Version 2026-10-21.1
Personal-data processing policy
Account data and limits of customer-conversation processing. The policy is not authorization for every transfer.
1. Controller and purposes
The controller for account/accounting data is Russian individual entrepreneur Kirill Anatolyevich Losinsky, INN 740415769736; support@api-senden.ru, address below. For conversations/contacts the Provider generally processes on the user-controller’s instructions; determining its own purpose brings its own duties irrespective of the role’s label.
Registration, contract, access, security and support use name, email, password hash, IDs, document confirmations, sessions, IP, user-agent and submissions; accounting uses payer name/tax ID, invoice, amount and bank evidence. Grounds are necessary contractual steps, legal duties, proportionate legitimate security/legal-claims interests only where applicable law recognizes this ground, and separate consent where needed. Excessive data are not requested.
2. Instructed data and recipients
Contacts, phones, chat IDs, messages, statuses, files and messenger authorization are processed only for requested functions. No own advertising profiling or AI training uses them. Independent disclosure to external AI is not authorized. Exclusively automated decisions with significant legal effects are not provided.
Operations are necessary collection, recording, organization, storage, correction, retrieval, use, designated transmission, restriction and deletion. Authorized persons and lawfully engaged hosting/email infrastructure, bank, applicable fiscal-register/data operators, chosen messengers and user webhooks receive access. Public disclosure is not authorized. Actual providers, locations and safeguards are disclosed before agreed processing and upon lawful request.
3. International processing
Hosting all data in a particular country is not guaranteed. Before the relevant operations, the Provider must check applicable localization requirements, recipients, notices and restrictions and agree necessary processing arrangements with the user. Where GDPR applies, lawful grounds and international-transfer safeguards must be established; where PIPL applies, requirements for notices, separate consent, assessments and lawful mechanisms must be fulfilled. Ordinary acceptance does not replace them. These standard terms do not confirm fulfilment of special requirements. Before the relevant operations, the Provider must supply the necessary information, conclude required separate agreements and fulfil its own applicable duties.
Required GDPR/PIPL representatives and specific agreements must be identified before relevant activities. This policy neither appoints a fictitious representative nor constitutes standard contractual transfer clauses.
4. Retention and security
Account data are retained during the contract; when a purpose ends, processing ceases and lawful deletion periods apply, except the minimum for accounting, claims and defence. Unverified registrations are technically cleaned after seven days; sessions/tokens expire. Early history deletion may be requested, but lawful deletion on purpose expiry does not depend on a command and includes applicable backups.
HTTPS, password hashes, permissions, workspace separation, request limits, audit and private directories are used; selected secrets are vault-protected. Encryption of every native messenger database and absolute immunity are not promised. Incidents trigger statutory notices to authorities/persons and, for instructed data, notice to the user without undue delay.
5. Rights and contact
Contact support@api-senden.ru for access, correction, deletion, restriction, recipient information, objection and applicable portability, with proportionate identity checks. Consent is separately withdrawable free of charge in the dashboard/email as easily as given; earlier lawful processing and independent grounds remain. Applicable periods apply; GDPR normally requires a month with lawful extensions.
Complaints to Roskomnadzor, competent EU/Chinese authorities and judicial protection remain where their laws apply. Refusing optional consent does not prevent contractual functions. A session cookie is necessary; advertising/analytics trackers are not connected. New optional purposes/technologies need assessment and separate consent where required. Revisions are dated and published.
Provider details
Индивидуальный предприниматель Лосинский Кирилл Анатольевич
Russian tax ID (INN) 740415769736 · Sole trader registration (OGRNIP) 317745600124301
456234, г. Златоуст, кв-л Северо-Запад 2-й, 20-28
support@api-senden.ru · +7 (351) 367-22-52
Bank: Отделение № 8597 ПАО Сбербанк, г. Челябинск
Russian bank code (BIK) 047501602
Settlement account 40802810072000015606
Correspondent account 30101810700000000602
No Russian VAT charged under the Russian AUSN regime. Applicable foreign tax duties remain.