The data controller (operator) responsible for your personal data is:
IE Leontyev Artyom Alexandrovich (ИП Леонтьев А.А.)
INN: 615531331796 · OGRNIP: 326508100069940 · Russian Federation
The person responsible for organizing personal data processing is Leontyev Artyom Alexandrovich. For any privacy-related questions, contact us at artmloap@gmail.com (subject: "Personal Data").
The Service is intended for users aged 18 and older. We do not knowingly collect data from minors. If we learn that we have processed data from a person under 18 without a legal representative's consent, we will take steps to delete that data promptly.
Categories of data subjects: registered users of the Service; visitors to the website (technical data only).
Operations performed: collection, recording, organization, accumulation, storage, updating, retrieval, use, transfer, anonymization, blocking, deletion, and destruction of personal data.
kvill_did cookie)We do not collect special categories of personal data (health, biometric, racial or ethnic origin, political opinions, religious beliefs, financial data).
| Purpose | Legal basis | Data used |
|---|---|---|
| Account registration and authentication | Consent; contract performance | Email, name, password hash |
| Providing the AI generation service | Contract performance | Prompts, uploaded files, presentation data |
| Payment processing | Contract performance; legal obligation | Payment reference, amount, transaction status |
| Communications (support, notifications) | Contract performance; consent | Email, message content |
| Security and fraud prevention | Legitimate interest of the operator | IP, session data, usage patterns |
| Service improvement and analytics | Consent | Anonymized usage statistics |
| Legal compliance | Legal obligation | Transaction records, tax data |
We use technical cookies and browser localStorage to:
kvill_did cookie holds a pseudonymous browser identifier that lets us see repeated sign-ups from one device. It is not linked to your identity, is never shared with third parties, and is deleted with the rest of the technical data within 90 days.Technical cookies are required for the Service to function and cannot be disabled.
We use Yandex Metrica (Yandex LLC, Russia) for web analytics. Metrica sets its own cookies (including _ym_uid, _ym_d, _ym_isad, _ym_visorc) and collects pseudonymous usage data: pages viewed, traffic source, device and browser details, and goal completions (sign-up, presentation created, balance top-up). An internal account identifier is shared with Metrica to link sessions; your e-mail, name, prompts and presentation content are never sent to Metrica. Session replay (Webvisor) runs on the landing page only, never inside the workspace (/app); passwords and input field contents are not recorded. You can opt out by installing the Yandex Metrica blocker browser extension or by disabling cookies; opting out does not limit your access to the Service. We do not use advertising trackers or share cookie data with third parties for advertising purposes.
For the Service to function, we share certain data with these third-party service providers:
| Recipient | Country | Purpose | Data shared |
|---|---|---|---|
| Supabase Inc. (AWS) | Germany (eu-central-1) | Database, authentication, storage | Email, name, password hash, presentation data, chat history |
| OpenAI, L.L.C. | United States | Voice transcription; AI content generation when OpenAI is the configured AI provider | Audio submitted for voice transcription; prompts and uploaded-file content when OpenAI is the configured AI provider (without identifying information where possible) |
| Anthropic, PBC (when Anthropic is the configured AI provider) | United States | AI content generation | Prompts and uploaded-file content (voice-message audio is not sent) |
| Google LLC | United States | OAuth authentication (if you sign in with Google) | Email, name (provided by Google upon your authorization) |
| T-Bank (АО «Т-Банк») | Russia | Payment processing | Payment amount, transaction ID (card details go directly to T-Bank) |
| Yandex LLC (Yandex ID) | Russia | OAuth authentication (if you sign in with Yandex ID) | Yandex ID identifier and email; name, login, phone, birthday, gender, and profile picture are not requested |
All data transfers are carried out under contractual arrangements (Data Processing Agreements) designed to protect your rights. We transfer only the minimum data necessary for each provider to perform their function.
We have notified the Russian data protection authority (Roskomnadzor / РКН) of our cross-border data transfers as required by applicable law.
| Data category | Retention period |
|---|---|
| Account data (email, name) | Duration of account existence + 30 days after deletion |
| Presentations and generated content | Duration of account existence; deleted with account |
| Transcript text from a voice message | 24 hours from completion, solely to replay a lost response; then removed from the working database. Backups are handled under the backup rotation policy |
| Payment records | 4 years (required by tax law) |
| Technical logs (IP, session) | 90 days |
| Anonymized analytics | Indefinitely (not personal data) |
Audio is sent to OpenAI for transcription and is kept in server memory only for the duration of processing; raw audio is not written to the database or payment journal. The transcript text is retained for 24 hours from completion solely to replay a lost response, then removed from the working database. Backups are handled under the backup rotation policy. This is separate from payment records, which are retained for 4 years.
You have the right to:
To exercise any of these rights, email artmloap@gmail.com (subject: "Personal Data Request") from the email address associated with your account. We may ask for additional verification to confirm your identity. We will respond within 30 days.
If you withdraw consent to process your personal data, your account will be deactivated and your data deleted within 30 days, except data we are legally required to retain (e.g., tax records are kept for 4 years).
We implement technical and organizational measures to protect your personal data:
In the event of a personal data breach, we will:
We may update this Privacy Policy. When we make material changes (such as new data categories or new recipients), we will notify you by email and, where required by law, request fresh consent.
The current version is always available at kvill.ru/privacy-en.
For any privacy-related questions or requests: artmloap@gmail.com
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority. In Russia, this is Roskomnadzor (pd.rkn.gov.ru). In the EU, you may contact the supervisory authority in your country of residence.