Personal Data Processing Policy

1. Scope

This policy covers visitors to fand-ai.pro, the contact form and chat, and recipients of private meeting reports. The website presents my services, experience and projects. Its controller is an individual, not a legal entity.

It covers information you provide and technical website data. It does not replace a development agreement or define data processing rules for your company’s own systems.

2. Information and purposes

Contact form: name, email, message, IP address and submission time, used to answer your enquiry, discuss the task and prepare a proposal.

Chat: conversation text, any name and contact details you provide, conversation ID, language, IP address and message times. Browser and device information may also be recorded when messages are processed. This supports replies, forwarding your enquiry to me and continuing the conversation.

Website visits: time, page, approximate country, device type, browser and operating system. First-party statistics also measure active time, scroll depth and viewed sections. General analytics logs use a pseudonym instead of the original IP; this reduces exposed information but does not make the records fully anonymous.

Private reports: IP address, approximate country, device and browser, opening time, active time, sections viewed, questions expanded and number of searches. Report statistics do not record search text. These signals help assess interest and protect access. They do not prove that the report was read or identify a person behind a shared link.

Security: technical requests, login attempts and rate-limit records help prevent spam, code guessing and unauthorised access. Country is approximate and can be affected by a VPN.

Do not send passwords, card details, health information or other people’s personal data that is unnecessary for your task.

3. Purposes and grounds

Enquiries are used to respond to your request and discuss cooperation at your initiative, including preparing and performing an agreement. Processing that requires consent needs separate consent for a specific purpose. Visiting the website or dismissing the cookie notice is not such consent.

Technical data supports website operation, security, access control and first-party statistics within the limits of applicable law. Visitors see only total visits and unique visitor counts. Detailed charts, countries, devices, browsers and reading metrics are available only to the signed-in administrator.

Enquiry data is not used for marketing mailings without separate permission. Information and any required consent will be updated if the purpose or data collected changes.

4. Chat, AI and external services

Enquiries and messages may be forwarded to me through Telegram. Email correspondence is also processed by the email service you use to contact me. Hosting provides the website and its technical logs.

In AI consultant mode, message text and part of the conversation are sent to the connected AI provider to generate a response. As of this revision, the connected service is the OpenAI API. Preset scenario mode does not use an external AI model for its replies. AI responses can be wrong; I confirm final timelines and work terms personally.

External services may process data outside your country under their own terms. I do not promise that all data stays in Russia or that external providers do not retain requests. If you do not want your text sent to AI, contact me directly by email.

Country lookup uses a local geographic database; it does not send your IP to an external lookup service. Public website pages do not use third-party advertising trackers.

5. Cookies and browser storage

Technical cookies help remember the language and access to chat, the admin panel and private reports. They are not advertising cookies. Admin and report session cookies last up to 12 hours; chat access and the report browser identifier last up to 30 days. Signing in again may renew these periods.

The conversation ID and notice dismissal may be saved in localStorage. Notice dismissal is also remembered for the current tab session in sessionStorage. Dismissal applies to the current notice version and only records that the notice was shown and closed.

First-party statistics also use server logs and viewing events. Disabling cookies alone does not stop all collection of technical data.

You can remove cookies and website data through your browser settings. You may then need to sign in to a report again or start a new conversation. Enquiries can also be sent by email.

6. Storage and deletion

Processing includes collection, recording, storage, correction, use, providing necessary information to services, restriction and deletion. Enquiries, conversations and logs are primarily stored on the website server. Copies may remain in Telegram, email and the selected AI provider’s systems.

Enquiries are used while needed to respond, discuss or perform agreed work; longer retention may be necessary for contractual duties or the protection of rights. Contact me to request deletion of unnecessary correspondence or withdraw consent. Requests are assessed alongside any other lawful retention grounds.

The website does not currently automatically delete every record after a uniform period. Some technical logs rotate when their size limit is reached; private logs can be cleared separately by the administrator. Cookie expiry does not determine the retention of conversations or server logs.

Deletion from the website does not instantly delete backup or external service copies. Those copies and further actions are addressed separately when handling a request; backups are not used for ordinary communication with visitors.

7. Access and protection

The website uses HTTPS, input checks, rate limits and access controls. Enquiries, conversations and detailed statistics are available through the protected admin area. Private reports use a separate link and code or authorisation token; access can be revoked.

Anyone receiving a working authorised link or code can view the corresponding report. Share these only with intended recipients. Access does not grant permission to publish meeting recordings or other people’s data.

Personal enquiries and IP addresses are not published in public statistics. People supporting the website may receive access only for their relevant task and on a lawful basis.

8. Your data rights

You can ask about processing, correct inaccurate data, request restriction or deletion and withdraw consent previously given. Email the address above with the subject “Personal data”.

Identify the enquiry, conversation or report concerned and provide a reply contact. Verification of your connection to a record may be needed to protect other people’s data. Do not send a passport copy unless necessary.

Replies and actions follow the time limits of applicable law. If retention remains necessary for a contract or another lawful purpose, I will explain why. You may also contact the relevant data protection authority.

9. Changes

The current policy is accessible on this page without login or a code. It is updated when the website, services or processing practices change. The revision date appears above. Russian and English versions describe the same processes.