Privacy Policy

This Privacy Policy explains how ContractAI (“Operator”, “we”) processes personal data when you use our AI-assisted document service available at dogovarai.ru and related properties (the “Service”).

If you are in the European Economic Area, the UK, or Switzerland, additional rights under the GDPR (or local equivalent) may apply alongside this Policy.

1. Data controller and contact

1.1. The Operator is responsible for personal data described here. For privacy requests, email support@dogovarai.ru with the subject line “Privacy request”.

1.2. By using the Service, you acknowledge this Policy. If you disagree, please stop using the Service.

2. Categories of data and purposes

2.1. We may process:

  • Account data: email, optional display name, password hashes;
  • Technical data: IP address, cookies, device/browser metadata, approximate location inferred from IP;
  • Content you submit: prompts, fields, and any personal data you type into forms for document generation;
  • Payment metadata: transactions are handled by payment processors; we typically receive status, amounts, and limited card metadata (such as last four digits);
  • Support communications you send us.

2.2. We use personal data to:

  • provide, secure, and improve the Service;
  • authenticate users and manage subscriptions;
  • invoke AI providers to generate text you request;
  • conduct analytics in aggregated or de-identified form where possible;
  • comply with law and respond to lawful requests.

2.3. Legal bases (where GDPR applies) may include contract performance, legitimate interests (such as securing accounts and improving the product), compliance with legal obligations, and consent where required.

2.4. Inputs you provide may be transmitted to sub-processors such as AI model hosts (for example YandexGPT or others we configure) solely to fulfil your request. We select providers that commit to confidentiality and security appropriate to the processing.

3. International transfers

3.1. We may process data in multiple countries. Where data moves from the EEA/UK/Switzerland to other countries, we rely on appropriate safeguards such as Standard Contractual Clauses or other mechanisms recognized by regulators, unless an exception applies.

4. Retention and security

4.1. We retain account data while your account is active and for a limited period afterward for security, disputes, and legal compliance.

4.2. Ephemeral generation inputs may be deleted automatically after a short window unless you save the document in your account—see in-product notices or support for current retention windows.

4.3. We apply technical and organizational measures including encryption in transit, access controls, and monitoring, but no method of transmission or storage is completely secure.

5. Your rights

5.1. Depending on your location, you may have rights to access, rectify, delete, restrict, or port your data, and to object to certain processing. You may also lodge a complaint with a supervisory authority in your country or region.

5.2. To exercise rights, contact support@dogovarai.ru. We will respond within the timeframes required by applicable law.

5.3. The Service is not directed to children. If you believe we collected data from a child without appropriate consent, contact us so we can delete it.

6. Changes

6.1. We may update this Policy from time to time. Material changes will be posted on the Site with an updated effective date.