Privacy Policy

Effective date: July 28, 2026 · Terms of Service

This Privacy Policy describes how Solf-ai (“we”, “us”) processes personal data when you use our website and application (the “Service”). It should be read together with our Terms of Service. Where Russian law applies, processing is also guided by Federal Law No. 152-FZ “On Personal Data”.

Jump to: Consent to data processing · Cookies

1. Operator / contact

Solf-ai is operated as an independent online service. Operator: Korenkova M.I., INN 7729 8445 7520, self-employed (NPD), Moscow. Contact: Telegram @vwirex.

2. Categories of data we process

• Account & identity: when you sign in with Google or VK — typically name, email, profile picture URL, provider id.
• Messages & prompts: text and limited conversation context sent to our backend for AI replies.
• Images you attach: sent to our backend for analysis via Google Gemini.
• Local storage: chats and preferences in the browser (localStorage).
• Consent flags: that you accepted legal consents on sign-in (stored locally).
• Technical data: IP, timestamps, request metadata for security and operation.
• Payments: plan/payment status via YooKassa; card numbers are handled by YooKassa and never reach us.

We ask you not to send us data you are not entitled to disclose, other people’s personal data, or special categories of data (health, beliefs, and similar).

3. Purposes and legal grounds

Purpose	Ground
Providing the Service, generating AI replies	Performance of the contract (Terms of Service); your consent
Authentication, account security	Performance of the contract
Enforcing plan limits and usage counters	Performance of the contract
Processing payments, issuing receipts	Performance of the contract; statutory tax duties
Protection against abuse and fraud	Legitimate interests of the operator
Handling requests and complaints	Statutory duty; performance of the contract

Actions performed with data: collection, recording, systematisation, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), blocking, erasure and destruction — by automated and non-automated means.

We do not process special categories of personal data or biometric data, do not use your data for advertising profiling, and do not take decisions producing legal effects for you solely by automated means.

4. AI processing and other recipients

We do not sell your personal data. To generate replies your prompts are transmitted to AI providers:

• DeepSeek — text replies (your message and limited conversation context).
• Google Gemini — analysis of images you attach, together with the accompanying text.

We aim not to send account name/email/phone to the model as separate profile fields; if you type them in chat, they may appear in the prompt.

Other processors we engage: Yandex Cloud (backend hosting and computing), the database and session storage provider, Google and VK (sign-in), YooKassa (payments), hosting/CDN for the website, and optionally email/SMS delivery providers for one-time codes. Each of them processes only the data needed for its function.

4.1. Cross-border transfer

Some providers listed above are located outside the Russian Federation (including the United States for Google/Gemini). Accordingly, providing the corresponding features involves cross-border transfer of personal data, which is carried out with your consent under Article 12 of Federal Law No. 152-FZ. If you do not want such transfer, do not use the features concerned (AI replies and image analysis) and do not give the corresponding consent.

5. Retention

• Browser data (chats, preferences, consent flags) — until you clear your browser data or delete the account.
• Account and chat data on the server — while the account exists; after a deletion request, deleted within 30 days.
• Sessions — up to 30 days from sign-in, or until you sign out.
• One-time sign-in codes — 10 minutes.
• Payment records (fact, amount, date, plan) — for the period required by tax law, at least 4 years; these records are not deleted at request before that period expires.
• Technical logs — as needed for security, normally no longer than 12 months.

Deletion requests: @vwirex.

6. Your rights

You have the right to: obtain information about the processing of your data and access to it; require clarification, blocking or erasure of data that is incomplete, outdated, inaccurate, unlawfully obtained or no longer needed; withdraw your consent; object to processing; and lodge a complaint with a supervisory authority or in court.

Send requests to Telegram @vwirex. We reply within 30 days of receipt, as required by law. Under Russian law you may also contact Roskomnadzor as the supervisory authority for personal data.

7. Children / age

Not directed at children under 13. Paid plans are intended for users aged 18+.

8. Security

Measures such as HTTPS for API calls. No method of transmission over the Internet is 100% secure.

9. Cookies and similar technologies

We mainly use first-party storage (cookies / localStorage / session storage), not third-party advertising cookies.

• Necessary / functional: language, theme, font, UI preferences; auth/session cache; local chat history; plan/usage counters; consent flags (solfai_cookie_consent, solfai_pd_consent).
• We do not use third-party advertising or ad-network analytics cookies.

By enabling the sign-in consent switch, you agree to this use. Stored as solfai_cookie_consent=accepted. Clear site data in the browser to remove it; some features may stop working.

10. Consent to personal data processing

By enabling the sign-in consent switch (or otherwise expressly agreeing), you give Solf-ai (operator: Korenkova M.I., INN 7729 8445 7520) consent to process your personal data as described in this Policy, namely: account data from Google/VK (name, email, profile picture, provider id); chat text, conversation context and images you attach; plan, usage counters and technical data (IP, timestamps, request metadata); payment status from YooKassa.

Purposes: providing the Service, authentication, limits and plans, payments, security, support, compliance with law. Actions: collection, recording, systematisation, accumulation, storage, clarification, extraction, use, transfer to the processors listed in section 4, blocking, erasure and destruction, by automated and non-automated means.

Cross-border transfer: the consent also covers transfer of data to providers outside the Russian Federation (including the United States) where this is needed for the features you use — see section 4.1.

Validity: the consent is given for the period during which you use the Service and the retention periods in section 5 apply.

Withdrawal: you may withdraw your consent at any time by writing to @vwirex and/or requesting deletion of your data. Withdrawal does not affect the lawfulness of processing carried out beforehand, nor the retention of payment records that we must keep under tax law. Without this consent, account features requiring personal data may be unavailable.

11. Changes

We may update this Policy; the effective date above will change.

12. Contact

Solf-ai · Korenkova M.I. · INN 7729 8445 7520 · self-employed (NPD), Moscow · Telegram: @vwirex · Terms of Service