Privacy Policy

1. Data we process

Data you provide yourself through the brief form or in the AI cockroach chat:

• your name or how to address you;
• a contact: Telegram, WhatsApp, email address or phone number;
• project details: type, stage, approximate budget and timeline, description, an attached file (if you add one);
• AI chat messages and, if you use the microphone, voice messages (processed for speech recognition and never published).

Technical data collected automatically and pseudonymously:

• a random visitor and session ID stored in your browser's localStorage;
• pages viewed, referrer, UTM tags, browser language and time zone, device type and screen size;
• country derived from the time zone (IP addresses are not stored for analytics; they are used only briefly to prevent abuse — rate limiting).

We do not process special categories of data and do not make decisions with legal effects based solely on automated processing.

2. Purposes and legal bases

• replying to your request, preparing an offer and an estimate — your consent (Art. 6(1)(a) GDPR) and steps prior to entering a contract (Art. 6(1)(b) GDPR);
• operating the AI chat, including voice replies — your consent;
• anonymous traffic statistics and improving the Site — the Controller's legitimate interest (Art. 6(1)(f) GDPR); this data does not identify you;
• protecting the Site from spam and abuse — legitimate interest.

3. Recipients

The Controller does not sell personal data or share it for marketing. The following processors act on the Controller's behalf:

• a hosting provider (servers in the Netherlands) — database storage;
• Telegram (Telegram Messenger Inc.) — delivering new-request notifications to the Controller;
• OpenRouter, Inc. (USA) and AI model providers connected through it — processing AI chat messages and voice. Only the conversation text/audio is shared, not your contact details unless you type them in the chat.

This involves transfers outside the EEA, including to the USA. Such transfers are based on your explicit consent (Art. 49(1)(a) GDPR) and the processors' contractual safeguards.

4. Retention

• requests and related correspondence — until the purpose is fulfilled, but no longer than 3 years after the last contact, or until you withdraw consent;
• files attached to requests — no longer than 1 year;
• AI chat history — no longer than 1 year;
• pseudonymous statistics — up to 3 years.

After that, data is deleted or anonymised.

5. Your rights

You have the right to access your data, rectify or erase it, restrict processing, object to processing based on legitimate interest, receive your data in a portable format, withdraw consent at any time, and lodge a complaint with a supervisory authority (in the EU — the data protection authority of your country; in Russia — Roskomnadzor).

To exercise your rights, email kukarkin1993@icloud.com. We reply within one month (GDPR) and within 10 business days for requests under 152-FZ.

6. Cookies and local storage

The Site uses no advertising or third-party tracking cookies. We store in your browser: the chosen language (the “locale” cookie), pseudonymous visitor and session IDs, and UTM tags of the current visit (localStorage/sessionStorage). You can clear them in your browser settings — the Site will keep working.

7. Security

The Controller applies legal, organisational and technical measures: HTTPS encryption, restricted admin access, request attachments stored outside public access, admin action logging, rate limiting and backups.

8. Changes

The Controller may update this Policy. The current version is always available on this page; its date is shown at the top.