Personal Data Processing Policy
1. General Provisions
This Personal Data Processing Policy (the “Policy”) is prepared in accordance with Federal Law No. 152-FZ dated July 27, 2006 “On Personal Data” and defines the position and intentions of AITALON LLC (the “Operator”) regarding personal data processing and protection.
Personal data means any information relating directly or indirectly to an identified or identifiable individual.
This Policy applies to all personal data operations performed both with and without automation tools.
2. Operator Information
Operator name: AITALON LLC
Registered address: 111675, Moscow, Lukhmanovskaya St., 13, premises 3/1
TIN / PSRN: 7720964675 / 1267700113482
Privacy contact email: privacy@aitalon.ru
3. Purposes of Personal Data Processing
The Operator processes personal data solely for the following purposes:
- Contract conclusion and performance: to provide access to the Operator’s services and offerings, including AITalon DevScore, AIGate, AIPitch, consulting and implementation services, lead/request handling, commercial proposal preparation, pricing calculations, and pilot/production launch support.
- User communication: to provide feedback, notifications, and responses to service-related inquiries, including by email and by an optionally provided phone number or Telegram identifier.
- Technical support: to diagnose and resolve technical issues.
- Service improvement: to analyze user experience, platform quality, and stability in anonymized or aggregated form.
- Informational mailings: to send product and update materials where user consent is provided.
4. Categories of Processed Data
- Contact data: name, email address, and an optionally provided phone number or Telegram identifier.
- Technical data: IP address, cookies, browser and OS data, access time, and requested URLs.
- Form data: information voluntarily provided by the user in comment fields and in additional request/calculator fields.
- User materials: files, reference links, brand assets, texts, and other materials that a user voluntarily uploads or references while working with AIPitch and related Operator services.
5. Legal Basis and Processing Principles
Personal data processing is based on:
- data subject consent;
- the necessity to perform a contract to which the data subject is a party;
- applicable legal requirements of the Russian Federation.
The Operator follows principles of lawfulness, data minimization, purpose limitation, accuracy, confidentiality, and security.
6. Data Retention and Processing Periods
Processing is terminated when processing purposes are achieved, consent is withdrawn, or other legal grounds apply.
Data submitted via website forms is retained for up to 3 (three) years unless a different period is required for contract performance or by law.
7. Data Subject Rights
Data subjects have the right to:
- receive information about the processing of their personal data;
- request rectification, blocking, or deletion where lawful grounds exist;
- withdraw consent to personal data processing;
- appeal actions/inaction of the Operator to the competent authority or court.
To exercise your rights, send a request to: privacy@aitalon.ru.
8. Security Measures
The Operator implements necessary organizational and technical measures to protect personal data against unauthorized or accidental access, alteration, disclosure, blocking, copying, distribution, and other unlawful actions.
- designation of responsible personnel for personal data processing;
- use of secure protocols and access control mechanisms;
- regular review and audit of implemented security controls.
9. Cross-Border Data Transfer
Before any cross-border data transfer, the Operator evaluates legal grounds and sufficient protection of data subjects’ rights in the relevant jurisdiction.
10. Final Provisions
This Policy is a publicly available document. The Operator may amend this Policy without prior notice. The updated version becomes effective upon publication at https://aitalon.ru/privacy-policy/, unless otherwise stated in the new version.