Skip to content
Aitechestvo

Consent to Personal Data Processing

Version 2026-10-14 · Edition for the Russian region

LAWYER-REVIEW — draft. This text was prepared by the engineering team and is not legal advice. Before it is published in production, a lawyer must review the document and confirm every place marked LAWYER-REVIEW; every {{…}} value must be filled in. While this notice is present, the document is not an effective version.

This English text is a convenience translation of the Russian original. In case of any discrepancy, the Russian version prevails.

Version: 2026-10-14. Effective date: {{EFFECTIVE_DATE}}.

This consent is drawn up separately from any other documents (the offer, the personal data processing policy, etc.) in accordance with Article 9(1) of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" (the PD Law) as in force from 1 September 2025. [LAWYER-REVIEW: confirm the details of the amending law (Federal Law No. 156-FZ of 24 June 2025) and that this form is sufficient.] Consent is given by ticking a separate box that is unticked by default. Parts 1, 2 and 3 are independent consents: each is given with its own tick and only in the situation it describes.

Operator: {{RU_OPERATOR_NAME}}, INN {{RU_OPERATOR_INN}}, OGRN {{RU_OPERATOR_OGRN}}, address: {{RU_OPERATOR_ADDRESS}} (the Operator). Service: Aitechestvo, Russian region. Processing is described in detail in the Personal Data Processing Policy (/en/legal/privacy).

Part 1. Consent of a Service user

Given when registering in the Service Console, including registration by invitation.

Acting freely, of my own will and in my own interest, I give the Operator specific, informed, conscious and unambiguous consent to the processing of my personal data on the following terms.

  1. Purposes:
    1. registering and maintaining my account, giving me access to the Console, the web chat and the Service API, managing my organisation memberships and roles;
    2. securing the Service and my account, including two-factor authentication, session tracking, the audit log, incident investigation and prevention of trial abuse;
    3. sending me service notifications by email (address confirmation, password recovery, invitations, security notices, billing notices and alerts configured by my organisation);
    4. performing the contract between the Operator and the organisation I represent, including payments and documents if I carry out such actions;
    5. handling my enquiries and my requests as a data subject.
  2. Personal data: email address; surname, first name, patronymic (as I entered them); password hash; interface language; organisations I belong to and my roles; two-factor authentication data (encrypted secret, recovery code hashes); IP address, browser details (user agent), times of logins and Console actions; records of consents I have given; when I make payments — the email address for receipts and payment details.
  3. Operations: collection, recording, systematisation, accumulation, storage, clarification (updating, changing), retrieval, use, transfer (provision, access) to the parties listed in item 5, blocking, deletion, destruction.
  4. Method: automated processing with transmission over the Internet. The databases are located in the Russian Federation; no cross-border transfer takes place. [TECH-CHECK: true subject to clause 5.3 of the Personal Data Processing Policy — Russian-region traffic does not pass through any node outside the Russian Federation. The operator egress relay at DigitalOcean (SPEC §12.11 (f), owner decision 2026-10-15) is allowed only on the staging stand with synthetic data; in production it is blocked until R-56 is closed (EGRESS_RELAY_PROD_ACK).]
  5. Parties instructed to process or receiving the data: TIMEWEB.CLOUD LLC (Timeweb Cloud; compute and storage for hosting the Service infrastructure), Unisender Smart LLC (Unisender Go service; email delivery); for payments — NCO YooMoney LLC (YooKassa). [LAWYER-REVIEW: check the list and names against the contracts concluded, including the role of Timeweb Cloud (Policy, Section 6).]
  6. Term: until my account is deleted or the consent is withdrawn.
  7. Withdrawal: I may withdraw this consent in the Console (deleting the account under Settings → Account), by email to {{RU_PRIVACY_EMAIL}} or by a written notice to {{RU_OPERATOR_POSTAL_ADDRESS}}. After withdrawal the Operator stops processing and destroys the personal data within no more than 30 days, except for data that may continue to be processed without consent on the grounds provided by the PD Law (Article 9(2), Article 6(1)(2)–(11)), in particular payment documents (kept for 5 years under tax and accounting law) and evidence of this consent (email hash, document version, time; kept for 3 years). I understand that the Console cannot be used without an account.

Part 2. Consent of a person sending an enquiry through the contact form

Given when submitting the contact form on the Service website.

Acting freely, of my own will and in my own interest, I give the Operator specific, informed, conscious and unambiguous consent to the processing of my personal data on the following terms:

  1. Purpose: handling my enquiry (a request for a demo, a commercial proposal, a partnership, etc.) and contacting me about it.
  2. Personal data: name; email address; phone number and company name (if provided); message text; language; IP address; time of submission.
  3. Operations and method: as in items 3–4 of Part 1; the data are accessible to TIMEWEB.CLOUD LLC as the party providing the infrastructure that hosts the Service, and are transferred to Unisender Smart LLC (Unisender Go) to deliver a notice of the enquiry to the Operator's mailbox.
  4. Term: 12 months from the date the enquiry is handled (if it was never handled, from the date it was received), or until the consent is withdrawn.
  5. Withdrawal: by email to {{RU_PRIVACY_EMAIL}}; after withdrawal the data are destroyed within no more than 30 days; the record of this consent (email hash, document version, time) is kept for 3 years.

Part 3. Consent to receive advertising and informational messages (optional)

Given with a separate tick at registration. Refusing this consent does not affect the ability to use the Service.

I consent:

  1. to receive by email advertising and informational messages about the Service, its new features, events and special offers of the Operator (Article 18(1) of Federal Law No. 38-FZ of 13 March 2006 "On Advertising");
  2. to the processing for this purpose of my personal data — email address, name, interface language — by the operations and methods given in items 3–4 of Part 1 (Article 15(1) of the PD Law).

Term: until withdrawn. The consent can be withdrawn at any time via the unsubscribe link in a message or by email to {{RU_PRIVACY_EMAIL}}; the Operator stops sending messages immediately and stops processing the data for this purpose within no more than 30 days. [TECH-CHECK: an unsubscribe mechanism (link in the email, Console setting) must exist before any advertising is sent; the current version of the Service sends no advertising.]

The version of this consent stored as evidence is the version of this document. [LAWYER-REVIEW: if Part 3 has to become a separate document, the website routes and the version configuration must change.]