Confectioner AI · confectioner.io
Personal Data Processing Policy
Version effective 13 August 20261. Operator
The personal data operator is the person or legal entity identified below. The operator determines the purposes and methods of processing in the Confectioner AI service. Operator: ИНДИВИДУАЛЬНЫЙ ПРЕДПРИНИМАТЕЛЬ ФЕДОТОВ СЕРГЕЙ СЕРГЕЕВИЧ. Address: Наименование: ИНДИВИДУАЛЬНЫЙ ПРЕДПРИНИМАТЕЛЬ ФЕДОТОВ СЕРГЕЙ СЕРГЕЕВИЧ ИНН: 423080884552 ОГРНИП: 324420500022884. Privacy contact: circumsolar@gmail.com.
2. Scope and applicable law
This Policy applies to confectioner.io and the local test version. It is designed for the Russian jurisdiction with regard to Federal Law No. 152-FZ on Personal Data, localization requirements, and other applicable Russian rules. Where another country’s mandatory rules apply, the operator must assess them separately.
3. Data we process
Registration and profile data: name, email, selected country, password hash, account role, consent version and time. Service content: messages, recipes, images, voice recordings and transcripts, Word, Excel, PDF and other supported files. Technical data: session identifiers, timestamps, security and diagnostic events. We do not need passport, payment, medical, biometric, or special-category data; do not upload it unless the service explicitly requests it for a lawful purpose.
4. Purposes
We process data to create and secure accounts, keep conversation history, provide AI-assisted answers and file analysis, apply country context, support users, prevent abuse, diagnose failures, and meet legal duties. Advertising and marketing communications require a separate lawful basis and are not covered by this registration consent.
5. Legal basis
Processing is based on the user’s separate, informed consent, performance of the requested service, and the operator’s statutory duties where applicable. Consent is recorded with its version, language, and timestamp. The service does not make decisions that create legal effects solely by automated processing.
6. Operations and retention
Processing may include collection, recording, organization, storage, updating, retrieval, use, transfer to authorized processors, restriction, deletion, and destruction, by automated and mixed methods. Account data and history are kept while the account is active and then only for the period required to complete deletion, resolve security incidents, or satisfy law. Sessions expire after 30 days. Diagnostic retention must be limited by the operator’s production settings.
7. Processors, AI, and cross-border transfer
When AI is configured, the current request and relevant conversation context may be sent through an API to a contracted LLM provider; provider-side response storage is disabled by this service, but provider terms and legally required retention may still apply. The service stores account data and conversation history in its own database; original upload bytes are not retained after the active request. Hosting, monitoring, email, and payment providers may process only the data needed for their function under contracts. Before any cross-border transfer, the operator must complete the assessment and Roskomnadzor actions required by Russian law. Do not upload third-party data without authority.
8. Russian localization and cookies
For Russian citizens, initial collection and recording in the public production version must use a database located in Russia before any permitted subsequent transfer. The current local test stores data on the local development machine and is not a public production deployment. The service uses an essential session cookie and local browser storage for language and install-banner preferences; there are no advertising cookies by default.
9. Your rights
You may request information, access, correction, restriction, deletion, or destruction of your data; withdraw consent; and appeal to Roskomnadzor or a court. Withdrawal does not invalidate prior lawful processing and may make account operation impossible. Send a request from the account email; the operator may verify identity and responds within the statutory period.
10. Security and responsibilities
The operator applies access controls, salted password hashing, encrypted secrets, secure session cookies, request-origin checks, file limits, event monitoring, backups, and incident procedures appropriate to risk. Users must protect credentials and avoid uploading unnecessary secrets or personal data. No internet system can be guaranteed absolutely secure.
11. Registration consent
By selecting the separate consent checkbox and submitting registration, the user freely and specifically authorizes processing of the data listed above for the stated purposes, including authorized processing by AI and infrastructure providers. Consent remains valid until the purposes end or it is withdrawn, subject to mandatory retention. The policy version and confirmation time are recorded.
12. Updates and contact
The current version is published on this page. Material changes require a new notice and, where required, renewed consent. Questions, withdrawals, and data requests: circumsolar@gmail.com.