ENRU
Sign inGet started

Consent to the Processing of Personal Data

Effective date: 28 August 2026 · Applies from the moment of publication at ota.aistastudio.ru

This consent is given in accordance with Article 9 of Russian Federal Law No. 152-FZ "On Personal Data" of 27.07.2006 and is granted by completing account registration in the Otapush service (https://ota.aistastudio.ru) — by pressing the account creation button.

1. Data subject

The individual completing account registration in the Otapush service (hereinafter the "Subject"), acting on their own behalf or on behalf and on the instructions of the organisation they represent.

2. Operator

Общество с ограниченной ответственностью «СТУДИЯ АИСТА» (ООО «СТУДИЯ АИСТА»), OGRN 1267800056260, TIN (INN) 7814865711, KPP 781401001, address: 197706, г. Санкт-Петербург, вн.тер.г. город Сестрорецк, ул. Всеволода Боброва, д. 30, литера А, помещ. 1-Н, офис 13. Address for enquiries and for withdrawing consent: privacy@aistastudio.ru. Roskomnadzor personal data processing notification (Article 22 of 152-FZ): уведомление готовится к подаче.

3. Purposes of processing

  • registering and maintaining the Subject's account in the service, and providing access to the developer portal and the service API;
  • identifying the Subject at sign-in and when they contact support;
  • determining the applicable plan, counting unique devices (MAU) across the Subject's applications, and billing for the services;
  • accepting payment, issuing a fiscal receipt, and keeping accounting and tax records;
  • sending the Subject legally significant notices related to the provision of the services — changes to the terms, the state of the subscription, replies to their enquiries;
  • keeping the service secure, diagnosing failures and preventing abuse.

4. Categories of personal data

  • email address;
  • the name given at registration;
  • the password — solely as an irreversible hash (bcrypt); the password is never stored in clear text;
  • the account creation date and the assigned plan;
  • payment details: amount, date, payment method (bank card or invoice), payer type (individual or legal entity), payment status, the payment provider's order and payment identifiers;
  • the details supplied by the Subject for invoicing — if the Subject chose invoice payment;
  • the content of enquiries sent to the Operator and the correspondence about them.

The Operator neither receives nor stores full bank card details: they are entered on the payment provider's page.

This consent does not cover the data of the end users of the Subject's mobile applications: with respect to that data the Subject is the personal data operator, and the Operator processes it on the Subject's instructions (Article 6(3) of 152-FZ). The arrangement is described in section 5 of the Privacy Policy.

5. Operations with personal data and means of processing

Collection, recording, systematisation, accumulation, storage, updating (renewal, modification), retrieval, use, transfer to the recipients listed in section 6, depersonalisation, blocking, deletion and destruction — by automated and non-automated means.

The Operator does not take decisions producing legal effects concerning the Subject solely on the basis of automated processing of personal data (Article 16 of 152-FZ).

6. Transfer to third parties

The Subject consents to the transfer of their personal data to the extent necessary to achieve the purposes in section 3:

  • T-Bank JSC (Russian Federation) — accepting payment and issuing a fiscal receipt: the payment amount and description, the order identifier, and the email address the receipt is sent to;
  • state authorities — upon a substantiated request, in the cases and to the extent provided for by the law of the Russian Federation.

Personal data is not sold and is not transferred to advertising networks or data brokers. All of the recipients listed are located in the Russian Federation; no cross-border transfer of personal data takes place.

7. Term of the consent

The consent is valid for as long as the Subject's account exists and ends when the account is deleted or when the consent is withdrawn as described in section 8.

Certain categories of data are kept longer where the law so requires: payment records — for the periods set by accounting and tax legislation (no less than five years, Article 29(1) of 402-FZ). Retention periods are listed in section 8 of the Privacy Policy.

8. Withdrawal of consent

The consent may be withdrawn at any time by writing to privacy@aistastudio.ru from the account's email address, or by letter to the Operator's registered address. There is no automated means of withdrawing consent or deleting an account in the portal as of this revision: such requests are handled manually.

Once consent is withdrawn, the Operator stops processing personal data for the purposes based on consent and destroys the data in the manner and within the time limits set out in the Privacy Policy. Processing necessary to perform the agreement with the Subject (Article 6(1)(5) of 152-FZ) and to discharge the Operator's statutory obligations (Article 6(1)(2) of 152-FZ) may continue after withdrawal, to the extent and for the periods established by law. Withdrawing consent while the account is active means the services can no longer be provided and terminates the agreement.

The Subject hereby confirms that they have read the Privacy Policy, the Terms of Use and the public offer, and gives this consent freely, of their own will and in their own interest.