name and date of birth if provided by the service.

3.2. Technical data:

  • IP address;
  • operating system type and version;
  • browser type and version;
  • screen resolution;
  • OS and browser language;
  • referral source;
  • date and time of access;
  • cookies.

3.3. Activity data:

  • information about the use of Website features;
  • authorization history;
  • metric system data (including Yandex.Metrica).

3.4. Payment data:

  • payment information;
  • transaction identifiers;
  • amount and currency of the transaction;
  • date and status of payment;
  • payment method;
  • subscription connection, renewal, and cancellation details;
  • payer email (if provided by the payment service).

The Operator does not process bank card details (card number, CVC/CVV code).

The Operator does not process special categories of personal data or biometric personal data.

4. Purposes of Personal Data Processing

Personal data is processed for the following purposes:

4.1. The Operator processes personal data of users for the following purposes: Providing users with access to the website and personal account functionality, including registration, authentication, providing paid access to the service, payment processing, and interaction with users regarding the use of the service.

5. Processing Procedure and Conditions

5.1. Processing is carried out using mixed methods.

5.2. Personal data of citizens of the Russian Federation is collected and stored on servers located in the Russian Federation.

5.3. The Operator may entrust personal data processing to third parties, provided they comply with Russian Federation legislation.

5.4. Data is transferred to the extent necessary to achieve the processing purposes.

6. Data Processing for Payments and Subscriptions

6.1. Payment for services is made using the YooKassa service.

6.2. When paying, the user is redirected to the secure page of the payment service.

6.3. The Operator does not receive or store bank card details.

6.4. When subscribing, the user agrees to automatic fund deduction in accordance with the user agreement.

6.5. The user may cancel the subscription in their account or by contacting the Operator.

6.6. Payment records are stored for the periods established by the legislation of the Russian Federation (at least 5 years).

7. Personal Data Retention Periods

7.1. After the user stops using the Website, data is stored for no more than 5 years, unless otherwise provided by Russian Federation legislation.

7.2. Upon achieving the processing purposes or upon withdrawal of consent, data is destroyed or anonymized within 30 days.

8. Rights of the Personal Data Subject

The user has the right to:

  • receive information about their personal data;
  • request clarification, blocking, or destruction of data;
  • withdraw consent to processing;
  • appeal the Operator's actions to Roskomnadzor or in court.

A response to a request is provided within 10 business days.

9. Use of Cookies

9.1. The Website uses cookies for functionality and analytics.

9.2. The user can change cookie settings in their browser.

9.3. Continued use of the Website constitutes consent to cookie processing.

10. Personal Data Protection Measures

The Operator takes legal, organizational, and technical protection measures, including:

  • restricting access to data;
  • using antivirus tools;
  • backup procedures;
  • protecting data transmission channels.

11. Final Provisions

11.1. The Policy is effective indefinitely until replaced by a new version.

11.2. The current version is published on the Website.