Privacy Policy

PRIVACY POLICY regarding the processing of personal data (hereinafter - the "Policy")

Version from February 01, 2026
Russian Federation, Rostov Region, Rostov-on-Don

1.
GENERAL PROVISIONS
1.1. The Policy determines the procedure for processing personal data (PD) and measures to ensure the security of PD that INDIVIDUAL ENTREPRENEUR LEVSHUKOV ARTEM DMITRIEVICH (OGRNIP 322619600076368, INN 614109326000) may obtain about the User through the Site. The Policy establishes the Operator's obligations not to disclose and to ensure a regime for protecting the confidentiality of PD provided by the User in connection with the use of the Site, collected using active and passive means, and applies to the processing of PD regardless of the User's location within the territory of the Russian Federation. When processing the User's PD, the Operator ensures full confidentiality of PD and compliance with the requirements established by the legislation of the Russian Federation.
1.2. For the purposes of application and interpretation of the terms used in the Policy, unless expressly stated otherwise in the text of the Policy, the Operator uses the following corresponding definitions:
1.2.1. "Automated PD processing" — processing of PD using computer technology.
1.2.2. "PD blocking" — temporary termination of PD processing (unless processing is necessary to clarify PD).
1.2.3. "Personal data information system (PDIS)" — a collection of PD contained in databases and information technologies and technical means ensuring their processing.
1.2.4. "Operator" — Individual Entrepreneur Levshukov Artem Dmitrievich (OGRNIP 322619600076368, INN 614109326000), acting independently or jointly with other persons organizing and (or) carrying out the processing of PD, as well as determining the purposes of PD processing, the composition of PD subject to processing, actions (operations) performed with PD.
1.2.5. "Depersonalization of PD" — actions as a result of which it becomes impossible to determine the ownership of PD by a specific User without using additional information.
1.2.6. "PD processing" — any action (operation) or a set of actions (operations) performed using automation tools or without using such tools with PD, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of PD.
1.2.7. "Personal data" (PD) — any information relating directly or indirectly to a specific or identifiable User.
1.2.8. "PD authorized by the User for distribution" - PD to which access by an unlimited circle of persons is provided by the User by giving consent to the processing of PD authorized by the User for distribution in the manner prescribed by Federal Law No. 152-FZ of July 27, 2006 "On Personal Data."
1.2.9. "Provision of PD" — actions aimed at disclosing PD to a specific person or a specific circle of persons.
1.2.10. "Distribution of PD" — actions aimed at disclosing PD to an unspecified circle of persons.
1.2.11. "Site" — a website through which the User is provided with the opportunity to place an order and gain access to a digital product, located at the permanent URL: https://flashai.pro/, including all levels of the specified domain, both active and to be commissioned throughout its validity period, as well as outbound pages (landings). The right holder and administrator of the website is the Administration.
1.2.12. "User" ("Personal data subject") — an individual who is directly or indirectly defined or determined using PD.
1.2.13. "Cookies" — a small piece of data (including text files) that the Site stores on the User's device (computer, smartphone, tablet, etc.) when visiting it in order to identify the User and collect information (statistics) about their actions on the Site in the form of depersonalized data.
1.2.14. "Cross-border transfer of PD" — transfer of PD to the territory of a foreign state to an authority of a foreign state, a foreign individual, or a foreign legal entity.
1.2.15. "Destruction of PD" — actions as a result of which it becomes impossible to restore the contents of PD in the PDIS and (or) as a result of which material carriers of PD are destroyed.
1.3. These terms may be used in another case, in singular or plural, capitalized or lowercase, or as abbreviations.
1.4. The Policy is developed in accordance with the Constitution of the Russian Federation, Federal Law No. 152-FZ of July 27, 2006 "On Personal Data", and other regulatory legal acts of the Russian Federation to protect human and civil rights and freedoms when processing their PD.

2. PRINCIPLES AND CONDITIONS OF PERSONAL DATA PROCESSING
2.1. The processing of PD by the Operator is carried out based on the following principles:
- the presence of legal grounds for the processing of PD;
- limitation of PD processing to achieving specific, predetermined, and legitimate goals;
- preventing the merging of databases containing PD, the processing of which is carried out for incompatible purposes;
- processing only those PD that meet the purposes of their processing;
- compliance of the content and volume of the processed PD with the stated processing goals;
- preventing the redundancy of processed PD;
- ensuring the accuracy of PD, their sufficiency, and, if necessary, relevance.
2.2. PD processing by the Operator may be carried out in the following cases:
- the User's consent to process their PD has been obtained;
- processing is necessary for the performance of a contract to which the User is a party or beneficiary.
2.3. Consent to PD processing is provided freely by checking the specific box on the Site.
2.4. PD processing is carried out only with the User's consent, except where processing without consent is permitted by Russian legislation.
2.11. The Operator informs the User about the collection of data via metric programs and web analytics services by placing a notice on the Site.

3. PURPOSES OF PROCESSING AND CATEGORIES OF PERSONAL DATA PROCESSED BY THE OPERATOR
3.1. Processed PD includes the following purposes and categories:
No. 1. Registration and authorization. Categories: Email, name, phone, profile photo.
No. 2. Preparation, conclusion and execution of a civil liability contract. Categories: Email, name, phone, profile photo.
No. 3 & 4. Joining the referral program. Categories: Email, name, phone, profile photo.
No. 5. Issuing an electronic receipt. Categories: Email.
No. 6. Execution of a refund request. Categories: Email, phone, ID, bank details.
No. 7. Sending informational notifications. Categories: Email.
No. 8. Conducting statistical accounting. Categories: Cookies, Yandex Metrica usage data.
3.2. The Operator does not process biometric PD or special categories of PD.

4. PROVISION OF PERSONAL DATA
4.1. The provision of PD to third parties is carried out with the User's consent.
4.2. The Operator uses Yandex Metrica, operated by LLC Yandex, storing data on servers in the Russian Federation. Privacy Policy: https://yandex.com/legal/confidential/.
4.3. The Site is hosted on servers in the Russian Federation owned by LLC Timeweb.Cloud. Privacy Policy: https://st.timeweb.com/cloud-static/legal-info/personal-data-policy.pdf.

5. DISTRIBUTION OF PERSONAL DATA
5.1. Consent to process PD authorized for distribution is issued separately from other consents.
5.2. If the User discloses their PD via the Site's functionality, further distribution is only possible with their consent.

6. CROSS-BORDER TRANSFER OF PERSONAL DATA
6.1. As a general rule, the Operator does not carry out cross-border transfer of PD.

7. RIGHTS AND OBLIGATIONS OF THE OPERATOR
7.1. The Operator has the right to:
- provide PD to third parties with the User's consent;
- refuse to provide PD when stipulated by law.
7.2. The Operator is obliged to:
- provide information relating to PD processing upon User's request;
- organize PD processing according to Russian legislation;
- respond to User inquiries within 10 business days.

8. RIGHTS AND OBLIGATIONS OF THE USER
8.1. The User has the right to:
- request information regarding PD processing by emailing support@flashai.pro;
- demand clarification, blocking, or destruction of PD if it is incomplete or outdated;
- withdraw consent to PD processing.
8.2. The User is obliged to provide accurate PD and report updates.
8.3. Users providing false information are liable in accordance with the law.

9. PERSONAL DATA PROTECTION MEASURES
9.1. The Operator ensures the protection and security of PD from unlawful actions.
9.2. To fulfill these duties, the Operator appoints a responsible person, issues local acts, applies security measures, and ensures internal control.
9.3. The Operator and authorized persons are obligated not to disclose PD without the User's consent.

10. STORAGE OF PERSONAL DATA
10.1. PD storage is carried out no longer than required by the processing purposes, unless another period is established by law or contract.

11. TERMINATION OF PROCESSING AND DESTRUCTION OF PERSONAL DATA
11.1. The User may withdraw consent at any time by sending an email to support@flashai.pro.
11.2 - 11.10. Detailed procedures for blocking, clarifying, or terminating the processing of unlawful or outdated PD within respective statutory deadlines.
11.11. Software destruction of PD: certified software is used for secure wiping.

12. FINAL PROVISIONS
12.1. The Policy applies to all relations between the Operator and the User regarding PD processing.
12.2. The Policy is valid indefinitely until replaced. Changes are published directly on the Site.
12.3. The Policy is drawn up in Russian according to Russian legislation.

13. OPERATOR DETAILS
Name: IE Levshukov Artem Dmitrievich
OGRNIP: 322619600076368
INN: 614109326000
Address: 344011, Russian Federation, Rostov Region, Rostov-on-Don, Sivers Ave., 30, apt. 82
E-mail: support@flashai.pro