ENRU
Sign inGet started

Consent to the Processing of Personal Data

Saint Petersburg, Russia. Revision 1.0 of 30 September 2026, effective from the moment of publication at ota.aistastudio.ru

This English text is a translation. In case of discrepancy the Russian version at https://ota.aistastudio.ru/ru/consent prevails.

This consent is given in accordance with Article 9 of Russian Federal Law No. 152-FZ "On Personal Data" of 27.07.2006 and is given by a separate checkbox on the account registration form for the Otapush service (https://ota.aistastudio.ru). The Operator records the revision of the consent, the date and the IP address of its acceptance as proof of consent (Article 9(3) of 152-FZ).

1. Data subject

The individual completing account registration in the Otapush service on their own behalf or on behalf of the organisation they represent (hereinafter the "Subject").

2. Operator

Общество с ограниченной ответственностью «СТУДИЯ АИСТА» (ООО «СТУДИЯ АИСТА»), OGRN 1267800056260, TIN (INN) 7814865711, KPP 781401001, address: 197706, г. Санкт-Петербург, вн.тер.г. город Сестрорецк, ул. Всеволода Боброва, д. 30, литера А, помещ. 1-Н, офис 13. Address for enquiries and for withdrawing consent: privacy@aistastudio.ru. Information on notifications filed with Roskomnadzor (Article 22 of 152-FZ) is provided on request to privacy@aistastudio.ru.

3. Purposes of processing

  • registering and maintaining the Subject's account in the service, and providing access to the developer portal and the service API;
  • identifying the Subject at sign-in and when they contact support;
  • determining the applicable plan, counting unique devices (MAU) across the Subject's applications, and billing for the services;
  • accepting payment, issuing a fiscal receipt, and keeping accounting and tax records;
  • sending the Subject legally significant notices related to the provision of the services — changes to the terms, the state of the subscription, replies to their enquiries;
  • keeping the service secure, diagnosing failures and preventing abuse.

4. Categories of personal data

  • email address;
  • the name given at registration;
  • the password — solely as an irreversible hash (bcrypt); the password is never stored in clear text;
  • the account creation date and the assigned plan;
  • payment details: amount, date, payment method (bank card or invoice), payer type (individual or legal entity), payment status, the payment provider's order and payment identifiers;
  • the details supplied by the Subject for invoicing — if the Subject chose invoice payment;
  • the content of enquiries sent to the Operator and the correspondence about them.

The Operator neither receives nor stores full bank card details: they are entered on the payment provider's page.

This consent does not cover the data of the end users of the mobile applications of the Subject or the organisation they represent: the operator of that data is the Subject or that organisation (section 5 of the Privacy Policy).

5. Operations with personal data and means of processing

Collection, recording, systematisation, accumulation, storage, updating (renewal, modification), retrieval, use, transfer to the recipients listed in section 6, depersonalisation, blocking, deletion and destruction — by automated and non-automated means.

The Operator does not take decisions producing legal effects concerning the Subject solely on the basis of automated processing of personal data (Article 16 of 152-FZ).

6. Transfer to third parties

The Subject consents to the transfer of their personal data to the extent necessary to achieve the purposes in section 3:

  • T-Bank JSC (Russian Federation) — accepting payment and issuing a fiscal receipt: the payment amount and description, the order identifier, and the email address the receipt is sent to;
  • "Oblachnye Tekhnologii" LLC (INN 7736279160, Russia) — hosting, Moscow: the Service's servers and the file storage for published updates are located with this party under a lease agreement;
  • "VK Digital Technologies" LLC (Russia) — mail provider for the aistastudio.ru domain: correspondence sent to privacy@aistastudio.ru and otapush@aistastudio.ru;
  • Yandex LLC (Russia) — Yandex Metrika: website visit information — only after consent via "Accept all" (Section 7 of the Privacy Policy);
  • state authorities — upon a substantiated request, in the cases and to the extent provided for by the law of the Russian Federation.

Personal data is not sold and is not transferred to advertising networks or data brokers. The list of recipients is given in section 6 of the Privacy Policy.

7. Term of the consent

The consent is valid for as long as the Subject's account exists and ends when the account is deleted or when the consent is withdrawn as described in section 8.

Certain categories of data are kept longer where the law so requires: payment records — for the periods set by accounting and tax legislation (no less than five years, Article 29(1) of 402-FZ). Retention periods are listed in section 8 of the Privacy Policy.

8. Withdrawal of consent

The consent may be withdrawn by writing to privacy@aistastudio.ru from the account's email address, or by letter to the Operator's registered address. Such requests are handled manually.

Once consent is withdrawn, the Operator stops processing personal data for the purposes based on consent and destroys the data in the manner and within the time limits set out in the Privacy Policy. Withdrawing consent does not stop processing necessary to perform the agreement with the Subject (Article 6(1)(5) of 152-FZ), or processing necessary to discharge the Operator's statutory obligations (Article 6(1)(2) of 152-FZ) — that processing continues to the extent and for the periods established by law.

The Subject confirms that they have read the Privacy Policy, the Terms of Use and the public offer, and gives this consent freely, of their own will and in their own interest.