Privacy Policy

1. Introduction and scope

This Policy applies to personal data processed when you register, subscribe, use AI consultations, upload documents, or otherwise interact with the service.

By using the service, you confirm that you have read this Policy. Where separate consent is required under 152-FZ, we will request it explicitly before processing.

This Policy does not apply to third-party websites or services linked from our platform; their privacy practices are governed by their own policies.

2. Data controller

The data controller for personal data processed through AI-Advisors.online is the legal entity operating the service on the Russia market.

Privacy and data subject requests: manager@ai-advisors.online

Operator registration details and requisites will be published in the service footer and account area as required by applicable law.

3. Personal data we collect

Account and identity data: email address, name (if provided), authentication tokens, session logs, and account preferences.

Usage and content data: consultation messages, prompts, AI responses, uploaded documents you choose to store, feature usage metrics, and technical logs (IP address, browser type, device identifiers, timestamps).

Billing data: subscription status, transaction identifiers, billing history, and limited payment metadata. Full payment card details are processed by Stripe and are not stored on our servers.

Communications: support correspondence and feedback you send to us.

4. Purposes and legal bases

We process personal data to: provide and maintain the service; authenticate users; deliver AI consultations; manage subscriptions and billing; ensure security and fraud prevention; comply with legal obligations; and improve product quality through aggregated analytics.

Legal bases under 152-FZ may include: your consent; necessity for contract performance; legitimate interests balanced against your rights (e.g., security monitoring); and compliance with legal requirements.

We do not sell personal data. We do not use your conversation content for advertising profiling.

5. AI processing and conversation data

To generate responses, your messages and relevant context (including selected documents and prior conversation history within your account) are transmitted to AI model providers and infrastructure we use to operate the service.

Conversation data is processed solely to fulfill your requests, maintain session continuity, and improve reliability. We apply access controls and contractual safeguards with subprocessors.

You should not submit special categories of personal data (health, biometric, political opinions, etc.) or third-party confidential information unless necessary and lawful. You are responsible for redacting sensitive information where appropriate.

6. Payment processing

Subscription payments are handled by Stripe, Inc. Stripe collects and processes payment card and billing information according to its privacy policy and PCI-DSS requirements.

We receive limited transaction data from Stripe (e.g., payment status, last four digits, expiry) sufficient for accounting, support, and fraud prevention.

For payment-related privacy inquiries, you may also contact Stripe directly through the channels described in Stripe's privacy documentation.

7. Data sharing and international transfers

We may share personal data with: cloud hosting providers; AI model and API providers; Stripe for payments; email delivery services; and professional advisers where required by law.

All subprocessors are bound by data processing agreements with confidentiality and security obligations appropriate to the Russia market context.

Where data is transferred outside the Russian Federation, we implement measures required under 152-FZ, which may include adequacy decisions, standard contractual clauses, or your explicit consent where applicable.

8. Data retention

We retain personal data for as long as your account is active and as needed to provide the service, resolve disputes, enforce agreements, and comply with legal, tax, and accounting obligations.

Conversation history and uploaded documents are retained according to your account settings and product defaults unless you delete them or request erasure, subject to legal retention requirements.

After account deletion, we may retain anonymized or aggregated data and certain records as required by law or for legitimate business purposes.

9. Your rights

Subject to 152-FZ and applicable law, you may have the right to: access your personal data; request correction of inaccurate data; request deletion where no legal basis for retention exists; withdraw consent where processing is consent-based; restrict or object to certain processing; and lodge a complaint with the authorized supervisory authority in the Russian Federation (Roskomnadzor).

To exercise your rights, contact us at the email below. We will respond within timelines prescribed by applicable law, typically within thirty (30) days.

We may request identity verification before fulfilling requests to protect your account and other users.

10. Security, cookies, changes and contact

We implement technical and organizational measures including encryption in transit, access controls, monitoring, and regular security reviews. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

We use essential cookies and similar technologies for authentication, session management, and security. Details are provided in our Cookie notice where applicable.

We may update this Policy to reflect legal or product changes. Material updates will be notified via the service or email. The effective date appears at the top of this document.

Privacy inquiries and data subject requests: manager@ai-advisors.online