Personal Data Processing Policy

1. General

This Policy explains how personal data of visitors to ainlab.ru (the Site) is processed and protected. It is adopted under Art. 18.1(2) of Russian Federal Law No. 152-FZ of 27.07.2006 “On Personal Data” (the Law) and is published openly.

Controller: Sole proprietor Evgeni Vladislavovich Ozadovsky. Address for personal data requests: through the request form on ainlab.ru.

2. What, why and on what basis

Answering your request, preparing an offer and a contract. Data: name, phone, Telegram or email, the chosen service, the task description. Basis: your consent (Art. 6(1)(1)) and steps taken at your request before a contract (Art. 6(1)(5)). Kept until the purpose is reached, at most 3 years after the request was last changed, or until you withdraw consent.

Answers of the AI assistant on the Site (typed or by voice). Data: the text of your messages (typed or recognised from speech), and your name and contact if you write them — then a request is created from the conversation. Basis: your consent. A conversation that did not become a request is deleted after 12 months; one that did is kept as long as the request.

Protecting the form and chat from spam and abuse. Instead of the IP address, an irreversible hash of the IP address and browser string, changing every day, is stored; the IP address cannot be recovered from it.

No special categories of personal data or biometric data are processed. Voice is not recorded or stored.

3. How data is processed

Collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, deletion and destruction; automated and mixed processing.

Recording, systematisation, accumulation, storage, clarification and retrieval take place in a database on a server located in the Russian Federation (Art. 18(5) of the Law).

The Site’s web application and the AI model run on the controller’s server in Germany (Frankfurt am Main). What you send passes through that server, where the AI answer is generated, and is recorded in the database in Russia; it is not stored in Germany. Germany is a party to the Council of Europe Convention 108 and provides adequate protection (Art. 12 of the Law).

Voice mode: speech is recognised by your browser using its maker’s service (Google in Chrome and Edge, Apple in Safari) on their terms. The controller receives only the recognised text, never audio. If you prefer not to use browser speech recognition, type in the chat or the form.

Fonts are loaded from Google Fonts, so your browser shares its IP address with Google. Google Fonts sets no cookies.

4. Sharing

Data is never sold or shared with third parties, except hosting providers that supply servers in Russia and Germany and may not use the data for their own purposes, and where Russian law requires.

The controller is notified of a new request in Telegram without your personal data — only the request number and a link to the protected back office.

5. Retention, deletion and backups

Retention periods in section 2 are enforced automatically: the server deletes expired data every day.

When consent is withdrawn or the purpose is reached, processing stops and the data is destroyed within 30 days unless another legal ground applies.

Database backups are kept for 14 days, then deleted.

6. Your rights

You may obtain information about the processing of your data; require clarification, blocking or destruction of incomplete, outdated, inaccurate or unlawfully obtained data; withdraw consent; and complain to Roskomnadzor or a court.

Send requests to through the request form on ainlab.ru. The controller replies within 10 working days, extendable by up to 5 working days with notice.

7. Security

HTTPS; an encrypted channel between the servers in Germany and Russia; the database is not reachable from the internet; the back office requires a password and a one-time code (2FA) and only the controller has access; IP addresses are not stored; regular backups.

8. Cookies

What the Site keeps in your browser is described in the Cookie Policy.

9. Final provisions

The controller may change this Policy. A new version applies from its publication on the Site.