// POLICY

Privacy Policy

How the Avrora engineering studio processes and protects personal data of site visitors in accordance with Russian Federal Law No. 152-FZ. Русская версия — the Russian version prevails in case of discrepancies.

1.General provisions

This Policy sets out how personal data is processed on avroraai.com and the measures taken to keep it secure. Personal data operator: Zenin Maksim Ruslanovich, Taxpayer ID (INN) 231104652938, email hello@avroraai.com (the "Operator").

The Policy is issued to comply with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" ("Law 152-FZ") and is published in accordance with Part 2, Art. 18.1 of Law 152-FZ to provide unrestricted access to the document describing the Operator's personal data policy.

2.What data is processed

Name; email address; phone number or another contact channel (messenger); company name and industry (if voluntarily provided); information voluntarily submitted in the site's form fields. When the chat assistant is used, the text of messages voluntarily entered into the chat is also processed. Special categories of personal data (Art. 10 of Law 152-FZ) and biometric data (Art. 11 of Law 152-FZ) are not requested or processed by the Operator.

In addition — only with your consent (cookie banner) — the site collects anonymised usage statistics: an anonymous visitor identifier, viewed sections, clicks, time on site, device type, screen size and language. This data does not include your name, contact details or IP address, cannot identify you, and is used solely to improve the site. Without consent no statistics are collected — choose "Essential only". You can withdraw consent by clearing the site data in your browser.

3.Purposes of processing

Handling and responding to your request; consulting on services; conclusion and performance of civil-law contracts (provision of development and automation services and fulfilment of obligations to the client); sending informational messages (only with the user's separate consent). The data is not used for any other purpose.

4.Legal grounds

Processing is based on the data subject's consent (Item 1, Part 1, Art. 6 and Art. 9 of Law 152-FZ), given by ticking the checkbox in the site form before submitting it. Consent to receive informational and advertising messages is requested separately and is not a condition for handling your request (Part 1, Art. 18 of Federal Law No. 38-FZ of 13.03.2006 "On Advertising").

5.Processing procedure, retention and localisation

Data is processed from the moment the form is submitted until the purposes of processing are achieved or consent is withdrawn, and is kept no longer than the purposes of processing require (Part 7, Art. 5 of Law 152-FZ), after which it is deleted or anonymised. If consent is withdrawn, the data is destroyed within thirty days (Part 5, Art. 21 of Law 152-FZ).

Requests submitted via the site forms are delivered to the Yandex 360 mail service and stored on its servers located in the Russian Federation, which ensures that the recording, systematisation, accumulation and storage of Russian citizens' personal data takes place in databases within the Russian Federation (Part 5, Art. 18 of Law 152-FZ); the site's web server only receives and forwards the data and does not store it.

6.Disclosure to third parties and cross-border transfer

The Operator does not disclose personal data to third parties without the data subject's consent, except in cases provided for by the legislation of the Russian Federation (including lawful requests from authorised state bodies). Processing entrusted to the mail service provider is carried out in accordance with Part 3, Art. 6 of Law 152-FZ.

To operate the chat assistant, messages entered into the chat may be processed by a third-party AI service provider, including outside the Russian Federation (cross-border transfer — Art. 12 of Law 152-FZ), solely to generate a reply; the Operator does not store chat conversations. Do not enter passwords, card details, passport data or other sensitive information into the chat — the assistant never asks for them.

7.Data subject rights

The data subject may obtain information about the processing of their personal data (Art. 14 of Law 152-FZ), demand that it be corrected, blocked or destroyed where the data is incomplete, outdated, inaccurate or unnecessary for the stated purposes (Art. 20, 21 of Law 152-FZ), and withdraw consent at any time (Part 2, Art. 9 of Law 152-FZ). Requests should be sent to hello@avroraai.com; a reply is provided within ten business days of receipt (Part 1, Art. 20 of Law 152-FZ).

If the data subject believes their rights have been violated, they may complain about the Operator's actions or inaction to the authorised personal data protection authority (Roskomnadzor) or to a court (Art. 17 of Law 152-FZ).

8.Protection measures

The Operator takes the legal, organisational and technical measures required by Art. 18.1 and Art. 19 of Law 152-FZ: restricting and segregating access to data, encrypting transfer channels (HTTPS/TLS), protecting infrastructure against unauthorised access, minimising the data collected, and internal compliance monitoring.

9.Changes to this Policy

The Operator may amend this Policy. A new version takes effect once published on this page. The current version is always available at avroraai.com/privacy-en.html; the legally binding Russian version is at avroraai.com/privacy.html.

Effective date: 11.06.2026