Privacy Policy

1. Controller

The data controller is Oleg Stefanov. Contact: olegstefanoyv1@gmail.com.

2. Data we process

• Account data: name, email, Google account identifier, profile image, authentication tokens, and session records.
• Workspace data: uploaded knowledge documents, settings, instruction versions, secret placeholders, agent files, and feedback.
• Telegram data: connected Telegram Business identifiers, message text, conversation metadata, reply decisions, and delivery status.
• Payment data: plan, currency, provider, payment identifiers, subscription status, invoices or webhook events, and credit ledger entries. Full card details are handled by YooKassa or LemonSqueezy and are not stored by us.
• Technical and analytics data: IP address, browser and device information, timestamps, page views, product events, and consent choices.

3. Why we process data

• To create and secure accounts.
• To operate Telegram Business replies, approval workflows, agent tools, and workspace storage.
• To provide subscriptions, trials, credits, renewals, cancellations, refunds, receipts, and customer support.
• To prevent abuse, fraud, unauthorized access, payment disputes, and service misuse.
• To improve usability and product reliability through analytics and diagnostics.
• To comply with tax, accounting, consumer protection, and payment provider obligations.

4. Legal bases

• Contract performance: providing the account, workspace, subscriptions, credits, and support.
• Legitimate interests: service security, debugging, analytics, fraud prevention, and product improvement.
• Consent: optional analytics or marketing where consent is required.
• Legal obligation: accounting, tax, payment, and compliance records.

5. Third-party services

• Google OAuth is used for sign-in.
• Telegram is used to connect Telegram Business accounts and exchange messages.
• YooKassa processes RUB payments.
• LemonSqueezy processes USD payments.
• Plausible, Google Tag Manager, and Yandex Metrika may be used for analytics according to your consent settings.
• AI model and infrastructure providers may process prompts, uploaded knowledge, and conversation context needed to generate replies.

6. Retention

• Account and workspace data is kept while your account is active or as needed to provide the service.
• Payment, tax, accounting, and dispute records are kept for the period required by law and provider rules.
• You can request deletion of account or workspace data by email. Some records may be retained where legally required or needed to resolve disputes, prevent abuse, or keep financial records.

7. Your rights

• Depending on your jurisdiction, you may request access, correction, deletion, restriction, portability, or objection to processing.
• You can withdraw optional consent where processing is based on consent.
• To exercise rights, email olegstefanoyv1@gmail.com. We may need to verify your account before acting on the request.

8. Security

We use access controls, environment-based secrets, HTTPS in production, provider-hosted payment pages, and operational monitoring. No online service can be guaranteed completely secure, so you should avoid uploading unnecessary sensitive data.

9. International processing

Data may be processed in countries where we, our infrastructure providers, analytics providers, AI providers, payment providers, or support tools operate.

10. Contact

For privacy requests, email olegstefanoyv1@gmail.com.