Privacy policy
Last updated 14 August 2026
This policy explains what personal data kibin.pro collects, why, who it is shared with, how long it is kept and how you can have it deleted. It is written to comply with Russian Federal Law No. 152-FZ of 27 July 2006 on personal data; a separate section below covers rights under the GDPR for visitors in the European Economic Area.
You don’t have to read all of it. The short version: data is collected only to answer your enquiry and to understand site traffic, it is never sold, and it is deleted on request to the address below.
1. Data controller
The controller is Индивидуальный предприниматель Кибин Александр Александрович (Alexander Kibin, sole proprietor registered in Russia), TIN 521901801928, state registration number 317527500051082.
For any question about the processing of personal data, including withdrawal of consent and deletion: orp.nibik@aa.
2. What data is collected
Only data you supply yourself, plus anonymised visit statistics.
No special categories of personal data and no biometric data are requested. Please do not send such information through the form or the assistant. If you include it on your own initiative, it is processed as part of your message on the basis of your consent and deleted together with it.
Through the contact form:
- your name;
- your email address;
- the text of your message and anything you choose to include in it.
Through the AI assistant:
- the full text of your conversation with the assistant, including everything you wrote;
- the contact and short project summary the assistant compiles from that conversation;
- a specification file, if you attached one as a PDF, and the text extracted from it.
Automatically, on each request:
- your IP address — stored in the enquiry database only as a hash used for rate limiting and spam protection; the web server’s operational logs record the address itself and keep it for a limited time;
- the User-Agent string (browser and operating system);
- the date and time of the request.
Through a third-party web analytics service:
- cookies set by the analytics service;
- anonymised visit data: pages viewed, referrer, device type, screen resolution, approximate region;
- information about how you interact with the site’s pages, including recording of actions in the interface.
3. Purposes and legal grounds
Personal data is processed only for the following purposes:
- handling and answering your enquiry and preparing a proposal — grounds: your consent (art. 6(1)(1) of 152-FZ) and performance of a contract you are party to or intend to enter into (art. 6(1)(5) of 152-FZ);
- protecting the site against automated abuse and spam (hashed IP, User-Agent) — grounds: the controller’s legitimate interest in keeping the site operational;
- traffic statistics and improving the site — grounds: the controller’s legitimate interest in measuring and improving how the site works. Data for this purpose is collected in anonymised form by a third-party analytics service.
Your data is not used for automated decision-making with legal effect, is not used for marketing mailings unless you ask for them, and is not sold to third parties.
4. Sharing with third parties
The following categories of service provider are used, each receiving only what its service requires:
- a web analytics provider — receives the data listed in section 2;
- a hosting provider supplying the server that runs the site and the enquiry database;
- providers of cloud language-model services — receive the text of your conversation with the AI assistant and the text of any specification file you attach, which is what makes the assistant work;
- providers of message delivery services — receive the notification sent to the Operator about your enquiry, including your name, contact, a short description of the task and any specification file you attached.
Some of these providers are located outside the Russian Federation, including in countries that do not ensure an adequate level of protection for data subjects. Those transfers are cross-border and are made on the basis of your consent (section 9).
The Operator does not control the terms on which foreign recipients process transferred data. If that is unacceptable to you, do not use the chat assistant or the form — contact the Operator directly by the email address in section 1.
Otherwise, data is disclosed to third parties only on lawful demand from competent state authorities.
5. Retention and deletion
Enquiries are kept until the purpose of processing is met, and in any case no longer than three years from the last interaction with you, after which they are deleted. Enquiries marked as spam are deleted within 30 days.
Analytics cookies are kept for the periods that service defines; you can delete them in your browser at any time.
You may request deletion of your data at any time by writing to orp.nibik@aa. Data is deleted from the enquiry database and from the Operator’s servers within 30 days of the request, and within the same period the Operator deletes copies of the notification about your enquiry in its internal channel. Data previously passed to the service providers listed in section 4 is deleted under those services’ own terms and timescales. You receive confirmation once the request is carried out.
6. Your rights
Under art. 14 of 152-FZ you have the right to:
- obtain information about the processing of your personal data, including the categories of data, the purposes and the retention period;
- require correction, blocking or destruction of data that is incomplete, outdated, inaccurate or unlawfully obtained;
- withdraw your consent to processing;
- complain to Roskomnadzor or bring court proceedings.
To exercise any of these, write to orp.nibik@aa stating what you need. A reply follows within the statutory period.
7. Cookies
The site uses cookies and similar browser storage:
- technical — remembering that the cookie notice has been shown and your interface preferences, such as reduced motion. This data stays in your browser and is not sent to the controller;
- analytics — cookies of a third-party web analytics service. They are set by that service, not by the Operator, and serve to count visits and analyse behaviour on the site.
Analytics cookies are set when the site’s pages open. You can block or delete cookies in your browser settings, or use the analytics service’s opt-out. The site keeps working with cookies disabled; some interface preferences simply won’t persist between visits.
8. Safeguards
The Operator applies the legal, organisational and technical safeguards required by arts. 18.1 and 19 of Federal Law No. 152-FZ, proportionate to the nature of the data and the risks involved. In particular, the channel between your browser and the site is protected, access to the enquiry database is restricted, and secret keys and tokens are stored outside publicly served directories.
9. Consent to the processing of personal data
By sending a message through the contact form or through the AI assistant on this site, you freely, of your own will and in your own interest consent to the controller processing the personal data you provide, on the terms below.
Controller: Индивидуальный предприниматель Кибин Александр Александрович, TIN 521901801928, state registration number 317527500051082.
Categories of data covered: name, email address, phone number, messenger handle, the content of your message or of your conversation with the assistant, the content of any specification file you attach, and the technical data listed in section 2.
Operations covered: collection, recording, systematisation, accumulation, storage, updating, retrieval, use, transfer (including access), including entrusting processing to the service providers listed in section 4 and cross-border transfer to countries that do not ensure an adequate level of protection for data subjects, blocking, deletion and destruction. Processing may be automated or non-automated.
Purpose: handling your enquiry, automated processing of the conversation text by a language model to produce replies and a short project summary, contacting you and preparing a proposal for services.
Duration: until the purposes are met or until consent is withdrawn. You may withdraw consent at any time by writing to orp.nibik@aa; withdrawal triggers deletion of your data within the period stated in section 5.
As to analytics cookies: they are set when the site’s pages open. You can decline by disabling cookies in your browser or using the analytics service’s opt-out.
10. For visitors in the EEA (GDPR)
If you are in the European Economic Area, the controller of your personal data within the meaning of Regulation (EU) 2016/679 (GDPR) is Индивидуальный предприниматель Кибин Александр Александрович, contactable at orp.nibik@aa.
Legal bases: necessity for entering into and performing a contract (art. 6(1)(b) GDPR) for handling your enquiry and your conversation with the assistant; the controller’s legitimate interest (art. 6(1)(f) GDPR) for protecting the site against automated abuse and for traffic analysis. Analytics cookies are set by a third-party service when the site’s pages open; if you do not want that, use your browser settings or an opt-out before using the site.
You have the right of access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection to processing based on legitimate interest, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Your data is processed and stored outside the European Economic Area, including in the Russian Federation and in other countries where the service providers listed in section 4 are located. There is no European Commission adequacy decision covering these transfers, and no appropriate safeguards under art. 46 GDPR are in place. You are informed that, as a result, enforceable data subject rights and effective legal remedies may not be available to you in the recipient countries. By submitting data through this site you give your explicit consent to the transfer within the meaning of art. 49(1)(a) GDPR. If that is not acceptable to you, contact the controller by email directly rather than through the site’s forms.
You have the right to lodge a complaint with the supervisory authority in your country of habitual residence, place of work or place of the alleged infringement.
11. Changes to this policy
This policy may be amended. The current version is always available at kibin.pro/en/privacy/, and the date of the latest revision is shown at the top. Material changes take effect on publication.