1.General provisions
This Policy sets out how personal data is processed on avroraai.com and the measures taken to keep it secure. Personal data operator: Zenin Maksim Ruslanovich, Taxpayer ID (INN) 231104652938, email hello@avroraai.com (the "Operator").
The Operator filed the personal data processing notification with the supervisory authority (Roskomnadzor) on 12.06.2026, No. 100318037 (Art. 22 of Law 152-FZ). The Policy is issued to comply with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" ("Law 152-FZ") and is published in accordance with Part 2, Art. 18.1 of Law 152-FZ to provide unrestricted access to the document describing the Operator's personal data policy. The person responsible for organising personal data processing (Art. 22.1 of Law 152-FZ) is the Operator.
2.What data is processed
Name; email address; phone number or another contact channel (messenger); company name and industry (if voluntarily provided); information voluntarily submitted in the site's form fields. When the chat assistant is used, the text of messages voluntarily entered into the chat is also processed. For the conclusion and performance of civil-law contracts the following may additionally be processed: full name; date (year, month, day) of birth; registration address; taxpayer ID (INN); SNILS; identity document details; bank details (card details, account number); position of the counterparty’s representative; company name. Special categories of personal data (Art. 10 of Law 152-FZ) and biometric data (Art. 11 of Law 152-FZ) are not requested or processed by the Operator; voice messages in the chat are used solely for speech recognition and are not used to identify a person. The site is intended for adult users; the Operator does not knowingly collect personal data of persons under 18.
In addition — only with your consent (cookie banner) — the site collects anonymised usage statistics: an anonymous visitor identifier, viewed sections, clicks, time on site, device type, screen size and language. This data does not include your name, contact details or IP address, cannot identify you, and is used solely to improve the site. Without consent no statistics are collected — choose "Essential only". You can withdraw consent by clearing the site data in your browser.
3.Purposes of processing
Handling and responding to your request; consulting on services; conclusion and performance of civil-law contracts (provision of development and automation services and fulfilment of obligations to the client); sending informational messages (only with the user's separate consent). The data is not used for any other purpose.
4.Legal grounds
Processing is based on the data subject's consent (Item 1, Part 1, Art. 6 and Art. 9 of Law 152-FZ), given by ticking the checkbox in the site form before submitting it. Consent to receive informational and advertising messages is requested separately and is not a condition for handling your request (Part 1, Art. 18 of Federal Law No. 38-FZ of 13.03.2006 "On Advertising").
5.Processing procedure, retention and localisation
Data is processed from the moment the form is submitted until the purposes of processing are achieved or consent is withdrawn, and is kept no longer than the purposes of processing require (Part 7, Art. 5 of Law 152-FZ), after which it is deleted or anonymised. If consent is withdrawn, the data is destroyed within thirty days (Part 5, Art. 21 of Law 152-FZ). Data processed in connection with the conclusion and performance of contracts is retained for the periods established by the legislation of the Russian Federation (including tax law).
Requests submitted via the site forms are delivered to the Yandex 360 mail service and stored on its servers located in the Russian Federation, which ensures that the recording, systematisation, accumulation and storage of Russian citizens' personal data takes place in databases within the Russian Federation (Part 5, Art. 18 of Law 152-FZ); the site's web server only receives and immediately forwards the content of requests and does not store it (the server keeps only standard technical security logs — for attack protection and fault diagnostics — which are not used to identify visitors).
6.Disclosure to third parties and cross-border transfer
The Operator does not disclose personal data to third parties without the data subject's consent, except in cases provided for by the legislation of the Russian Federation (including lawful requests from authorised state bodies). Processing entrusted to the mail service provider is carried out in accordance with Part 3, Art. 6 of Law 152-FZ.
To operate the chat assistant, messages entered into the chat (text and voice) are processed by automated services, including third-party AI technology providers, solely to generate a reply. No personal data is requested in the chat; messages are passed to the service without any information identifying the visitor (no name, contact details or IP address), are not stored by the Operator and are not linked to any specific person. Do not enter passwords, card details, passport data or other personal information into the chat. Personal data received via the site forms is processed and stored exclusively within the Russian Federation; the Operator does not carry out cross-border transfer of personal data, consistent with the notification filed with Roskomnadzor.
7.Data subject rights
The data subject may obtain information about the processing of their personal data (Art. 14 of Law 152-FZ), demand that it be corrected, blocked or destroyed where the data is incomplete, outdated, inaccurate or unnecessary for the stated purposes (Art. 20, 21 of Law 152-FZ), and withdraw consent at any time (Part 2, Art. 9 of Law 152-FZ). Requests should be sent to hello@avroraai.com; a reply is provided within ten business days of receipt (Part 1, Art. 20 of Law 152-FZ).
If the data subject believes their rights have been violated, they may complain about the Operator's actions or inaction to the authorised personal data protection authority (Roskomnadzor) or to a court (Art. 17 of Law 152-FZ). The Operator does not make decisions that produce legal consequences for the data subject or otherwise affect their rights and legitimate interests based solely on automated processing of personal data, including by means of artificial intelligence (Art. 16 of Law 152-FZ).
8.Protection measures
The Operator takes the legal, organisational and technical measures required by Art. 18.1 and Art. 19 of Law 152-FZ: restricting and segregating access to data, encrypting transfer channels (HTTPS/TLS), protecting infrastructure against unauthorised access, minimising the data collected, and internal compliance monitoring.
If an unlawful or accidental transfer (provision, distribution, access) of personal data is established, the Operator notifies the authorised body (Roskomnadzor) of the incident within 24 hours, and of the results of the internal investigation within 72 hours (Part 3.1, Art. 21 of Law 152-FZ), and takes measures to remedy the consequences.
9.Changes to this Policy
The Operator may amend this Policy. A new version takes effect once published on this page. The current version is always available at avroraai.com/privacy-en.html; the legally binding Russian version is at avroraai.com/privacy.html.
Effective date: 12.06.2026 · Current version dated 13.06.2026